GrizzlyGrizzly
Recent phishing
Phishing

Impersonating Amazon

Intent: Credential collection

  • Domain is not operated by Amazon
  • DNS nameservers do not match Amazon's known infrastructure
  • Mail servers do not match Amazon's known infrastructure
  • Domain not registered through Amazon's usual registrar
  • SPF record does not reference Amazon's infrastructure

KOL sandbox login page with username and password fields

Scanned 25 days ago · Sep 5, 2026, 12:44 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: sandbox.amazon.v2.krelleronline.com — Grizzly