Quantcast
Channel: Norton 360 topics
Viewing all articles
Browse latest Browse all 4737

Genuine Norton message or Phishing attempt?

$
0
0

The following message came yesterday claiming that Automatic Renewal had been disabled.  I noted the return address is @gmail.  Is this a genuine Norton message or not?  Message contents and full headers follow.

 

Message content

 

Dear Norton Subscriber,
 
This is to inform you that Automatic Renewal service for your Norton subscription has been disabled. As such, Symantec will not automatically renew your
subscription and will not charge your credit card. At expiration your computer may be vulnerable to dangerous online threats unless you renew Norton subscription.
Hence you are requested to purchase the Norton Renewal from Norton Renewal Center.
 
We are glad to inform you that you have been nominated for Christmas Renewal offer. With this limited offer you are eligible to get 6 months of free subscription
with 2-Year Norton Renewal and 2 months of free subscription with 1-Year Norton Renewal. 
 
To renew or extend your Norton subscription with the Christmas Renewal Offer please reply to this email with the code 'NYNRO1Y2M' for 1-Year Renewal or
'NYNRO2Y6M' for 2-Years Renewal. You can also reply to this email by clicking on the link given below. You will be contacted soon with more details.
 
 
Sincerely,
Norton Renewal Support
 
Thank you for choosing Norton
..............................................................................................................................................
 
