Date: 15 October 2012 07:15
Subject: RE: SANTOS - Copies of Policies.
Unfortunately, I cannot obtain electronic copies of the Ocean, Warehouse or EPLI policy.
Here is the Package and Umbrella,
and a copy of the most recent schedule.
The malicious payload is on [donotclick]linkrdin.ru:8080/forum/links/column.php (report here) hosted on the same IPs as this spam:
220.127.116.11 (Fibrenoire, Canada)
18.104.22.168 (UAB Interneto Vizija, Lithunia)
22.214.171.124 (MYREN, Malaysia)