Hi @xhope,
Could you share the message tracking logs of the two emails you got?
You can use the known message id and the following command to display the timestamps of the two emails under each event. If it is convenient to you, share the full log after hiding personal information, it will help us to check the sending time and transmission status of the two emails.
Get-MessageTrackingLog -MessageId <MessageId> | Select-Object Timestamp,ServerHostname,ClientHostname,Source,EventId,Recipients | Sort-Object -Property Timestamp
Another idea is to check if there are third-party transport agents or virus scanners installed on the Exchange server, which in some cases also scan outgoing emails.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.