Trace a message back through every hand it passed.
Paste the raw headers to see each hop, how long it held the message, and whether SPF, DKIM and DMARC genuinely vouched for the sender.
Everything above the message body, including every Received: line.
Check something else next
The other modules look at the same target from a different angle.