A developer reported the scam after noticing a slight discrepancy in the email address. The scam passed Google’s own DKIM checks.

Etherem Name Service developer Nick Johnson received the same Google phishing scam and reported the attackers’ misuse of Google OAuth applications as a security bug to Google. The company initially brushed it off as “working as intended,” but then backtracked and is now working on a fix.

Until Google rolls out a fix, you'll have to be on the lookout for this particularly convincing phishing scam.