@futurebird Depends. You could most likely figure out if it came from a block ARIN says is in use by NASA. Blocks used by NASA should be documented correctly in Whois records. Most likely are. My very educated guess is that space to mail server is “internal” to NASA. Which would mean you could confirm it came from a NASA server to a high degree of certainty.