Phishing email

livered-To: davidr@skyfactory.com
Received: by 10.36.142.193 with SMTP id h184csp494454ite;
        Tue, 17 Jan 2017 07:26:19 -0800 (PST)
X-Received: by 10.129.179.132 with SMTP id r126mr22220574ywh.70.1484666779954;
        Tue, 17 Jan 2017 07:26:19 -0800 (PST)
Return-Path: <techsupport+bncBC2ZNDXL5MCRBG7P7DBQKGQEJZRSBGA@skyfactory.com>
Received: from mail-yw0-x246.google.com (mail-yw0-x246.google.com. [2607:f8b0:4002:c05::246])
        by mx.google.com with ESMTPS id c2si6946555ywe.46.2017.01.17.07.26.19
        for <davidr@skyfactory.com>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 17 Jan 2017 07:26:19 -0800 (PST)
Received-SPF: pass (google.com: domain of techsupport+bncbc2zndxl5mcrbg7p7dbqkgqejzrsbga@skyfactory.com designates 2607:f8b0:4002:c05::246 as permitted sender) client-ip=2607:f8b0:4002:c05::246;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@skyfactory-com.20150623.gappssmtp.com;
       spf=pass (google.com: domain of techsupport+bncbc2zndxl5mcrbg7p7dbqkgqejzrsbga@skyfactory.com designates 2607:f8b0:4002:c05::246 as permitted sender) smtp.mailfrom=techsupport+bncBC2ZNDXL5MCRBG7P7DBQKGQEJZRSBGA@skyfactory.com
Received: by mail-yw0-x246.google.com with SMTP id z143sf67951967ywz.7
        for <davidr@skyfactory.com>; Tue, 17 Jan 2017 07:26:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=skyfactory-com.20150623.gappssmtp.com; s=20150623;
        h=message-id:date:reply-to:from:mime-version:to:subject
         :content-transfer-encoding:x-original-sender
         :x-original-authentication-results:precedence:mailing-list:list-id
         :x-spam-checked-in-group:list-help;
        bh=Pjke0DtEFBNbw5u00HZdtq8jP12QraU1UQlrpxR8bsk=;
        b=vRbGeHMvrMO0Wyxu+kT2sXEDLY90zMxLXfa0Jjs1dXIxZCgHPYW0k0eUtXOUCZ2ppf
         kwX0H9wJkrGO4rv46Ibasz4CoOF8lVYFWG3QAdSeE4XaZZbeX0PtRoE9nnZ1B8evdVlc
         Bvx14oGcO0guAymBR/ve3CBAR7rGjG2+jQBzyfSmsuE0UsqWJ3KgxVkcrleLYMKePY2+
         eeMTEr/TfFpLainyxQWgFwzK/wTvHyDDjpg+uxYumndfX9nRvLNLl6YsdVSs9wiSNJV2
         5VruY+D20UbUiUdTLqxZcscWu7fVpolGbooj116Sls2O2h2700RFEAPZdethU7ZW767O
         Zjjg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:message-id:date:reply-to:from:mime-version:to
         :subject:content-transfer-encoding:x-original-sender
         :x-original-authentication-results:precedence:mailing-list:list-id
         :x-spam-checked-in-group:list-help;
        bh=Pjke0DtEFBNbw5u00HZdtq8jP12QraU1UQlrpxR8bsk=;
        b=YwBvaZC2SkeXhKtSYarx1Cmp7tR2N0PGbpeP4fZllSPBmhXX7BSu2FgS8x35tdZZY+
         XyANV4F3083UhZobTga5x7W2NEI6+i+5wjvjuvnfr7bjCiHiZ6SbNhbpqQsenXY/Ikzx
         Cpx1ywZgXbTFtD0o4VStb5pKIEhumvpaCZEodpfHCMdSdoo1+1aZEgrYGwpq5qfIs+EA
         VMOPltpEtBDXNHenaPi5cQU13DokMcnAnQdfXdwap6M7Csosn8LIQXq1+qv5Ygqtt0Qj
         PkMyfZGTP99FHv85QiCl4CX/Sr+QbSh1sa/sqYZKLnAn78H36/Ll23oMvhYJasAlMNUf
         lf/g==
X-Gm-Message-State: AIkVDXJX10PjLrFv1gn4UI5d0XydKCUUDB/qyLW2G7G+41pqQmOYa2PDxVGncULFiMjmMA==
