How about if you monetised it by phishing, pretending to actually be gmail.com?
I don't think it's actually illegal to do that. Just a bit morally off.
They were sent to you, you have a right to sell them (so long as you're in a one-party-consent state when it comes to recording). You're up to snuff law-wise.
Definetly a shady thing to do.