How does the font being different prove he faked it? Browsers can display different fonts depending on what they have installed, and their size can depend on the window size too. Even with all of that in mind, why would he deliberately change the font if he was creating a fake screenshot? Inspect element lets you just change the text, you don't have to mess around with the font or size at all.