Was this spam email routed through Ukraine goverment’s mail servers?


I have recently received a typical spam email, but seeing it’s from domain gov.ua I have decided to examine it’s headers knowing that From field is not clear indicator of the sender.

To my surprise, the email originating from a mail client in South Africa had been routed through mail.mk.npu.gov.ua before reaching mx.gmail.com, Google’s mail exchange servers.

  1. Am I correct in assessing this?
  2. mk.npu.gov.ua belongs to Ukraine’s national police, so why would
    spam be routed through servers belonging to Ukrainian police?

Here is the relevant header excerpt:

Received: from mail.mk.npu.gov.ua (mail.mk.npu.gov.ua. (212.1.64.157))
        by mx.google.com with ESMTPS id 127si3307596ljf.47.2020.09.03.22.16.27
        (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
        Thu, 03 Sep 2020 22:16:27 -0700 (PDT)
Received-SPF: pass (google.com: domain of ubnon01@mk.npu.gov.ua designates 212.1.64.157 as permitted sender) client-ip=212.1.64.157;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of ubnon01@mk.npu.gov.ua designates 212.1.64.157 as permitted sender) smtp.mailfrom=ubnon01@mk.npu.gov.ua
Received: from localhost (localhost (127.0.0.1))
    by mail.mk.npu.gov.ua (Postfix) with ESMTP id A584F4EA7B6;
    Fri,  4 Sep 2020 05:53:44 +0300 (EEST)
Received: from mail.mk.npu.gov.ua ((127.0.0.1))
    by localhost (mail.mk.npu.gov.ua (127.0.0.1)) (amavisd-new, port 10032)
    with ESMTP id rGonvgTsqLKI; Fri,  4 Sep 2020 05:53:44 +0300 (EEST)
Received: from localhost (localhost (127.0.0.1))
    by mail.mk.npu.gov.ua (Postfix) with ESMTP id 8015750574B;
    Fri,  4 Sep 2020 05:35:58 +0300 (EEST)
X-Virus-Scanned: amavisd-new at mk.npu.gov.ua
Received: from mail.mk.npu.gov.ua ((127.0.0.1))
    by localhost (mail.mk.npu.gov.ua (127.0.0.1)) (amavisd-new, port 10026)
    with ESMTP id QwWi9Xuk_Cn7; Fri,  4 Sep 2020 05:35:58 +0300 (EEST)
Received: from (172.20.10.2) (unknown (105.12.7.241))
    by mail.mk.npu.gov.ua (Postfix) with ESMTPSA id 7106E4EA8D6;
    Fri,  4 Sep 2020 05:29:50 +0300 (EEST)