It would be good if, in the email header, the “From” field showed a message indicating that the actual email address the message was sent from is X, and not just the one the phisher wants to display. At least there should be a warning that the real s...