Looking at the header will not help in the case of a hacked Yahoo account. The message will genuinely have been sent from Yahoo.

Some email services simply block everything coming out of Yahoo. This is not a bad idea. A service as viciously, irresponsibly incompetent as Yahoo doesn't deserve to stay in business.