> Received: from crt21.co.jp (60.43.215.250) by server.xxxxx.local
> (xxx.xxx.xxx.xxx) with Microsoft SMTP Server (TLS) id x.x.x.x; Tue, 5
> Feb  2019 09:05:56 +0300
> Received: from [84-241-41-230.shatel.ir]
> (unknown [84.241.41.230]) (using  TLSv1 with cipher DHE-RSA-AES256-SHA
> (256/256 bits))   (Client did not present  a certificate) by crt21.co.jp
> (Postfix) with ESMTPSA id 0568913F380A2   for  <myname@mydomain.com>;
> Tue,  5 Feb 2019 15:02:04 +0900 (JST)
> From: <myname@mydomain.com>
> Date: Tue, 5 Feb 2019 07:02:07 +0100
> List-Unsubscribe:<mailto:C10155B2CC1F1C4E8D31E99D8211F1@unsubscribe.crt21.co.jp>,
> X-Priority: 1 (Highest)
> X-Mailer: Duesfatyjz 8
> Subject: This account has been hacked! Change your password right now!
> Content-Transfer-Encoding: base64 Content-Type: text/plain;
> charset="UTF-8" X-CSA-Complaints: whitelistcomplaints@crt21.co.jp
> List-Help: contact@crt21.co.jp
> Message-ID:<3qngvtqdrb8h$0wg3v672$xnrd6nmz$@crt21.co.jp>
> X-Sender:<satoshi@crt21.co.jp>
> X-Abuse-Reports-To: <abuse@crt21.co.jp>
> To:<myname@mydomain.com> Errors-To: noreply@crt21.co.jp
> User-Agent:Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.16)
> Gecko/20101125 Thunderbird/3.0.11 MIME-Version: 1.0
> Return-Path:satoshi@crt21.co.jp
> X-MS-Exchange-Organization-AuthSource: server.xxxxxxx.local
> X-MS-Exchange-Organization-AuthAs: Anonymous
> X-MS-Exchange-Organization-PRD: mydomain.com
> X-MS-Exchange-Organization-SenderIdResult: SoftFail
> Received-SPF:SoftFail (server.xxxxxxx.local: domain of transitioning
> myname@mydomain.com discourages use of 60.43.215.250 as  permitted
> sender)
> X-MS-Exchange-Organization-SCL: 0
> X-MS-Exchange-Organization-PCL: 2
> X-MS-Exchange-Organization-Antispam-Report:
> DV:3.3.5705.600;SID:SenderIDStatus SoftFail;OrigIP:60.43.215.250