If you are using a cpanel/WHM server then the MTA will be Exim by default.
Enable Mailheaders by running /scripts/easyapache script. After that, check the mail header using:
exim -Mvh <message id>From that you will able to find the source of spam.
Comments are closed.