You cant spoof the header of the last trusted server, that's it.