8 attacks abused a trusted vendor's URL rewriting
The link was rewritten by a security vendor, scanned clean, then redirected to a credential-harvesting page afterwards. Any control that checks only the initial URL or the domain reputation passes these through.
Detections
64
Blocked
46
Data entry prevented
26
Bypassed
3
Requires approval
Impersonating government
8
64 records
| GWY-2026-05200 | National Cyber Crime Reporting Portal https://cybercrime-report-portal.co.in/file | Impersonated government portal impersonates National Cyber Crime Reporting Portal | Nitin Patel | blocked | — | Critical | 20 days ago | |
| GWY-2026-05201 | Department of Citizen Services login https://citizenservices-gov-in.secure-login.net/auth | Pixel-perfect phishing replica impersonates Department of Citizen Services | Tanvi Chopra | search | blocked | — | High | 2 days ago |
| GWY-2026-05202 | Citizen Services https://citzenservices.gov.in.example.io/ | Typosquatted look-alike domain impersonates Department of Citizen Services | Rekha Saxena | blocked | Prevented | High | 18 days ago | |
| GWY-2026-05203 | Microsoft 365 sign-in https://urldefense.example.com/v3/__https://harvest.example.ru/login__ | Abused URL-rewriting service impersonates Microsoft | Chetan Sharma | chat | blocked | — | High | 29 days ago |
| GWY-2026-05204 | Pension KYC verification https://pension-verification.example.biz/kyc | Credential harvesting form impersonates State Pension Directorate | Aarav Rao | advertisement | blocked | — | Critical | 8 days ago |
| GWY-2026-05205 | Scholarship status https://scholarship-status-check.example.app/ | AI-generated phishing site impersonates Education Directorate | Rajesh Mehta | bypassed | — | Medium | 28 days ago | |
| GWY-2026-05206 | Document shared with you https://short.example/x9k2 → https://a.example → https://final-harvest.example | Malicious redirect chain | Rahul Gupta | blocked | Prevented | High | 21 days ago | |
| GWY-2026-05207 | Beneficiary data collection survey https://forms.example-survey.net/beneficiary-data | Personal data entry into an untrusted site | Suresh Bhatt | warned | Prevented | High | 27 days ago | |
| GWY-2026-05208 | National Cyber Crime Reporting Portal https://cybercrime-report-portal.co.in/file | Impersonated government portal impersonates National Cyber Crime Reporting Portal | Ishaan Mishra | chat | blocked | — | Critical | yesterday |
| GWY-2026-05209 | Department of Citizen Services login https://citizenservices-gov-in.secure-login.net/auth | Pixel-perfect phishing replica impersonates Department of Citizen Services | Arjun Desai | search | bypassed | — | High | 14 days ago |
| GWY-2026-05210 | Citizen Services https://citzenservices.gov.in.example.io/ | Typosquatted look-alike domain impersonates Department of Citizen Services | Farhan Kaur | direct | warned | — | Critical | 20 days ago |
| GWY-2026-05211 | Microsoft 365 sign-in https://urldefense.example.com/v3/__https://harvest.example.ru/login__ | Abused URL-rewriting service impersonates Microsoft | Kiran Iyer | advertisement | blocked | — | Critical | 2 days ago |
| GWY-2026-05212 | Pension KYC verification https://pension-verification.example.biz/kyc | Credential harvesting form impersonates State Pension Directorate | Simran Chauhan | search | blocked | — | Medium | 29 days ago |
| GWY-2026-05213 | Scholarship status https://scholarship-status-check.example.app/ | AI-generated phishing site impersonates Education Directorate | Vandana Singh | search | blocked | — | Critical | 2 days ago |
| GWY-2026-05214 | Document shared with you https://short.example/x9k2 → https://a.example → https://final-harvest.example | Malicious redirect chain | Yash Kulkarni | warned | — | Medium | 29 days ago | |
| GWY-2026-05215 | Beneficiary data collection survey https://forms.example-survey.net/beneficiary-data | Personal data entry into an untrusted site | Anil Ahluwalia | blocked | Prevented | High | 29 days ago | |
| GWY-2026-05216 | National Cyber Crime Reporting Portal https://cybercrime-report-portal.co.in/file | Impersonated government portal impersonates National Cyber Crime Reporting Portal | Manish Saxena | advertisement | blocked | Prevented | High | 11 days ago |
| GWY-2026-05217 | Department of Citizen Services login https://citizenservices-gov-in.secure-login.net/auth | Pixel-perfect phishing replica impersonates Department of Citizen Services | Imran Khanna | warned | — | Medium | last month | |
| GWY-2026-05218 | Citizen Services https://citzenservices.gov.in.example.io/ | Typosquatted look-alike domain impersonates Department of Citizen Services | Nitin Patel | blocked | Prevented | Critical | 10 days ago | |
| GWY-2026-05219 | Microsoft 365 sign-in https://urldefense.example.com/v3/__https://harvest.example.ru/login__ | Abused URL-rewriting service impersonates Microsoft | Tanvi Chopra | blocked | Prevented | Critical | 28 days ago | |
| GWY-2026-05220 | Pension KYC verification https://pension-verification.example.biz/kyc | Credential harvesting form impersonates State Pension Directorate | Rekha Saxena | social | allowed with notice | — | Medium | 4 days ago |
| GWY-2026-05221 | Scholarship status https://scholarship-status-check.example.app/ | AI-generated phishing site impersonates Education Directorate | Chetan Sharma | chat | blocked | — | Medium | 23 days ago |
| GWY-2026-05222 | Document shared with you https://short.example/x9k2 → https://a.example → https://final-harvest.example | Malicious redirect chain | Aarav Rao | search | blocked | Prevented | Critical | 22 days ago |
| GWY-2026-05223 | Beneficiary data collection survey https://forms.example-survey.net/beneficiary-data | Personal data entry into an untrusted site | Rajesh Mehta | search | blocked | Prevented | High | 28 days ago |
| GWY-2026-05224 | National Cyber Crime Reporting Portal https://cybercrime-report-portal.co.in/file | Impersonated government portal impersonates National Cyber Crime Reporting Portal | Rahul Gupta | blocked | Prevented | Medium | 16 days ago | |
| GWY-2026-05225 | Department of Citizen Services login https://citizenservices-gov-in.secure-login.net/auth | Pixel-perfect phishing replica impersonates Department of Citizen Services | Suresh Bhatt | blocked | Prevented | Critical | 23 days ago | |
| GWY-2026-05226 | Citizen Services https://citzenservices.gov.in.example.io/ | Typosquatted look-alike domain impersonates Department of Citizen Services | Ishaan Mishra | search | blocked | — | Critical | 13 days ago |
| GWY-2026-05227 | Microsoft 365 sign-in https://urldefense.example.com/v3/__https://harvest.example.ru/login__ | Abused URL-rewriting service impersonates Microsoft | Arjun Desai | blocked | — | High | 28 days ago | |
| GWY-2026-05228 | Pension KYC verification https://pension-verification.example.biz/kyc | Credential harvesting form impersonates State Pension Directorate | Farhan Kaur | blocked | — | Medium | 16 days ago | |
| GWY-2026-05229 | Scholarship status https://scholarship-status-check.example.app/ | AI-generated phishing site impersonates Education Directorate | Kiran Iyer | chat | warned | — | Medium | 14 days ago |
1–30 of 64
1 / 3