How do I stop this? paypal.com is in the default DKIM whitelist! X-Spam-Status: No, score=-107.7 required=6.0 tests=DKIM_VALID,DKIM_VALID_AU, ,FREEMAIL_FROM,SHORTCIRCUIT,SPF_HELO_PASS, USER_IN_DEF_DKIM_WL,USER_IN_DKIM_WHITELIST shortcircuit=ham autolearn=disabled version=3.4.4 X-Spam-Relay-Country: US US US US Received: from GBR01-LO2-obe.outbound.protection.outlook.com ( mail-lo2gbr01on2073.outbound.protection.outlook.com [40.107.10.73]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by xxxxxxxxxx (Postfix) with ESMTPS id 4BF1F1480FCB for <xxxxxxxxx>; Mon, 14 Nov 2022 13:02:57 -0600 (CST) Authentication-Results: xxxxxxxxxxxx dkim=pass (2048-bit key) header.d=paypal.com header.i=@paypal.com header.b="r6hmfVu3" ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=OVohkgjr3UJbiohxx1KCrPdnaD1WXK9mrLMvZ4VloK9eudd9Gkh7tImMPXIN1iOrETjNj59A47N+uJqf4kZFPVUGJS6KAdzWZczL7LiBaIsg1uSQwoD60Z7heKEjC5cfOLsXZhwf0nhhwzbXpjXltGfYn0Jd8VQGxT64hKtfyVoP9JpRyF6h8I9FnCxfVvRbP4i8iYk5zkdvi4I9eR7z4dXeB9vLwZv5hb6nIt6le9lMJriMoM11QYHcLlqZqj9S8L1pN9ynLzAVezxmWmH9YDKyB9aKf4vJP32HHLmzPCCgnqplW6xObPUI5Wt5HagqD+ImpgKMQ1JgM86tq+Tuzg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com ; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=o8/9XRPNBSb6rQV6HcDwELycPOzUJqxucQ/nMDyby+o=; b=XYTuQtEngNxrDz/McbFCv0GHj1RQ59jBE0nCMgxzQivSL51NnzAFIjsVs0BMxFtLPZmdwxx6fRBkRe6OLtpjUzut7MBMX0jYenXqsHZfLodWIT51fjG6JcEO1LPFvIJkl0WHl9w+agVHgUZy+c7TcADN5IdHh+/wDy5Pyh8iuEAE7g4+fPPaehKGfwLzqZJ+TdZKyXgbxbCMUCYrRjQvkV2xUqI+cTwZolauv847RlgIUqwG9OWiImbcruwIexjn+cOb1eidxluPnHVXILS/+AH6TVAz7oIsoCXB8rjBFrVCyGU1HTAYvLTDN31F7/QDMbDaiAHGTtbbvvAT7eZqig== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 173.0.84.228) smtp.rcpttodomain=duta788.onmicrosoft.com smtp.mailfrom=paypal.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=paypal.com; dkim=pass (signature was verified) header.d=paypal.com; arc=none (0) Resent-From: <shan...@duta788.onmicrosoft.com> Received: from CWLP123MB6161.GBRP123.PROD.OUTLOOK.COM (2603:10a6:400:1a5::13) by LO0P123MB5990.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:280::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5813.17; Mon, 14 Nov 2022 19:02:54 +0000 Received: from CWLP123CA0130.GBRP123.PROD.OUTLOOK.COM (2603:10a6:401:87::22) by CWLP123MB6161.GBRP123.PROD.OUTLOOK.COM (2603:10a6:400:1a5::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5813.17; Mon, 14 Nov 2022 19:02:52 +0000 Received: from CWLGBR01FT040.eop-gbr01.prod.protection.outlook.com (2603:10a6:401:87:cafe::11) by CWLP123CA0130.outlook.office365.com (2603:10a6:401:87::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5813.17 via Frontend Transport; Mon, 14 Nov 2022 19:02:52 +0000 Authentication-Results: spf=pass (sender IP is 173.0.84.228) smtp.mailfrom=paypal.com; dkim=pass (signature was verified) header.d=paypal.com;dmarc=pass action=none header.from=paypal.com; Received-SPF: Pass (protection.outlook.com: domain of paypal.com designates 173.0.84.228 