From its "definitely NOT Norton" sender's email address, to mismatched order numbers, a blank To field, calling it a "performa" instead of "pro forma" invoice, and an image for the body of its content ... everything about this email says phishing. If you receive it, mark it as phishing to alert Google.