Bill goign to spam

[VMCopperUser]

It looks legit.

Headers (My god at them) posted.

Return-Path: <webteam@virginmedia.com>
Delivered-To: bill2spamLOL@ntlworld.com
Received: from md6.tb.ukmail.iss.local ([212.54.57.73])
	by mc39.tb.ukmail.iss.local with LMTP id eDY6FxhLeWFYEgAAVp5eMA
	for <bill2spamLOL@ntlworld.com>; Wed, 27 Oct 2021 14:50:32 +0200
Received: from smtpclienthelo ([212.54.57.73])
	by md6.tb.ukmail.iss.local with LMTP
	id gIoQFxhLeWEKBAAACKiK/Q
	(envelope-from <webteam@virginmedia.com>)
	for <bill2spamLOL@ntlworld.com>; Wed, 27 Oct 2021 14:50:32 +0200
Received: from mx.emea.email-out.fireeyecloud.com ([52.215.218.152])
	by mx6.tb.ukmail.iss.as9143.net with ESMTP
	id fiNzm20vUHg5wfiO0ma8qJ; Wed, 27 Oct 2021 14:50:32 +0200
Precedence: junk
X-Env-Mailfrom: webteam@virginmedia.com
X-Env-Rcptto: bill2spamLOL@ntlworld.com
X-SourceIP: 52.215.218.152
X-Spam: yes
X-CNFS-Analysis: v=2.4 cv=CL854DnD c=1 sm=1 tr=0 ts=61794b18 cx=a_exe:a_idp_d
 a=DSsvZ/WWCbn1HZp0jMQmVA==:117 a=DSsvZ/WWCbn1HZp0jMQmVA==:17
 a=KGjhK52YXX0A:10 a=8gfv0ekSlNoA:10 a=SSmOFEACAAAA:8 a=NcN59idvAAAA:8
 a=cNYceOC_k0OdKZccMmQA:9 a=qhzByUktiztB-1_s:21 a=frz4AuCg-hUA:10
 a=_W_S_7VecoQA:10 a=QEXdDO2ut3YA:10
X-Spam-Action: folder Spam
X-Spam-Reason: SMCH_ACTION=reject
Return-Path: <webteam@virginmedia.com>
Received: from [10.152.92.30] ([10.152.92.30:52855] helo=euw1-etp-emps-outbound-prd07-03.vex)
	by prd07-euw1-03 (envelope-from <webteam@virginmedia.com>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES128-GCM-SHA256) 
	id 3E/26-32626-71B49716; Wed, 27 Oct 2021 12:50:31 +0000
Received: from localhost.localdomain (localhost [127.0.0.1])
	by euw1-etp-emps-outbound-prd07-03.vex (Postfix) with SMTP id 4HfT7W4m9jz1c1sy
	for <bill2spamLOL@ntlworld.com>; Wed, 27 Oct 2021 12:50:31 +0000 (UTC)
Received: from mx.emea.email-out.fireeyecloud.com (ip-10-152-121-58.eu-west-1.compute.internal [10.152.121.58])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by euw1-etp-emps-outbound-prd07-03.vex (Postfix) with ESMTPS id 4HfT7V4vLmz1c1nB
	for <bill2spamLOL@ntlworld.com>; Wed, 27 Oct 2021 12:50:30 +0000 (UTC)
Received: from [10.152.123.155] ([10.152.123.155:44454] helo=euw1-etp-content-mta-outbound-prd07-01.cso.fireeye.com)
	by prd07-euw1-05 (envelope-from <webteam@virginmedia.com>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTP
	id 02/13-02786-61B49716; Wed, 27 Oct 2021 12:50:30 +0000
Received: from localhost (localhost [127.0.0.1])
	by euw1-etp-content-mta-outbound-prd07-01.cso.fireeye.com (Postfix) with ESMTP id 99DB3467771
	for <bill2spamLOL@ntlworld.com>; Wed, 27 Oct 2021 12:50:30 +0000 (UTC)
