Clues that a "Received:" header has been forged include all but one of the following:
Limited Time Offer
25%
Off
Evangelina
4 months agoElli
4 months agoBrynn
4 months agoJacob
4 months agoDorothy
5 months agoCatherin
5 months ago