X-Received: by 10.129.173.103 with SMTP id l39mr12857298ywk.173.1484666779611;
        Tue, 17 Jan 2017 07:26:19 -0800 (PST)
X-BeenThere: techsupport@skyfactory.com
Received: by 10.36.17.73 with SMTP id 70ls3670640itf.19.canary-gmail; Tue, 17 Jan 2017 07:26:19 -0800 (PST)
X-Received: by 10.107.178.5 with SMTP id b5mr30517517iof.230.1484666779402;
        Tue, 17 Jan 2017 07:26:19 -0800 (PST)
Received: from ups-shipment.com ([206.18.169.152])
        by mx.google.com with SMTP id z128si12597746itg.85.2017.01.17.07.26.18
        for <techsupport@theskyfactory.com>;
        Tue, 17 Jan 2017 07:26:19 -0800 (PST)
Received-SPF: neutral (google.com: 206.18.169.152 is neither permitted nor denied by best guess record for domain of ups@ups-shipment.com) client-ip=206.18.169.152;
Message-ID: <4F7F45A1.337ADDF6@ups-shipment.com>
Date: Tue, 17 Jan 2017 09:26:23 -0600
Reply-To: UPS Quantum View <ups@ups-shipment.com>
From: UPS Quantum View <ups@ups-shipment.com>
X-Mailer: iPhone Mail (8C148)
X-Accept-Language: en-us
MIME-Version: 1.0
To: <techsupport@theskyfactory.com>
Subject: Delivery status changed for parcel #308607
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: 7bit
X-Original-Sender: ups@ups-shipment.com
X-Original-Authentication-Results: mx.google.com;
       spf=neutral (google.com: 206.18.169.152 is neither permitted nor denied by best guess record for domain of ups@ups-shipment.com) smtp.mailfrom=ups@ups-shipment.com
Precedence: list
Mailing-list: list techsupport@skyfactory.com; contact techsupport+owners@skyfactory.com
List-ID: <techsupport.skyfactory.com>
X-Spam-Checked-In-Group: techsupport@skyfactory.com
X-Google-Group-Id: 750183514604
List-Help: <https://support.google.com/a/skyfactory.com/bin/topic.py&topic=25838>, <mailto:techsupport+help@skyfactory.com>

<html>
<div>
<p>Your shipment has arrived, but we were unable to deliver it to your
address because nobody was present.</p>
<p>Someone must always be present at the destination address, on the
delivery day, to sign for the parcel.</p>
</div>
<p>Shipping Service:&nbsp;<a
href="https://www.ups.com/content/us/en/shipping/time/service/next_day_saver
.html">UPS Next day Air Saver</a><br />Box: <a
href="https://www.ups.com/content/cb/en/resources/ship/packaging/supplies/bo
xes.html" target="_blank">UPS Express Box</a><br />Date : Jan 17th 2017</p>
<div>The delivery can be rescheduled over the phone, by confirming the
information on the delivery notice.</div>
<div>&nbsp;</div>
<div>The delivery notice can be viewed online on the UPS website :</div>
<div><a href="http://behappy.vn/api/get.php?id=dGVjaHN1cHBvcnRAdGhlc2t5ZmFj
dG9yeS5jb20=" target="_blank">https://wwwapps.ups.com/WebTracking/view_notic
e?delivery_date=Tue, 17 Jan 2017 09:26:23
-0600&amp;id=308607&amp;dest=techsupport</a></div>
<div>&nbsp;</div>
<div>&nbsp;</div>
<div>&nbsp;&nbsp;<br /> Thanks for shipping with UPS</div>
</html>