I received a "Reminder: Confirm your email" EMail from Norton this morning. I am sure that it is genuine but seems poor security. There is nothing in the EMail to prove that it is genuine - no personal details of mine.
The link goes to secure.norton.com but then the rest of the link is gibberish and could be doing anything. It probably identifies me to Norton but there is nothing to identify Norton to me.
It seems to fail all the tests for avoiding phishing attacks.
If you need my EMail confirming (which is strange considering that you have managed to EMail me successfully!) then would it not be better to do it through Norton Security i.e. open program and either do something within the program or through your website.