Received: from euw1-etp-content-mta-outbound-prd07-01.cso.fireeye.com ([127.0.0.1])
	by localhost (euw1-etp-content-mta-outbound-prd07-01.cso.fireeye.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id HKCmqu8IW5wZ for <bill2spamLOL@ntlworld.com>;
	Wed, 27 Oct 2021 12:50:30 +0000 (UTC)
Received: from mx.emea.email-out.fireeyecloud.com (unknown [10.152.122.235])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by euw1-etp-content-mta-outbound-prd07-01.cso.fireeye.com (Postfix) with ESMTPS id 31E77467770
	for <bill2spamLOL@ntlworld.com>; Wed, 27 Oct 2021 12:50:30 +0000 (UTC)
X-FE-ETP-SENDER-IP: 193.38.82.91
X-FE-ETP-CONNECTING-IP: 193.38.82.91
Received: from mailrelay05.virginmedia.co.uk (mailrelay05.virginmedia.co.uk [193.38.82.91])
	by prd07-euw1-09 (envelope-from <webteam@virginmedia.com>)
	FireEye ETP with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
	id 2C0D0312251B497161e9960fb; batch_id 2C/0D-03122-51B49716; Wed, 27 Oct 2021 12:50:30 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
  d=virginmedia.com; i=@virginmedia.com; q=dns/txt;
  s=corporate; t=1635339037; x=1666875037;
  h=date:message-id:from:reply-to:to:subject:mime-version:
   sender;
  bh=bAvI8s/9UhIF1vVsuoMhmrz/DIp43vZRb4yC1TAaObM=;
  b=q+i93Ehd/tSkN0DIXQOjioIyAw2RvkOK+e8wXx1Le37hMtakQJ3LqSLx
   q67pA3zMmfPoWlKLhQ/JkEpkpPsQn3B5/YvnMgevHHk+pZGBIERR1W/z6
   6yehtBbZ6ge6gnxPzRZF7UplKJ5Ht76ZbRMFcOVMnC93x2V8qtpGQcWqQ
   yLSXDznF1CpHpJAHdZE8yoBKCFUwSu/63/hDJGdusjNmIAI8fPOR/Q6jG
   RUpc6pt2gP3sXy9WC1DdOCEWMODTmy40zxhcHXkiEz0LzdnBYTH2qsDji
   4+C4SCyz426jpSM6erig6uvVEMf+dBq87nkZlwmcO1LIO2iB7hJzks5fw
   A==;
IronPort-SDR: YBruVemhXTgH/pP/7MRqj8F2M42hNvyyEU228/KUG5L83ZdjocVcFE850jCYDyyvaks2e/Hyv4
 6Aby8Z73r8ZQ==
X-IronPort-AV: E=Sophos;i="5.87,186,1631574000"; 
   d="scan'208,217";a="245912262"
Received: from unknown (HELO ebill2.virginmedia.com) ([10.92.131.20])
  by mailrelay05.virginmedia.co.uk with ESMTP/TLS/ECDHE-RSA-AES128-GCM-SHA256; 27 Oct 2021 13:50:37 +0100
Received: from ebillbatch-kn-p2 (localhost [127.0.0.1])
	by ebill2.virginmedia.com (8.14.7/8.14.7) with ESMTP id 19RCoTSY022544
	for <bill2spamLOL@ntlworld.com>; Wed, 27 Oct 2021 13:50:29 +0100

[Kath_F]

Hi VMCopperUser, 

Thanks for taking the time to post the headers of an email. 

Can you please expand on what the issue is? You've mentioned in your heading 'bill going to spam'. Are you referring to your My VM bill being directed to your spam account? If so, try adding the sender email to the safe senders list or marking the email as 'not spam'. 

Please let us know if this resolves the issue you are seeing. 

Thanks,

[VMCopperUser]

Okay.

Guess I'll ignore it then.