The Link Says Google. That Doesn't Mean the Destination Is Safe.
A phishing link can begin on legitimate Google infrastructure and still take someone to a malicious page. The practical lesson for SMEs is to check the whole request, not just the first domain.
Read article