Headers
 
From Norton Renewals Mon Dec 17 20:48:27 2012
X-Apparently-To: johnheelan@btinternet.com via 188.125.85.250; Mon, 17 Dec 2012 20:48:38 +0000
Return-Path: <nortonrenewals@gmail.com>
Received-SPF: pass (domain of gmail.com designates 209.85.210.67 as permitted sender)
 cm0geW91IHRoYXQgQXV0b21hdGljIFJlbmV3YWwgc2VydmljZSBmb3IgeW91
 ciBOb3J0b24gc3Vic2NyaXB0aW9uIGhhcyBiZWVuIGRpc2FibGVkLiBBcyBz
 dWNoLCBTeW1hbnRlYyB3aWxsIG5vdCBhdXRvbWF0aWNhbGx5IHJlbmV3IHlv
 dXIgcyB1YnNjcmlwdGlvbiBhbmQgd2lsbCBub3QgY2hhcmdlIHlvdXIgY3Jl
 ZGl0IGNhcmQuIEF0IGV4cGlyYXRpb24geW91ciBjb21wdXRlcgEwAQEBAQN0
 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzEz
X-YMailISG: qOZz9qMWLDtEmKXDTi04IdOkqGKeaPXSMEXbLTga09G9ji9l
 AqhpDaQRJlRkBabpbi8NHY9eZlRNkuEFsBHXEHmNjkPPdskNGQ2M1ZzZQlWl
 8rYkzv1Cj90oAWYNaCfwzPEC1yv7vTjrsSV5HKzniEKlKK3YXPiIs9rdI6PG
 6dFVSTp3WVGPJVCaYEiVuuwezR8sC6jGlNEltr86yeocS9.VJ0cci7O27rrE
 7kx3dbkPZYFIRhcdv2DYSNiCjbQJlzlw1wUpgNQeKkVP6IJjHkuvZQ0GkAZL
 91YvXgvkasZxIS9sNVOjKCV2VVKPQ25dJeSyOPEyjR8qZrURRoktRZc_sMro
 L5T5Aowa4uu.3P6gBjH8GSsimQvHiaNwiBCEvw1fRyWJ8qO3xWb_ExpgReGb
 hD5kiHBqch636WhS2Led.32qWQg4Hc8s.7uUNMNrvHoBlKm7Su0.nOcR3BcF
 1RPaTe.qoFAATkACHeTZ8fgs6Y3txq9ludtbv6hvCbuM.jR_one8YzVIK7rv
 vealyQdaDe27BpYY_9QPaowXtLCR3oVGQcyfBiF37RUDo22OS8zCYVRh56Mm
 eHpomK3YsRjc0QHK899R9GYe540xkBg848JhGRx65wB1H_zjsO5hu1p6TFlo
 IYnD3k4RQUgfxo221LYgCn4PGkAKDV3O6h9WqjA0py7CrrxXXGwDw_EOnBFY
 V1xEbPci7Tx69YSVU5FA8XdaHG9JArXD2nXFWIXd8VVJidpcODx3ZPOR3lbr
 8yEUuVzc5E3qG9.B5t3DM6aj4H9wFO_omnzj7D3FEmjkHyFKBXN2WaTGalKV
 WmKDxosb2W2icVua9FI5ev_HoDeF3Mp5HX.3aHNN4UlSDaJeE715dysBGFdj
 oUu1raJBznfQVkiT7AVciGS9oKDMM9pq7lC6e6gO8fb0jCaxQVPMK4Nwda4Y
 l15Hm_H06J8Ejo.vYr6D3lsDu3JkELLWYmXkelc0UytfCToU0sKgqtGSqziC
 R1.nmBoDJX9jQRz.ra7hazmXLvc4_u0hvlKP8G769Bgd9FdR9O7Jfh2Norgc
 mxkP9xnoKmQW5dD2enckuIXuDStasVnTbVkxIR8H1S6jxcyqvoKizS5QtVKt
 m.YpSeclQjFSOSUJEK8JFfKs_rJ32S8t8w5jExhujeLrQ1vJ8C2uSh7fV1CW
 7eAuSKCbsEJLVcdQAGA9BXiBtZcxNSoX4CZG90KWY_IQNSFWZonfnU3sVkt4
 N5yx80drVWZlsIGbaO2ZldrLLoih_EJtawc8Ld4tNPZC4OIvbIvo_fVDWpSV
 q2sTp0Qq4No-
X-Originating-IP: [209.85.210.67]
Authentication-Results: mta1010.bt.mail.ird.yahoo.com  from=gmail.com; domainkeys=neutral (no sig);  from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO mail-da0-f67.google.com) (209.85.210.67)
  by mta1010.bt.mail.ird.yahoo.com with SMTP; Mon, 17 Dec 2012 20:48:38 +0000
Received: by mail-da0-f67.google.com with SMTP id e7so2248190dad.6
        for <johnheelan@btinternet.com>; Mon, 17 Dec 2012 12:48:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=x-received:sender:mime-version:from:reply-to:to:subject
         :content-type:x-mailer:date:message-id:list-unsubscribe;
        bh=T/I/gVKqxFuCVhF24DtPH6nOcUfFRZFgWMm9NH0Sdng=;
        b=odIZUj5IkPJHWgaeStEGtGpWeAGbsEIfs6Ekg8f5YjLGsuttlnsOIFy+vehggMEl+s
         FHFs79AyxOKkYrD+rvUGkOL1NU1xU97PV9PfiUvP0c94ukRoDS/kVqQaqCgQcXgQRsTM
         w45rs1vjWyVVV73pGqIAID4h/0P3ZuqYCAQKUKRhY3UqYC2KGOXjFouILep9Ygu1dDdd
         tguH3k2X0uZbYFe/tpK+LB4hncHMkhucOXTQlBmAkGWr7pnNVIu0ac+Sbw/wnbiUwf85
         M0eZQiKAT9O/VwomKmCOZAFkfsXvScqXof7D8D7vzGgwcaSg2xgdnuuj1Y+311p5WsBj
         maVg==
X-Received: by 10.66.73.102 with SMTP id k6mr341507pav.22.1355777316868;
        Mon, 17 Dec 2012 12:48:36 -0800 (PST)
Return-Path: <nortonrenewals@gmail.com>
Received: from 115.240.116.237 ([115.240.116.237])
        by mx.google.com with ESMTPS id i5sm4943pax.13.2012.12.17.12.48.34
        (version=SSLv3 cipher=OTHER);
        Mon, 17 Dec 2012 12:48:36 -0800 (PST)
Sender: Norton Renewals <nortonrenewals@gmail.com>
Return-Path: renewaloffers@norton-renewal.com
MIME-Version: 1.0
From: Norton Renewals <nortonsubscription@norton-renewal.com>
Reply-To: subscriptions@norton-renewal.com
To: Norton Subscriber <johnheelan@btinternet.com>
Subject: Renew Norton with 6 months of free subscription!
Content-Type: multipart/alternative;
    boundary="----=_NextPart_001_6F89_53B9021C.3B490334"
X-Mailer: SmartSend.2.0.127
Date: Tue, 18 Dec 2012 02:18:27 +0530
Message-ID: <29443788725042043516579@alansmith-PC>
List-Unsubscribe: <mailto:?subject=Unsubscribe>
Content-Length: 14500
.................................................................................................

Viewing all articles
Browse latest Browse all 4737

Latest Images

Trending Articles



Latest Images