Back

google.com.lb Domain Breach Exposure Report

Risk Score

High Risk

Massive event volume or critical assets compromised.

AI Findings Summary

Critical

The domain google.com.lb has been associated with a significant number of data breach events, totaling 244 over the observed period. Additionally, 65 infostealer events were recorded, indicating potential credential harvesting. The majority of these events, 79%, are linked to historical data breaches, while 21% are active infostealer logs. The timeline shows a notable increase in employee and client-related events during March and April 2026, with 7 employee events and 55 client events in March, followed by 46 employee and 72 client events in April. Malware families such as Redline, LummaC2, and Vidar were identified in relation to these events. This exposure presents a high risk due to the volume of data breach and infostealer activity, suggesting a compromised environment or widespread credential compromise. The focus for remediation should be on identifying the root cause of the data breaches, securing credentials exposed through infostealers, and investigating the identified malware families. Given the nature of the domain and the prevalence of data breaches and credential theft, prioritizing a thorough security audit and incident response is critical.

Total Events

309
credential exposure events

Employee Affected Events

69
account email domain = google.com.lb

Client Affected Events

240
service target = google.com.lb

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
8053270
peak month 72
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events65
Share21%
Data breaches
Events244
Share79%
Infostealer logs (21%)
65events
Data breaches (79%)
244events

69 compromised employee accounts pose an infrastructure risk, while 240 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

No Data Available

Malware Families Distribution

Distribution of Active Stealer Strains

Redline6
LummaC23
Vidar1

Top Login URLs

Top exposed services found in the event results

  1. 1google.com.lb47
  2. 2https://google.com.lb39
  3. 3https://www.google.com.lb25
  4. 4https://google.com.lb/logon18
  5. 5https://google.com.lb/login12
  6. 6google.com.lb/logon11
  7. 7https://google.com.lb/11
  8. 8google.com.lb/9
  9. 9https://translate.google.com.lb/8
  10. 10https://google.com.lb/home7

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

United States
Events9
Japan
Events6
South Korea
Events4
Germany
Events4
China
Events3
Switzerland
Events2
Netherlands
Events2
Taiwan
Events2

Country Breakdown

  1. 1United States9
  2. 2Japan6
  3. 3South Korea4
  4. 4Germany4
  5. 5China3
  6. 6Switzerland2
  7. 7Netherlands2
  8. 8Taiwan2

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

-
Total

Operating System Distribution

Distribution of compromised endpoint builds

Windows 1131
Windows 10 Home [x64]1
Windows Server 2003 x321
Windows 10 Pro1
Windows Server 2012 x321

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
244
Combolist pools
0
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.