When a spammer use a well configured relay server and is compliant with all security checks, it has a good FQDN and good PTR, is not on blacklist, is coming from an existing hacked email account but is being spoofed as another user, for now, the solution is to use de sa-learn and get help with...