mercola.com Domain Breach Exposure Report

The domain mercola.com exhibits a high-risk score of 91, primarily driven by a significant volume of historical data breaches (4725 events) and active infostealer logs (1349 events) over the observed period. The data indicates a substantial exposure affecting both employees and clients, with a notable increase in client-related events during March 2026. The prevalent malware families, including LummaC2, Redline, and Rhadamanthys, are commonly associated with credential harvesting and data exfiltration, suggesting a direct threat to sensitive information. The observed data breach and infostealer activity, largely originating from "Combolist sources," points to a high likelihood of compromised credentials being exploited. The targeted services include various login endpoints for mercola.com and shop.mercola.com, indicating that attackers are actively attempting to gain unauthorized access to user accounts. The geographical distribution shows a concentration of activity originating from India and the Philippines, though United States-based activity is also present. Given the nature of the threats and the volume of compromised data, immediate focus should be placed on credential hygiene, multi-factor authentication enforcement, and enhanced monitoring of login activities to mitigate further unauthorized access and potential data exfiltration.