as permitted sender) receiver=protection.outlook.com; client-ip=173.0.84.228; helo=mx3.slc.paypal.com; pr=C Received: from mx3.slc.paypal.com (173.0.84.228) by CWLGBR01FT040.mail.protection.outlook.com (10.152.40.168) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5813.12 via Frontend Transport; Mon, 14 Nov 2022 19:02:51 +0000 DKIM-Signature: v=1; a=rsa-sha256; d=paypal.com; s=pp-dkim1; c=relaxed/relaxed; q=dns/txt; i=@paypal.com; t=1668452569; h=From:From:Subject:Date:To:MIME-Version:Content-Type; bh=o8/9XRPNBSb6rQV6HcDwELycPOzUJqxucQ/nMDyby+o=; b=r6hmfVu3PlK5UN/X+kDNdo8TkUbOkfVn6+tT3VtTr30ic5BMR9vuyrZED4ARPF74 eywsS4yJTH3S3EB0IBX5yao3SN0WFNR23EUszb8LWgSpL0lz4+ZGqAfbjWP6UvI8 2XVzbjiT2tDP2ONkvM5e9g06CuC1VH2Bte5+S/Qke61W8OaagNu8sIcu6MNfoUiO b/esckpPfghQtqDs693+pxDtuk9SBrbf14qZ2ih9eVV/38dRdz5B22pq8Kfws9yZ hjvQlCDfovONXEEf6+lD1rs9p0NvKEIeIK/BFxbUmShXAyL3/LlYVLELEwzQ/mnl zoIwzGQJ9u8i005oZVUnJA==; Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="UTF-8" Date: Mon, 14 Nov 2022 11:02:49 -0800 Message-ID: <67.91.14851.9D092736@ccg13mail05> X-PP-REQUESTED-TIME: 1668452563268 X-PP-Email-transmission-Id: ed77fc42-644e-11ed-9b35-3cecef442a74 PP-Correlation-Id: f452526a2e2b2 Subject: Billing Department updated your invoice ( ALS56730 ) X-MaxCode-Template: PPC001082 To: PayPal User <shan...@duta788.onmicrosoft.com> From: "serv...@paypal.com" <serv...@paypal.com> X-Email-Type-Id: PPC001082 MIME-Version: 1.0 X-PP-Priority: 0-none-false AMQ-Delivery-Message-Id: nullval X-XPT-XSL-Name: nullval X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: adbfa5e6-3343-4fe0-8aa8-9f0cc484823f:0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CWLGBR01FT040:EE_|CWLP123MB6161:EE_|LO0P123MB5990:EE_ X-MS-Office365-Filtering-Correlation-Id: 452e8e78-adb1-4e0a-a2a8-08dac672d498 X-LD-Processed: adbfa5e6-3343-4fe0-8aa8-9f0cc484823f,ExtAddr,ExtFwd X-MS-Exchange-SenderADCheck: 0 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:173.0.84.228;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H: mx3.slc.paypal.com;PTR:mx3.slc.paypal.com;CAT:NONE;SFS:;DIR:OUT;SFP:1101; X-ExternalRecipientOutboundConnectors: adbfa5e6-3343-4fe0-8aa8-9f0cc484823f X-Auto-Response-Suppress: DR, OOF, AutoReply X-OriginatorOrg: DUTA788.onmicrosoft.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Nov 2022 19:02:51.5597 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 452e8e78-adb1-4e0a-a2a8-08dac672d498 X-MS-Exchange-CrossTenant-Id: adbfa5e6-3343-4fe0-8aa8-9f0cc484823f X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-AuthSource: CWLGBR01FT040.eop-gbr01.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO0P123MB5990
Snippet from body: Seller note to customer Congratulations! Your subscription with Norton Security is now auto renewed as per your selected plan. You can now continue enjoying our services smoothly. If you have not authorized this transaction or want to cancel the subscription, call us immediately -: +1 (888) 731-6375 .
