Update malicious_php.txt
Update malicious_php.txt

After the second look, have moved these trails to ```nymaim.txt```. 

```/order588.php``` can detect phishing trails instead.
stamparm/maltrail,stamparm/maltrail,stamparm/maltrail,stamparm/maltrail