Oddly enough, a password reset email from aws to my google hosted private domain email address was marked as phishing just yesterday. Sender’s email is no-reply@signin.aws.