Paste the raw headers of an email to reconstruct its delivery path, check SPF/DKIM/DMARC results, and look for signs of a spoofed sender.