Google Sites is a structured wiki and web page creation tool included as part of the free, web-based Google Docs Editors suite offered by Google. From Wikipedia
The attack exploits Google Sites and DKIM protocols to mimic legitimate security alerts, prompting Google to roll out final protections and urge stronger account security measures.