Subject: Comprobante Fiscal - [ id 655997672 ]

From: Administracion Tributaria <[email-masked]>
Date: Thu, 28 Jan 2021 19:13:01 -0800 (PST)

Spam detection software, running on the system "mx2.eskimo.com",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  Comprobante Descargar todo como.zip archivos adjuntos ( 128
   kb) se anexa el seguiente comprobante fiscal digital Remitente: Servicio
  de Administracion Tributaria. Hemos identificado que tienes pendiente de presentar,
   al 01 de diciembre de 2020, lo siguiente: A qu [...] 

Content analysis details:   (12.5 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                            blocked.  See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [URIs: como.zip]
 0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                            [score: 0.5000]
 1.0 BOTNET                 Relay might be a spambot or virusbot
[botnet0.9,ip=185.20.226.162,rdns=185-20-226-162.ovz.vps.regruhosting.ru,maildomain=eskimo.com,client,ipinhostname]
 0.0 SPF_NONE               SPF: sender does not publish an SPF Record
 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                            mail domains are different
 1.0 BOTNET_IPINHOSTNAME    Hostname contains its own IP address
[botnet_ipinhosntame,ip=185.20.226.162,rdns=185-20-226-162.ovz.vps.regruhosting.ru]
 0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                            provider
                            [impuestos.hacienda[at]hotmail.com]
 1.0 BOTNET_CLIENT          Relay has a client-like hostname
[botnet_client,ip=185.20.226.162,rdns=185-20-226-162.ovz.vps.regruhosting.ru,ipinhostname]
 0.9 FORGED_HOTMAIL_RCVD2   hotmail.com 'From' address, but no
                            'Received:'
 0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.1 DCC_CHECK              Detected as bulk mail by DCC (dcc-servers.net)
 0.0 URI_AZURE_CLOUDAPP     Link to hosted azure web application,
                            possible phishing
 0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
 3.6 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP
                            addr 2)
 0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
                            EnvelopeFrom freemail headers are
                            different
 1.0 RDNS_DYNAMIC           Delivered to internal network by host with
                            dynamic-looking rDNS
 0.0 PDS_RDNS_DYNAMIC_FP    RDNS_DYNAMIC with FP steps
 1.5 SPOOFED_FREEMAIL       No description available.

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

Subject: Comprobante Fiscal - [ id 655997672 ]
From: Administracion Tributaria <[email-masked]>
To: [email-masked]
Date: Thu, 28 Jan 2021 19:13:01 -0800 (PST)

Descargar todo como.zip archivos adjuntos ( 128 kb)

se anexa el seguiente comprobante fiscal digital

Remitente: Servicio de Administracion Tributaria.
Hemos identificado que tienes pendiente de presentar, al 01 de diciembre de 2020, lo siguiente:

A quien corresponda

SERIE Y FOLIO:

248975

FECHA DE EMISION:
28/01/2020

MONTO TOTAL:

7874.20

Servicio de Administracion Tributaria,

+34 1308 808 500 Capitales y areas metropolitanas

29/01/2021 03:09:06