Ask HN: Why is Google tolerating impersonation of Gmail from it's own domain?

For several weeks now I've been receiving spam impersonating Gmail. It always contain link to https://storage.googleapis.com/rightsmoves/... The email looks like this:

https://imgur.com/xyXfPI8

Even Google's own Gemini knows it's a scam:

> The URL https://storage.googleapis.com/rightsmoves/ points to a specific Google Cloud Storage bucket named "rightsmoves". Based on recent security data and web scans, this particular bucket has been associated with malicious activity, specifically phishing and "traffic stealing" schemes.

I've reported it several times via Google Cloud Platform abuse form and they ignore it.

Is it Google's total incompetence? Why are they allowing scams from their own domain?