Phishing message Header Analyzer

Performed threat investigation on malicious email headers using Message Header Analyzer. Identified display-name spoofing (`PayPal Security Team`) pointing to a suspicious `Reply-To` address (`credential-harvester@evil-domain.com`), extracted the true originating IP (`192.0.2.45`), traced routing hops, and verified key domain authentication check failures (`SPF`, `DKIM`, and `DMARC`).