https://amazon.credit.krelleronline.com/

Impersonating Amazon

Intent: Credential collection

• Domain is not operated by Amazon
• DNS nameservers do not match Amazon's known infrastructure
• Mail servers do not match Amazon's known infrastructure
• Domain not registered through Amazon's usual registrar
• SPF record does not reference Amazon's infrastructure

KOL login page with username and password fields and a submit button