Where does the UTM document whether it successfully validated SPF records? and with which IP and or Domain it was validated? I have to investigate a phishing campaign and i have access to the email itself as well as the smtp log file. In neither of…