• URLs pretending to be from .gov.in, MoD, DRDO, or emergency alert systems.
• Examples:
  o mod-alerts.in/update-now
  o indianarmy-gov.online/news
  o cyber-def-alert.in/pdf/briefing-update.pdf