They provide the headers of the classified message and it seems to have passed through some kind of group expansion; the message provided did not come _directly

They provide the headers of the classified message and it seems to have passed through some kind of group expansion; the message provided did not come _directly_ from Stripe. Initially it was received from from a62-28.smtp-out.us-west-2.amazonses.com but then it went through a listserv, through another SMTP hop via gappssmtp.com, then delivered to the spam folder of the recipient.... There could be a million reasons why this happened but it's equally correct to say that "Gmail spam-filters Google Groups" as it is to say "Gmail spam-filters Stripe" based on this evidence.