https://amazon.sevendaygroup.com/

Impersonating Amazon

Intent: Credential collection

• Domain is not operated by Amazon
• DNS nameservers do not match Amazon's known infrastructure
• Mail servers do not match Amazon's known infrastructure
• Domain not registered through Amazon's usual registrar
• SPF record does not reference Amazon's infrastructure

Amazon sign-in page asking for mobile number or email to continue