Expect these things to keep getting better and the "check the sender" advice is already dying. Spoofing a domain costs nothing now, so a lot of these come from a real address that looks totally fine, and the one letter off thing is old school. The link hiding thing barely works either since half of them just load a fake login page that copies the real site pixel for pixel. Boise or not, you got lucky that this one was lazy, the smart ones don't bother with $340 redelivery scams, they wait and hit you with something bigger. Hovering over links gives you a false sense of safety and that's the real danger here.

The volunteer at my local library did the same thing when I tried to check out a huge tile saw for a tiny bathroom job. He pointed at the smaller one on the shelf and said most people grab the big one out of habit and end up lugging around way more than they need. Saved me a trip back the next day and I've been way more honest with myself about what a project actually calls for since then lol.