Correlation Snapshot
How attacker behavior clusters inside suspicious pages from the latest run.
Lure -> Execution Correlation
8 sites (19.0%)
Suspicious sites that combine social lures and execution indicators.
Clipboard -> Execution Correlation
8 sites (19.0%)
Sites where clipboard abuse appears alongside command execution behavior.
Redirect -> Obfuscation Correlation
20 sites (47.6%)
Sites blending redirect staging with encoded or obfuscated script content.
Full Chain (Lure + Clipboard + Execution)
8 sites (19.0%)
Potential end-to-end social engineering chains in a single page sample.