Clues that a "Received:" header has been forged include all but one of the following:
Limited Time Offer
25%
Off
Evangelina
9 months agoElli
9 months agoBrynn
9 months agoJacob
10 months agoDorothy
10 months agoCatherin
11 months ago