I got a pretty suspicious email a few weeks ago and flagged it. Later day that our sysadmin was like “oh hey that was legit, <vendor> has started using a new marketing firm so they look like that.” I just said “Sounds like spam to me I’m going to keep on flagging it.” and he just responded with a frown emoji. Full disclosure we’re decent work buddies and I haven’t actually gotten any more emails from that company so he may have actually filtered it lol.