sievepalmful[.]com

The domain sievepalmful.com was registered on 21 February 2026 through eNom, LLC and is currently active. DNS resolution points to the IPv4 address 172.253.115.105, which belongs to AS15169 Google LLC located in the United States. The authoritative name servers are ns1.publicdnsservice.com and ns2.publicdnsservice.com. HTTP requests receive a 301 redirect and the site presents a TLS certificate issued by Let’s Encrypt (R13). The domain is listed on a single security blocklist and was previously blocked by PhishDestroy. Threat intelligence classifies the site as a brand‑impersonation campaign targeting Google. The page title returned from the server is simply “Google”, matching the declared brand target. The presence of reCAPTCHA and HTTP/3 indicates that a modern web stack is being used, possibly to increase credibility. Despite the IP being owned by Google’s network, the domain’s Gridinsoft trust score of 24 / 100 and the fact that only 2 of 95 VirusTotal scanners flagged the domain suggest a low‑profile deployment that evades bulk detection while still presenting a high‑risk profile. Defenders should treat sievepalmful.com as a high‑risk impersonation vector. Immediate mitigation steps include adding the domain to outbound and inbound filtering rules, monitoring DNS queries for the associated IP range, and enforcing TLS inspection to verify the Let’s Encrypt certificate chain. Continuous observation of the 301 redirect behavior and any changes to the page title or hosted content is advised, as the current evidence set is limited to metadata without full page analysis. Organizations with Google‑based authentication should reinforce user education and consider MFA enforcement to reduce the impact of potential credential harvesting.