Correlation Snapshot
How attacker behavior clusters inside suspicious pages from the latest run.
Lure -> Execution Correlation
7 sites (17.1%)
Suspicious sites that combine social lures and execution indicators.
Clipboard -> Execution Correlation
7 sites (17.1%)
Sites where clipboard abuse appears alongside command execution behavior.
Redirect -> Obfuscation Correlation
21 sites (51.2%)
Sites blending redirect staging with encoded or obfuscated script content.
Full Chain (Lure + Clipboard + Execution)
7 sites (17.1%)
Potential end-to-end social engineering chains in a single page sample.