"Copies of Policies" spam / windowsmobilever.ru

This slightly odd spam leads to malware on windowsmobilever.ru:

Date:      Thu, 11 Oct 2012 10:55:37 -0500
From:      "Amazon.com" [account-update@amazon.com]
Subject:      RE: DONNIE - Copies of Policies.

Unfortunately, I cannot obtain electronic copies of the Ocean, Warehouse or EPLI policy.

Here is the Package and Umbrella,

and a copy of the most recent schedule.

DONNIE LOCKWOOD,

==========

Date:      Thu, 11 Oct 2012 12:26:25 -0300
From:      accounting@[redacted]
Subject:      RE: MARGURITE - Copies of Policies.

Unfortunately, I cannot obtain electronic copies of the Ocean, Warehouse or EPLI policy.

Here is the Package and Umbrella,

and a copy of the most recent schedule.

MARGURITE Moss,

Anyone who clicks on the link will end up on an exploit kit at [donotclick]windowsmobilever.ru:8080/forum/links/column.php (report here) hosted on:

68.67.42.41 (Fibrenoire , Canada)
203.80.16.81 (MYREN, Malaysia)

These two IPs are currently involved in several malicious spam runs and should be blocked if you can.