Correlation Snapshot
How attacker behavior clusters inside suspicious pages from the latest run.
Lure -> Execution Correlation
4 sites (10.5%)
Suspicious sites that combine social lures and execution indicators.
Clipboard -> Execution Correlation
4 sites (10.5%)
Sites where clipboard abuse appears alongside command execution behavior.
Redirect -> Obfuscation Correlation
19 sites (50.0%)
Sites blending redirect staging with encoded or obfuscated script content.
Full Chain (Lure + Clipboard + Execution)
4 sites (10.5%)
Potential end-to-end social engineering chains in a single page sample.