Amazon stock phishing with many domains

From : [email protected]

Info from email header :
Received: from (

Phishing link inside the body : and IP is ASN for both domain is Rackmarkt SL. IP is, ASN is Invermae Solutions SL redirect to domain). hosting on namecheap. IP is, ASN is Rackmarkt SL. redirect to registrar is AXC. IP is, ASN is PCextreme B.V. and hosting on godaddy.