Was this spam email routed through Ukraine goverment’s mail servers? [closed]


I have recently received a typical spam email, but seeing it’s from domain gov.ua I have decided to examine it’s headers knowing that From field is not clear indicator of the sender.

To my surprise, the email originating from a mail client in South Africa had been routed through mail.mk.npu.gov.ua before reaching mx.gmail.com, Google’s mail exchange servers.

  1. Am I correct in assessing this?
  2. mk.npu.gov.ua belongs to Ukraine’s national police, so why would spam be routed through servers belonging to Ukrainian police?

Here is the relevant header excerpt:

Received: from mail.mk.npu.gov.ua (mail.mk.npu.gov.ua. [212.1.64.157])         by mx.google.com with ESMTPS id 127si3307596ljf.47.2020.09.03.22.16.27         (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);         Thu, 03 Sep 2020 22:16:27 -0700 (PDT) Received-SPF: pass (google.com: domain of ubnon01@mk.npu.gov.ua designates 212.1.64.157 as permitted sender) client-ip=212.1.64.157; Authentication-Results: mx.google.com;        spf=pass (google.com: domain of ubnon01@mk.npu.gov.ua designates 212.1.64.157 as permitted sender) smtp.mailfrom=ubnon01@mk.npu.gov.ua Received: from localhost (localhost [127.0.0.1])     by mail.mk.npu.gov.ua (Postfix) with ESMTP id A584F4EA7B6;     Fri,  4 Sep 2020 05:53:44 +0300 (EEST) Received: from mail.mk.npu.gov.ua ([127.0.0.1])     by localhost (mail.mk.npu.gov.ua [127.0.0.1]) (amavisd-new, port 10032)     with ESMTP id rGonvgTsqLKI; Fri,  4 Sep 2020 05:53:44 +0300 (EEST) Received: from localhost (localhost [127.0.0.1])     by mail.mk.npu.gov.ua (Postfix) with ESMTP id 8015750574B;     Fri,  4 Sep 2020 05:35:58 +0300 (EEST) X-Virus-Scanned: amavisd-new at mk.npu.gov.ua Received: from mail.mk.npu.gov.ua ([127.0.0.1])     by localhost (mail.mk.npu.gov.ua [127.0.0.1]) (amavisd-new, port 10026)     with ESMTP id QwWi9Xuk_Cn7; Fri,  4 Sep 2020 05:35:58 +0300 (EEST) Received: from [172.20.10.2] (unknown [105.12.7.241])     by mail.mk.npu.gov.ua (Postfix) with ESMTPSA id 7106E4EA8D6;     Fri,  4 Sep 2020 05:29:50 +0300 (EEST)