It might be feasible to look at dates in 'Received' headers, instead of just 'Date' and the mbox separator entries. Although, how to decide which ones are trustworthy?
Cost: not sure, please ask.