A practical forensic guide on how to analyze a phishing email headers, trace origin servers, and verifying spoofing using SPF, DKIM, and DMARC.