Sorry for the long wait on this. You have it right, the rejections are coming from ImprovMX, which receives mail for newsletters.newsblur.com , and their SpamAssassin scoring bounces anything at 5.0 or above before NewsBlur sees it. NewsBlur itself doesn’t filter newsletters at all, and I agree the secret token in the address should be enough.