Thanks for your answer, your hints about dns and clamav inspired me for further analysis…
yes, it was actually clamd, by some reason not working properly unfortunately, should investigate why…
When I turned it off in mail domain options and commented in exim config + used snappymail instead of roundcube everything started to work ))
Thanks!!