I got just this typical spam email, but this one seemed odd. It came from Google Forms, which apparently can send emails too, however you have to sign in to Google Forms to use it, and it uses the email you signed in with.
How did this spammer manage to appear to send from the Forms email? This seems like it can be easily used to phish unsuspecting people who trust a Google address. What is especially strange is that this mail came from the
google.com domain, which is not something that public users can create mails on, and it is signed by google.com, so as far as i understand it cant be spoofed - so how is this possible?