jlobera

Don't know if applies but google always checks a header named "X-GoogApps-Allowed-Domains" which you can insert with your allow domain. Like in this mcafee kb; https://kc.mcafee.com/corporate/index?page=content&id=KB72538