So the headers and such indicate that it was indeed sent by Amazon, however no one on Amazon support can verify this as it was also sent to the Security Team according to their email response. There is no news at this point and its most likely to be in some tech articles tomarrow. Keep a look out and comment anything you may find.