PN Spam Filter catches PN marketing mail

[#1]

Despite my spam filter settings being at the least aggressive I received a marketing email today from PN which landed in my Spam folder. I do get periodic false positives from reputable sources. However, I thought this bizarre and worthy of note.
I'd be interested in comment from PN..... Is this simply that enough have marked PN marketing as Spam to train the filters to see it that way?

[#2]

Which email?

[#3]

The email with the subject: "Is your phone bill too big?"
It was sent today at 19:02. Here are the headers:
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>.
Return-path: <bounced@bt-plusnet.trclient.com>
Envelope-to: xxxxxxxxxxxx@yyyyyy.plus.com
Delivery-date: Tue, 09 Oct 2012 19:37:09 +0100
Received: from [212.159.8.109] (helo=avasin13.plus.net)
  by inmx15.plus.net with esmtp (PlusNet MXCore v2.00) id 1TLeg1-0005Ct-2J
  for xxxxxxxxxxxx@yyyyyy.plus.com; Tue, 09 Oct 2012 19:37:09 +0100
Received: from mx1.bt-plusnet.trclient.com ([202.43.5.89])
by avasin13.plus.net with Plusnet Cloudmark Gateway
id 96d51k00D1vEQBu016d7xa; Tue, 09 Oct 2012 19:37:08 +0100
X-BV-Spam-Flag: Yes
X-IPAS: Level1
X-CM-Score: 100.00
X-CNFS-Analysis: v=2.0 cv=IsmcgcDg c=1 sm=1 b=1 p=znqN02aTAAAA:20
a=ICU+spCqCVEiGWLksExONw==:17 a=DouFEU6juT4A:10 a=ficdhdEkR9oA:10
a=jPJDawAOAc8A:10 a=j-3okCPSb8sA:10 a=0Bzu9jTXAAAA:8 a=EdZU2yQAAAAA:8
a=mRmb6Qwh-5YA:10 a=NRPZNkwAAAAA:8 a=3j4BkbkPAAAA:8 a=JqEG_dyiAAAA:8
a=4wpAQnKwotUyk5mEG-YA:9 a=QEXdDO2ut3YA:10 a=0jZMdR3ZUNUA:10
a=3zYNGv4MmPCqdEYR:21 a=vR6Zdu2I4RnJHGl6:21 a=cWa9B_qDnk_pQjJw6_YA:9
a=_W_S_7VecoQA:10 a=tXsnliwV7b4A:10 a=bouAzuPVe9jWmBv-:21
a=UppWeAAzRfNGS1ql:21 a=_IJ9iRdd2COZOv64:21 a=ICU+spCqCVEiGWLksExONw==:117
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=tra; d=comm.plus.net;
h=From:Reply-to:Date:Message-Id:Subject:To:MIME-Version:Content-Type; i=plusnet@comm.plus.net;
bh=2m3TNYkvZdfSd5NRNC1ELjvFisk=;
b=VkJgES/GZiwwtN3yWi5DTIPHqer8HsHNtvL1LDVyXDCEPrW7/KSwfmi0JzHzQ6M3reOIPAAa9Tze
  xxkAsEgVHhrha+UTbieW77SG7q3WEPVI+22/WPIWH46gY4acnMw301ISobFEBqR3WIYO2flr5W1t
  S/PRlZzEB71MN2sR+tA=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=tra; d=comm.plus.net;
b=YD/Zigcl7NNxw3qSI2uWFanfN/e/yI6/lP4POKOI3lrNEt9kGSoH4g4WokcfSmZNhcmnfNL6/3lc
  5N5V3QA90A9C7r952alk3+FX8U6QMD0aEWGpIH7UGsob9JnvTyHTjJ5YjDbJPdxUB+5pUrmeQwzb
  cWjZNdISu5zUYWrjcKw=;
Received: by mx1.bt-plusnet.trclient.com id hehnd80i00si for <xxxxxxxxxxxx@yyyyyy.plus.com>; Wed, 10 Oct 2012 05:02:59 +1100 (envelope-from <bounced@bt-plusnet.trclient.com>)
x-accountid: 5874
X-tra-envid: 862227609-int
From: =?utf-8?B?UGx1c25ldA==?= <plusnet@comm.plus.net>
Reply-to: autoemail@plus.net
Date: Wed, 10 Oct 2012 05:02:59 +1100
Message-Id: <862227609.855643982@bt-plusnet.trclient.com>
To: xxxxxxxxxxxx@yyyyyy.plus.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="UNIQUE_STRING"
X-pn-pstn: Spam 1
X-PN-Virus-Filtered: by PlusNet MXCore (v5.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v5.00)
Subject: =?utf-8?B?SXMgeW91ciBwaG9uZSBiaWxsIHRvbyBiaWc/?=

[#4]

Are you sure that it is a genuine Plusnet email? If so I must say I'd find it very surprising if they were being sent from an IP address in New South Wales, Australia!

[#5]

Jelv, that is a good question.
I also expect PN to send their own marketing email... so did look a bit further. It comes from Traction Digital who appear to be a PR/Marketing company. I'm guessing they are not spammers since they are visible and have not been hacked themselves. The return mail address is consistent with the IP whois lookup.
If its Spam its more sophisticated than I'm used to.

[#6]

And none of those email addresses there appear to be genuine email addresses anyway, definitely spam IMHO and can you post the content of the email (killing any links in it). It should be of interest to us all. Plusnet may care to consider posting a warning to customers about it if relevant.
Edit: I had just done that and was compiling this as you posted David . Well I eat my words  perhaps I should have gone googling first. Don't bother posting the content. My googling led me to this posted by Oldjim http://community.plus.net/forum/index.php/topic,107655.msg924249.html#msg924249 so I rush to look at the headers of my email for the Home Phone price rises and blow me if they aren't the same email addresses - mine didn't get tagged as spam. So I then rushed to look at the headers at the other marketing mail I've had from PN and none of them are this load of crap. The only email address in those headers that I recognised was the autoemail@plusnet.
IMHO Plusnet deserve it to be treated as Spam sending marketing stuff in this way. I receive marketing stuff from one publishing organisation that chooses to play with it's marketing adresses in a similar manner and some of them get treated as spam. I have been contemplating telling them to .... off and remove me from their list solely for that very reason.

[#7]

Sadly, I think this is the new way of sending this sort of information out - take a look at the source code for the email notifying us of the Home Phone price increases. The HTML links go via trclient and track that the link has been followed.

[#8]

See may edit to my post above, If PN continue this I shall be telling them to remove me from Marketing mail.

[#9]

These are genuine emails from us, however I'm surprised that we didn't pick up the SPAM marking during testing of them.

[#10]

Thanks for the confirmation Chris.
It leaves me wondering if the Spam scoring varies by account or whether all PN accounts get the same scoring.... in which case all the marketing may end up in the Spam folder :(. Just curious.

[#11]

Might be worth you checking your Spam settings in Manage My Mail (login required) If you aren't inundated with Spam normally and providing no spam gets through that isn't being caught by the filter, check the Aggressiveness is set to 1