@Netino: Ok.. Here is the source of a mail sent from my vps to hotmail which was delivered to Junk...
Received: from DB5EUR03HT025.eop-EUR03.prod.protection.outlook.com
(2603:1006:b01:c::18) by BMXPR01MB3718.INDPRD01.PROD.OUTLOOK.COM with HTTPS
via BMXPR01CA0032.INDPRD01.PROD.OUTLOOK.COM; Sun, 5 May 2019 04:11:14 +0000
Received: from DB5EUXR03FT022.eop-EUR03.prod.protection.outlook.com
(10.152.20.55) by DB5EUXR03HT025.eop-EUR03.prod.protection.outlook.com
(10.152.21.236) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1835.13; Sun, 5 May
2019 04:11:13 +0000
Authentication-Results: spf=pass (sender IP is 7X.XXX.XX.29)
smtp.mailfrom=jxxxetxxxnxxgy.com; hotmail.com; dkim=pass (signature was
verified) header.d=jxxxetxxxnxxgy.com;hotmail.com; dmarc=pass action=none
header.from=jxxxetxxxnxxgy.com;
Received-SPF: Pass (protection.outlook.com: domain of jxxxetxxxnxxgy.com
designates 7X.XXX.XX.29 as permitted sender) receiver=protection.outlook.com;
client-ip=7X.XXX.XX.29; helo=xx-01.exxtxxsxer.com;
Received: from xx-01.exxtxxsxer.com (7X.XXX.XX.29) by
DB5EUXR03FT022.mail.protection.outlook.com (10.152.20.171) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id
15.20.1856.11 via Frontend Transport; Sun, 5 May 2019 04:11:13 +0000
X-IncomingTopHeaderMarker: OriginalChecksum:D13592CADF2353FCB4DD97D51C92B054D65317A89D978863C8BC56EBFBFE1A6F;UpperCasedChecksum:E91DE36F48136F28E546EA532B349497682CAF231FA22E2E342727814366430B;SizeAsReceived:976;Count:12
Received: from localhost (xx-01.exxtxxsxer.com [127.0.0.1])
by xx-01.exxtxxsxer.com (Postfix) with ESMTPA id 2C198802
for <debxxxxx.maxxx@hotmail.com>; Sun, 5 May 2019 06:11:13 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=jxxxetxxxnxxgy.com;
s=default; t=1557029473;
bh=g1hjDhQalhfUcKQi6hgJKTM7BqzidivN5X5AN8tNWfE=;
h=Date:From:To:Subject;
b=rBfhXsJtrms8VH0uY2rEbj9I24NE63VkcaX35ErQtouNJRmkqjoqgwiFdcVRxpxUi
KMop+6uZBgLQpTkyQlZtrTV2fMJYDaAXMiPSgQ5/fv6mOlfAOGbKQwH1RviUt6s1bj
MuViVOh38OdELvyruCNKpl+XOOS5u6L3RdbrUePg=
Content-Type: text/plain; charset="US-ASCII"; format=flowed
Content-Transfer-Encoding: 7bit
Date: Sun, 05 May 2019 09:41:13 +0530
From: noreply@jxxxetxxxnxxgy.com
To: debxxxxx.maxxx@hotmail.com
Subject: CentOS Web Panel Mail Antivirus Scan
Message-ID: <f2a34750ea2a8475fde1f00098130c3e@jxxxetxxxnxxgy.com>
X-Sender: noreply@jxxxetxxxnxxgy.com
User-Agent: Roundcube Webmail/1.3.9
X-IncomingHeaderCount: 12
Return-Path: noreply@jxxxetxxxnxxgy.com
X-MS-Exchange-Organization-ExpirationStartTime: 05 May 2019 04:11:13.4968
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id: 374bd181-a9d6-c347-5682-08fb6d6d106f
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
DB5EUXR03FT022.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 5/5/2019 4:08:18 AM
X-MS-Office365-Filtering-Correlation-Id: 37d184b1-a9d6-47c3-5682-08d6d10fb66f
X-Microsoft-Antispam:
BCL:0;PCL:0;RULEID:(2390118)(5000113)(711020)(4605104)(610169)(650170)(651021)(8291501072);SRVR:DB5EUR03HT025;
X-MS-TrafficTypeDiagnostic: DB5EUXR03HT025:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 7X.XXX.XX.29
X-SID-PRA: NOREPLY@jxxxetxxxnxxgy.com
X-SID-Result: PASS
X-MS-Exchange-Organization-PCL: 2
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 05 May 2019 04:11:13.4558
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 37d184b1-a9d6-47c3-5682-08d6d10fb66f
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5EUR03HT025
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.1839354
X-MS-Exchange-Processed-By-BccFoldering: 15.20.1856.000
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;dwl:0;dkl:0;rwl:0;ucf:0;jmr:0;ex:0;auth:1;dest:J;OFR:SpamFilterAuthJ;ENG:(5062000261)(5061607266)(5061608174)(4900115)(8390100)(4920090)(6375004)(4950130)(4990090)(9140004);RF:JunkEmail;
X-Message-Info:
qoGN4b5S4yqMATLJd7YNgfs9lEkAvJCoicfonrVap57f4TzlLwp1AzVk+SnSKBCYgVkEOrhoCuskmSFI6VGSYyRE33OtZtA8bj/edZjTP9vkUsKuCdcYJxeS59j1qu6LECJoG4wjyAKbfnyV15j3d7lVv0t6wqYBuhvzP+scBcmcrEQT4GapvgPoHhJnl0sz6rTkweiKZ6pX8Dy0bL28XA==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Microsoft-Antispam-Message-Info:
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
MIME-Version: 1.0
To scan your files for viruses:
Log in to your CWP user account
On the dashboard look for the Antivirus Scan section
Choose the Scan and log only FOUND option and click the Antivirus Scan
button
Wait for a few minutes.
Go back to dashboard -> Antivirus Scan section
Choose the Get Last Scan Results option and click the Antivirus Scan
button
If there are any viruses you will see a list of the infected files,
like: