This week I started getting a lot of mail coming from google that are
really annoying. The only thing I seem to be able to do is block the
supposed real domain but I can't stay ahead of them. Have others been
seeing this? Any suggestion how to more generally stop them besides the
probably bogus domains? (in this case xiaozhenkj.com)
One oddity is that when my SA server forwards to Rackspace (where my
actual mail is hosted) it is marked as spam then whitelisted.
X-Spam-Exception: WHITELISTED
X-Spam-Threshold: 95
X-Spam-Score: 100
X-MS-Exchange-Organization-SCL: 9
Precedence: junk
X-Spam-Flag: YES
Any words of wisdom? (I had to add header info as attachment as
Rackspace outbound mail server marked this message as spam and rejected it!)
X-Spam-Exception: WHITELISTED
X-Spam-Threshold: 95
X-Spam-Score: 100
X-MS-Exchange-Organization-SCL: 9
Precedence: junk
X-Spam-Flag: YES
Any words of wisdom?
Received: from smtp21.gate.ord1d ([172.30.191.6])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
by proxy4.mail.ord1d.rsapps.net with LMTPS
id WGrzOvqKoGl2bgAAiYrejw
(envelope-from <[email protected]>)
for <[email protected]>; Thu, 26 Feb 2026 13:03:38 -0500
Return-Path: <[email protected]>
X-Spam-Exception: WHITELISTED
X-Spam-Threshold: 95
X-Spam-Score: 100
X-MS-Exchange-Organization-SCL: 9
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To: [email protected]
X-Originating-Ip: [104.236.111.110]
Authentication-Results: smtp21.gate.ord1d.rsapps.net; iprev=pass
policy.iprev="104.236.111.110"; spf=softfail
smtp.mailfrom="[email protected]"
smtp.helo="mail.prnewlon.com"; dkim=pass header.d=xiaozhenkj.com; dmarc=none
(p=nil; dis=none) header.from=xiaozhenkj.com
X-Suspicious-Flag: NO
X-Classification-ID: 26cf259c-133d-11f1-861a-525400a98691-1-1
Received: from [104.236.111.110] ([104.236.111.110:36050]
helo=mail.prnewlon.com)
by smtp21.gate.ord1d.rsapps.net (envelope-from
<[email protected]>)
(ecelerity 4.2.38.62370 r(:)) with ESMTPS
(cipher=DHE-RSA-AES256-GCM-SHA384)
id 1B/03-01195-07A80A96; Thu, 26 Feb 2026 13:01:22 -0500
Received: by mail.prnewlon.com (Postfix, from userid 1001)
id 7FCF7FC0AF; Thu, 26 Feb 2026 18:01:17 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on toosan-antispam
X-Spam-Level: **
X-Spam-Status: No, score=2.6 required=4.0 tests=ARC_SIGNED=0.001,
ARC_VALID=0.001,BAYES_80=2,DKIM_SIGNED=0.1,DKIM_VALID=-0.1,
DKIM_VALID_AU=-0.1,HTML_IMAGE_ONLY_08=1.651,HTML_IMAGE_RATIO_02=0.001,
HTML_MESSAGE=0.001,HTML_SHORT_LINK_IMG_1=0.001,MAILING_LIST_MULTI=-1,
RCVD_IN_MSPIKE_H2=0.001,SPF_HELO_NONE=0.001,URIBL_RED=0.001
Received: from mail-qv1-f70.google.com (mail-qv1-f70.google.com [209.85.219.70])
by mail.prnewlon.com (Postfix) with ESMTPS id 7CEE2FC059
for <[email protected]>; Thu, 26 Feb 2026 18:01:07 +0000 (UTC)
