SPAM... So I noticed that almost all headers had a "USER_IN_WHITELIST" in it.
--- X-Spam-Status: No, hits=-88.6 required=5.0 tests=BR_RECEIVED_SPAMMER, FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,HTML_FONT_BIG,HTML_MESSAGE, HTML_TAG_EXIST_TBODY,INVALID_DATE,MIME_BASE64_TEXT, MIME_BOUND_NEXTPART,MIME_HTML_ONLY,PLING_PLING,USER_IN_WHITELIST autolearn=no version=3.0.0 ---
I've checked every configuration file as so user_prefs files and didn't found any whitelist entry.
Did you find *any* whitelist statements at all?
Also be sure to scrutinize ALL the message headers when trying to check which statement is at fault.
SA's whitelisting system honors more than just From: in whitelist_from*. It honors Return-Path, Sender, Resent-From and more-or-less any origin indicating header.
