Well this is silly. I guess it's not really a forged header. I was scanning mails that were tagged as spam and passed on, and the original of this was going to a stepindustries.net account. Only this specific user is having that mail all forwarded to an AOL account. Within AOL, she's marking the mail as spam.
Maybe it's finally time I start holding or blocking spam as opposed to just tagging it and passing it on. Haven't had a false-positive in over 2 weeks.
smime.p7s
Description: S/MIME cryptographic signature
