133 lines
5.5 KiB
JSON
133 lines
5.5 KiB
JSON
{
|
|
"version": "0",
|
|
"id": "ddfd563e-49f6-1f59-6d1e-c67158ab5eec",
|
|
"detail-type": "Email Bounced",
|
|
"source": "aws.ses",
|
|
"account": "339712845857",
|
|
"time": "2025-12-19T02:33:55Z",
|
|
"region": "us-east-2",
|
|
"resources": [
|
|
"arn:aws:ses:us-east-2:339712845857:configuration-set/relay-outbound"
|
|
],
|
|
"detail": {
|
|
"eventType": "Bounce",
|
|
"bounce": {
|
|
"feedbackId": "010f019b3474e821-12fa60c3-e47e-4289-a4b6-47ac55d996a2-000000",
|
|
"bounceType": "Undetermined",
|
|
"bounceSubType": "Undetermined",
|
|
"bouncedRecipients": [
|
|
{
|
|
"emailAddress": "phishing@paypal.com"
|
|
}
|
|
],
|
|
"timestamp": "2025-12-19T02:33:55.434Z"
|
|
},
|
|
"mail": {
|
|
"timestamp": "2025-12-19T02:33:53.244Z",
|
|
"source": "andreas.knuth@bayarea-cc.com",
|
|
"sourceArn": "arn:aws:ses:us-east-2:339712845857:identity/bayarea-cc.com",
|
|
"sendingAccountId": "339712845857",
|
|
"messageId": "010f019b3474df5c-c634e6cc-8ebb-4b13-957e-0e9b84e39917-000000",
|
|
"destination": [
|
|
"phishing@paypal.com"
|
|
],
|
|
"headersTruncated": False,
|
|
"headers": [
|
|
{
|
|
"name": "Received",
|
|
"value": "from mail.email-srvr.com (mail.email-srvr.com [2.56.188.138]) by email-smtp.amazonaws.com with SMTP (SimpleEmailService-d-V0JPVCFGF) id XSfVNEIjPhLtO2NEYG88 for phishing@paypal.com; Fri, 19 Dec 2025 02:33:53 +0000 (UTC)"
|
|
},
|
|
{
|
|
"name": "DKIM-Signature",
|
|
"value": "v=1; a=rsa-sha256; c=relaxed/simple; d=bayarea-cc.com; s=mail; t=1766111632; bh=ycI1TnY3sqcJF4JmY2LCeBTlZ8Zv+aR+7YbjD2Y1n0Y=; h=From:To:Subject:Reply-To:In-Reply-To:References; b=YQ/EtiYxQIi4Ykwx4ELKXP6gd5u+sev5/GnN97t2rkfxFjrGAZHFdUS9IHipOi/KG5VCAbW89ocW6vPZrdC9SpSxrxr+NMncceSBfvun7SgMQM7ja12clsMfOPebbLsp+TEoSwo43QW4IYsNJep8B7OTInTpadABgeiKd+yWe0BLfsa56tGr6OdIcCBKmxXm/qEZoEjkXooYWu0A5yWCrfpfpdvgZTKKaArturPAtiPUcQiUuDRx7jMkDQkofmBNTtrDbmaLzfEbPqfI2usavV7DCDpa70N6/fbVY2RgnFpcDYP3zd1gf4qDGdnsy9+8B848D1QV/HrEVDsh/Opoxw=="
|
|
},
|
|
{
|
|
"name": "Received",
|
|
"value": "from app.email-bayarea.com (roundcube-new.mail_network [172.18.0.5]) (Authenticated sender: andreas.knuth@bayarea-cc.com) by mail.email-srvr.com (Postfix) with ESMTPSA id 9685E2E60092 for <phishing@paypal.com>; Thu, 18 Dec 2025 20:33:52 -0600 (CST)"
|
|
},
|
|
{
|
|
"name": "MIME-Version",
|
|
"value": "1.0"
|
|
},
|
|
{
|
|
"name": "Date",
|
|
"value": "Thu, 18 Dec 2025 20:33:52 -0600"
|
|
},
|
|
{
|
|
"name": "From",
|
|
"value": "andreas.knuth@bayarea-cc.com"
|
|
},
|
|
{
|
|
"name": "To",
|
|
"value": "phishing@paypal.com"
|
|
},
|
|
{
|
|
"name": "Subject",
|
|
"value": "Fwd: A one-time merchant setup fee of $249.99 has been applied and will appear on your bank statement wit"
|
|
},
|
|
{
|
|
"name": "Reply-To",
|
|
"value": "andreas.knuth@bayarea-cc.com"
|
|
},
|
|
{
|
|
"name": "Mail-Reply-To",
|
|
"value": "andreas.knuth@bayarea-cc.com"
|
|
},
|
|
{
|
|
"name": "In-Reply-To",
|
|
"value": "<6061d865685c1bb406c127f32451d22d@bayarea-cc.com>"
|
|
},
|
|
{
|
|
"name": "References",
|
|
"value": "<boLgON9OSkmzVWOPwCp8qQ@geopod-ismtpd-45> <6061d865685c1bb406c127f32451d22d@bayarea-cc.com>"
|
|
},
|
|
{
|
|
"name": "Message-ID",
|
|
"value": "<e7ec8070400b953e735b6fbe5439fa1e@bayarea-cc.com>"
|
|
},
|
|
{
|
|
"name": "X-Sender",
|
|
"value": "andreas.knuth@bayarea-cc.com"
|
|
},
|
|
{
|
|
"name": "Content-Type",
|
|
"value": "multipart/alternative; boundary='=_eb88e98e1904b7ce5ebf2be21b8909fd'"
|
|
}
|
|
],
|
|
"commonHeaders": {
|
|
"from": [
|
|
"andreas.knuth@bayarea-cc.com"
|
|
],
|
|
"replyTo": [
|
|
"andreas.knuth@bayarea-cc.com"
|
|
],
|
|
"date": "Thu, 18 Dec 2025 20:33:52 -0600",
|
|
"to": [
|
|
"phishing@paypal.com"
|
|
],
|
|
"messageId": "010f019b3474df5c-c634e6cc-8ebb-4b13-957e-0e9b84e39917-000000",
|
|
"subject": "Fwd: A one-time merchant setup fee of $249.99 has been applied and will appear on your bank statement wit"
|
|
},
|
|
"tags": {
|
|
"ses:source-tls-version": [
|
|
"TLSv1.3"
|
|
],
|
|
"ses:operation": [
|
|
"SendSmtpEmail"
|
|
],
|
|
"ses:configuration-set": [
|
|
"relay-outbound"
|
|
],
|
|
"ses:source-ip": [
|
|
"2.56.188.138"
|
|
],
|
|
"ses:from-domain": [
|
|
"bayarea-cc.com"
|
|
],
|
|
"ses:caller-identity": [
|
|
"bizmatch.net"
|
|
]
|
|
}
|
|
}
|
|
}
|
|
} |