{ "version": "0", "id": "ddfd563e-49f6-1f59-6d1e-c67158ab5eec", "detail-type": "Email Bounced", "source": "aws.ses", "account": "339712845857", "time": "2025-12-19T02:33:55Z", "region": "us-east-2", "resources": [ "arn:aws:ses:us-east-2:339712845857:configuration-set/relay-outbound" ], "detail": { "eventType": "Bounce", "bounce": { "feedbackId": "010f019b3474e821-12fa60c3-e47e-4289-a4b6-47ac55d996a2-000000", "bounceType": "Undetermined", "bounceSubType": "Undetermined", "bouncedRecipients": [ { "emailAddress": "phishing@paypal.com" } ], "timestamp": "2025-12-19T02:33:55.434Z" }, "mail": { "timestamp": "2025-12-19T02:33:53.244Z", "source": "andreas.knuth@bayarea-cc.com", "sourceArn": "arn:aws:ses:us-east-2:339712845857:identity/bayarea-cc.com", "sendingAccountId": "339712845857", "messageId": "010f019b3474df5c-c634e6cc-8ebb-4b13-957e-0e9b84e39917-000000", "destination": [ "phishing@paypal.com" ], "headersTruncated": False, "headers": [ { "name": "Received", "value": "from mail.email-srvr.com (mail.email-srvr.com [2.56.188.138]) by email-smtp.amazonaws.com with SMTP (SimpleEmailService-d-V0JPVCFGF) id XSfVNEIjPhLtO2NEYG88 for phishing@paypal.com; Fri, 19 Dec 2025 02:33:53 +0000 (UTC)" }, { "name": "DKIM-Signature", "value": "v=1; a=rsa-sha256; c=relaxed/simple; d=bayarea-cc.com; s=mail; t=1766111632; bh=ycI1TnY3sqcJF4JmY2LCeBTlZ8Zv+aR+7YbjD2Y1n0Y=; h=From:To:Subject:Reply-To:In-Reply-To:References; b=YQ/EtiYxQIi4Ykwx4ELKXP6gd5u+sev5/GnN97t2rkfxFjrGAZHFdUS9IHipOi/KG5VCAbW89ocW6vPZrdC9SpSxrxr+NMncceSBfvun7SgMQM7ja12clsMfOPebbLsp+TEoSwo43QW4IYsNJep8B7OTInTpadABgeiKd+yWe0BLfsa56tGr6OdIcCBKmxXm/qEZoEjkXooYWu0A5yWCrfpfpdvgZTKKaArturPAtiPUcQiUuDRx7jMkDQkofmBNTtrDbmaLzfEbPqfI2usavV7DCDpa70N6/fbVY2RgnFpcDYP3zd1gf4qDGdnsy9+8B848D1QV/HrEVDsh/Opoxw==" }, { "name": "Received", "value": "from app.email-bayarea.com (roundcube-new.mail_network [172.18.0.5]) (Authenticated sender: andreas.knuth@bayarea-cc.com) by mail.email-srvr.com (Postfix) with ESMTPSA id 9685E2E60092 for ; Thu, 18 Dec 2025 20:33:52 -0600 (CST)" }, { "name": "MIME-Version", "value": "1.0" }, { "name": "Date", "value": "Thu, 18 Dec 2025 20:33:52 -0600" }, { "name": "From", "value": "andreas.knuth@bayarea-cc.com" }, { "name": "To", "value": "phishing@paypal.com" }, { "name": "Subject", "value": "Fwd: A one-time merchant setup fee of $249.99 has been applied and will appear on your bank statement wit" }, { "name": "Reply-To", "value": "andreas.knuth@bayarea-cc.com" }, { "name": "Mail-Reply-To", "value": "andreas.knuth@bayarea-cc.com" }, { "name": "In-Reply-To", "value": "<6061d865685c1bb406c127f32451d22d@bayarea-cc.com>" }, { "name": "References", "value": " <6061d865685c1bb406c127f32451d22d@bayarea-cc.com>" }, { "name": "Message-ID", "value": "" }, { "name": "X-Sender", "value": "andreas.knuth@bayarea-cc.com" }, { "name": "Content-Type", "value": "multipart/alternative; boundary='=_eb88e98e1904b7ce5ebf2be21b8909fd'" } ], "commonHeaders": { "from": [ "andreas.knuth@bayarea-cc.com" ], "replyTo": [ "andreas.knuth@bayarea-cc.com" ], "date": "Thu, 18 Dec 2025 20:33:52 -0600", "to": [ "phishing@paypal.com" ], "messageId": "010f019b3474df5c-c634e6cc-8ebb-4b13-957e-0e9b84e39917-000000", "subject": "Fwd: A one-time merchant setup fee of $249.99 has been applied and will appear on your bank statement wit" }, "tags": { "ses:source-tls-version": [ "TLSv1.3" ], "ses:operation": [ "SendSmtpEmail" ], "ses:configuration-set": [ "relay-outbound" ], "ses:source-ip": [ "2.56.188.138" ], "ses:from-domain": [ "bayarea-cc.com" ], "ses:caller-identity": [ "bizmatch.net" ] } } } }