Two Security Vendors Scanned This Link and Both Said Clean

A high-confidence phishing campaign impersonated Microsoft Office 365 and JULY retirement services, delivering a credential-harvesting payload reachable at shoppingtrends.in by chaining TitanHQ and Cisco URL wrappers so each vendor scanner evaluated the other's infrastructure rather than the malicious final host; three mailboxes were quarantined and the report provides IoCs (shoppingtrends.in, 45.133.74.62, wrapped URLs, sender) plus recommendations to implement recursive URL unwrapping, time-of-click scanning, and behavioral signal layering.