Here are the headers I can see when I receive the spoofed email.
DomainKey-Status: no signature
Return-Path: <
[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
s16268349.onlinehome-server.info
X-Spam-Level:
X-Spam-Status: No, score=-0.7 required=7.0...