If the message says “suspicious something”, it’s not an ordinary detection, but rather the e-mail heuristics.
Doesn’t the particular computer have a different setting of Mail Shield / Mail heuristics?