That's normal for phishing emails. If you've never seen that before you're lucky.

Alternatively, they sometimes have browser exploits in the link if you click it that generally target adobe products.

Thanks for the heads up, m8.

  I think we are about due to have a sticky just to give people some general info about Phishing emails. What to watch for and the proper way to address one you are not sure about. i.e. no clicky links in email. If you think one 'may' be legit, go directly to the sites customer service or phone them, etc. Forward suspect emails to abuse@TheRealSite  the email is pretending to be from.

  For an added bonus please post them here on the forums with headers so those of us with too much free time on their hands can find out who is doing it and have a little fun ourselves. ;p

that is likely because spd.docker.ru is not a webserver but is only being used to bounce mails through.....