Amazon Phishing Emails from tamarcom

Received: from tamarcom by sapphire.dnsuk2.com with local (Exim 4.85)
	(envelope-from <tamarcom@sapphire.dnsuk2.com>)
	id 1Zjpmm-0006SU-1k; Wed, 07 Oct 2015 15:33:40 +0100
To: <>, <>
X-PHP-Script: tamarcomputers.co.uk/a-menu/mail.php for 125.160.97.214
From: Amazon.com <auto-confirm@amazon.com>
Subject: Your   Amazon.com    order confirmation for
X-Mailer: PHP/5.4.1
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------ugoidl"
Message-ID: <E1Zjpmm-0006SU-1k@sapphire.dnsuk2.com>
Date: Wed, 7 Oct 2015 15:33:40 +0100
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - sapphire.dnsuk2.com
X-AntiAbuse: Original Domain - .com
X-AntiAbuse: Originator/Caller UID/GID - [509 496] / [47 12]
X-AntiAbuse: Sender Address Domain - sapphire.dnsuk2.com
X-Get-Message-Sender-Via: sapphire.dnsuk2.com: authenticated_id: tamarcom/only user confirmed/virtual account not confirmed
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/tamarcom/public_html/a-menu/mail.php
X-Source-Dir: tamarcomputers.co.uk:/public_html/a-menu
Return-Path: tamarcom@sapphire.dnsuk2.com
X-MS-Exchange-Organization-Network-Message-Id: 37d7b7c8-9d88-4e9e-c567-08d2cf244bf5
X-EOPAttributedMessage: 0