How phishing emails are sent from no-reply@accounts.google.com | Kaspersky official blog
Scammers are exploiting Google services to send phishing emails that appear to originate from accounts.google.com, disguising the messages as subpoenas.
https://www.kaspersky.com/blog..../dkim-replay-attack-

Discover the world at Altruu, The Discovery Engine