Tools
Paste headers, see the connecting IP, SPF/DKIM/DMARC, and whether From was spoofed.
Paste full source or the header block. Gmail: Show original. Outlook: View source. Nothing is stored.