Abuse 158.220.124.19

mail.buchhaltungs-dienst.com

> Abuse type: Phishing
> Name of the complainer: Jan Tofaute
> Company of the complainer: Gemeinde Altenholz
> The reported URL / IP: 158.220.124.19
> Evidence or logs: Mail header: Received: from exc01.ads.dskbiggruppe.de (172.16.2.141)
by
>  exc01.ads.dskbiggruppe.de (172.16.2.141) with Microsoft SMTP Server
>  (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
>  15.2.2562.29 via Mailbox Transport; Mon, 27 Oct 2025 09:55:12 +0100
> Received: from exc02.ads.dskbiggruppe.de (172.16.2.142) by
>  exc01.ads.dskbiggruppe.de (172.16.2.141) with Microsoft SMTP Server
>  (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
>  15.2.2562.29; Mon, 27 Oct 2025 09:55:12 +0100
> Received: from mail.bigbaugruppe.de (172.16.3.201) by
>  exc02.ads.dskbiggruppe.de (172.16.2.142) with Microsoft SMTP Server id
>  15.2.2562.29 via Frontend Transport; Mon, 27 Oct 2025 09:55:12 +0100
> Received: from mail.buchhaltungs-dienst.com (vmi2877103.contaboserver.net
[158.220.124.19])
>  by mail.bigbaugruppe.de  with ESMTPS id 59R8tBOn003377-59R8tBOp003377
>  (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO)
>  for <info@big-bau.de>; Mon, 27 Oct 2025 09:55:11 +0100
> From: Vanessa Neumann <rechnungswesen@buchhaltungs-dienst.com>
> To: Info Postfach BIG-BAU <info@big-bau.de>
> Subject: =?utf-8?B?Qml0dGUgdW0gw5xiZXJtaXR0bHVuZyBvZmZlbmVyIHVuZCB6dWvDvG5mdGln?=
>  =?utf-8?Q?er_Rechnungen?=
> Thread-Topic: =?utf-8?B?Qml0dGUgdW0gw5xiZXJtaXR0bHVuZyBvZmZlbmVyIHVuZCB6dWvDvG5mdGln?=
>  =?utf-8?Q?er_Rechnungen?=
> Thread-Index: AQHcRx9nW2YYPgkSWUmLIh/B1tddAA==
> Date: Mon, 27 Oct 2025 08:55:10 +0000
> Message-ID: <176155531078.4960.16154749340468719306@buchhaltungs-dienst.com>
> Content-Language: de-DE
> X-MS-Exchange-Organization-AuthMechanism: 10
> X-MS-Exchange-Organization-AuthSource: exc02.ads.dskbiggruppe.de
> X-MS-Has-Attach:
> X-MS-Exchange-Organization-Network-Message-Id: 223d4a6a-1af2-4287-f282-08de15368a04
> X-MS-TNEF-Correlator:
> dkim-signature: v=1; a=rsa-sha256; c=simple/simple; d=buchhaltungs-dienst.com;
>  s=default; t=1761555311; bh=D8Ujsr7Ib+Aqb12nEAqjhQ/XpW9iJL3ANIKSSIIpCt8=;
>  h=From:To:Subject:Date:From;
>  b=GSp63JJ1Tk7VXqoL60zX1+JeLvtiuCz9RnXVozSBF1m8kDZlvzD2WlpPXdS06vYcR
>   bjGNTVVndFSnDYoDLKvQN7KCYnRoZAKYws/C4/3+toRLn3C2tkx6uLxB+rUxsBCX0X
>   CDlFXmKsuKtVIPMCfT/AbctKkzXV6EtGfgqwtKmPk1vrsyYwtuh067WjKSRObhcDrJ
>   CKGqZcqiYAFNXCj1nRWnlynIZ+wxsa8yKR7VnTC/GibaVfkehWCTHvAzPtIRQDE2X5
>   Uf0nl355emrYt0extIl24YE9fglzRFAmQRmPr3G/4mlPgdVQECriQdWShPAP8aKVTv
>   QyiSlNlVThRmw==
> Content-Type: text/plain; charset=»utf-8″
> Content-ID: <529643B203C7D540BD5F3DDD88C1890C@dskbiggruppe.de>
> Content-Transfer-Encoding: base64
> MIME-Version: 1.0