mail.buchhaltungs-dienst.com
> Abuse type: Phishing
> Name of the complainer: Jan Tofaute
> Company of the complainer: Gemeinde Altenholz
> The reported URL / IP: 158.220.124.19
> Evidence or logs: Mail header: Received: from exc01.ads.dskbiggruppe.de (172.16.2.141)
by
> exc01.ads.dskbiggruppe.de (172.16.2.141) with Microsoft SMTP Server
> (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
> 15.2.2562.29 via Mailbox Transport; Mon, 27 Oct 2025 09:55:12 +0100
> Received: from exc02.ads.dskbiggruppe.de (172.16.2.142) by
> exc01.ads.dskbiggruppe.de (172.16.2.141) with Microsoft SMTP Server
> (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
> 15.2.2562.29; Mon, 27 Oct 2025 09:55:12 +0100
> Received: from mail.bigbaugruppe.de (172.16.3.201) by
> exc02.ads.dskbiggruppe.de (172.16.2.142) with Microsoft SMTP Server id
> 15.2.2562.29 via Frontend Transport; Mon, 27 Oct 2025 09:55:12 +0100
> Received: from mail.buchhaltungs-dienst.com (vmi2877103.contaboserver.net
[158.220.124.19])
> by mail.bigbaugruppe.de with ESMTPS id 59R8tBOn003377-59R8tBOp003377
> (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO)
> for <info@big-bau.de>; Mon, 27 Oct 2025 09:55:11 +0100
> From: Vanessa Neumann <rechnungswesen@buchhaltungs-dienst.com>
> To: Info Postfach BIG-BAU <info@big-bau.de>
> Subject: =?utf-8?B?Qml0dGUgdW0gw5xiZXJtaXR0bHVuZyBvZmZlbmVyIHVuZCB6dWvDvG5mdGln?=
> =?utf-8?Q?er_Rechnungen?=
> Thread-Topic: =?utf-8?B?Qml0dGUgdW0gw5xiZXJtaXR0bHVuZyBvZmZlbmVyIHVuZCB6dWvDvG5mdGln?=
> =?utf-8?Q?er_Rechnungen?=
> Thread-Index: AQHcRx9nW2YYPgkSWUmLIh/B1tddAA==
> Date: Mon, 27 Oct 2025 08:55:10 +0000
> Message-ID: <176155531078.4960.16154749340468719306@buchhaltungs-dienst.com>
> Content-Language: de-DE
> X-MS-Exchange-Organization-AuthMechanism: 10
> X-MS-Exchange-Organization-AuthSource: exc02.ads.dskbiggruppe.de
> X-MS-Has-Attach:
> X-MS-Exchange-Organization-Network-Message-Id: 223d4a6a-1af2-4287-f282-08de15368a04
> X-MS-TNEF-Correlator:
> dkim-signature: v=1; a=rsa-sha256; c=simple/simple; d=buchhaltungs-dienst.com;
> s=default; t=1761555311; bh=D8Ujsr7Ib+Aqb12nEAqjhQ/XpW9iJL3ANIKSSIIpCt8=;
> h=From:To:Subject:Date:From;
> b=GSp63JJ1Tk7VXqoL60zX1+JeLvtiuCz9RnXVozSBF1m8kDZlvzD2WlpPXdS06vYcR
> bjGNTVVndFSnDYoDLKvQN7KCYnRoZAKYws/C4/3+toRLn3C2tkx6uLxB+rUxsBCX0X
> CDlFXmKsuKtVIPMCfT/AbctKkzXV6EtGfgqwtKmPk1vrsyYwtuh067WjKSRObhcDrJ
> CKGqZcqiYAFNXCj1nRWnlynIZ+wxsa8yKR7VnTC/GibaVfkehWCTHvAzPtIRQDE2X5
> Uf0nl355emrYt0extIl24YE9fglzRFAmQRmPr3G/4mlPgdVQECriQdWShPAP8aKVTv
> QyiSlNlVThRmw==
> Content-Type: text/plain; charset=»utf-8″
> Content-ID: <529643B203C7D540BD5F3DDD88C1890C@dskbiggruppe.de>
> Content-Transfer-Encoding: base64
> MIME-Version: 1.0