I got pretty much the same email... but how do one get an IP adress from a yahoo message. I can't see numbers like these anywhere on the message.
For the Telsat Com emails... All I know to do is to look under property and under details. Here's what I got.
Received: by 10.90.86.13 with SMTP id j13cs178751agb;
Thu, 5 Mar 2009 12:43:52 -0800 (PST)
Received: by 10.142.169.4 with SMTP id r4mr699170wfe.105.1236285831196;
Thu, 05 Mar 2009 12:43:51 -0800 (PST)
Return-Path: <Telecomsatellite@military.com>
Received: from mail2world.com (mwde02oc.mail2world.com [209.67.128.172])
by mx.google.com with ESMTP id 24si572980wff.22.2009.03.05.12.43.50;
Thu, 05 Mar 2009 12:43:50 -0800 (PST)
Received-SPF: fail (google.com: domain of
Telecomsatellite@military.com does not designate 209.67.128.172 as permitted sender) client-ip=209.67.128.172;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of
Telecomsatellite@military.com does not designate 209.67.128.172 as permitted sender) smtp.mail=Telecomsatellite@military.com
Received: from mail pickup service by mail2world.com with Microsoft SMTPSVC;
Thu, 5 Mar 2009 12:42:46 -0800
auth-sender:Telecomsatellite@military.com
Return-Path: <Telecomsatellite@military.com>
Received: from 10.1.106.8 unverified ([10.1.106.8]) by mwde02oc.mail2world.com with Mail2World SMTP Server;
Thu, 05 Mar 2009 12:42:45 -0800
Thread-Topic: ************************TELSAT INSTALLATIONS************************
Received: from [67.205.111.78] by military.com with HTTP; 3/5/2009 12:42:15 PM PST
X-M2WAction: reply
Thread-index: Acmd0t4w14N/rlrTQNCgZV4H1A8oNA==
From: "Brian Rogers" <Telecomsatellite@military.com>
Subject: ************************TELSAT INSTALLATIONS************************
Date: Thu, 5 Mar 2009 12:42:15 -0800
Message-ID: <df1c01c99dd2$de335990$086a010a@mail2world.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_DF1D_01C99D8F.D0101990"
X-Mailer: Microsoft CDO for Exchange 2000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.3790.2929
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-OriginalArrivalTime: 05 Mar 2009 20:42:46.0282 (UTC) FILETIME=[F0A52EA0:01C99DD2]
I don't have a clue as to what all those lines means... just a feeling something's not right... not governmental. The only line that has the mention IP is this one ip=209.67.128.172. Nothing like the one you quoted. I still don't think it's legit.