Many email accounts have been opened for the purpose of sending spam, as a result, we have actively begun to delete these addresses from the server. The address shown in the browsers status bar when you move the cursor over the link is http://r.yandex.ru/ which actually takes you to a page hosted by the freebie service tu1. ru. If you go directly to the address (by copying it from the browser window), you will find that there is no such site. The email is missing at least one comma (according to Russian grammar rules)”]
Source: https://securelist.com/summer-in-russia-time-for-a-phishing-trip/30340/