If you notice, you will see different results for matching as spoofed mail, like SPF fail, DMIM or DMARC. You can go to message tracking, select Advanced and search with these parameters. With the results you should be able to get the email details. Currently most of the reports are not drill-down. I suggest Cisco to make it interactive to call it as true Next-Gen reporting.
