I'm curious, what domain was the email sent from?

In my experience, google recruiters email from "@google.com" addresses, and the emails are both "signed by" and "mailed by" google.com (indicating the DKIM and SPF check out).

If that's all true of this sender, it might be worth taking seriously.