4 ms·

Those leaked passwords are already in the internet. And even if they're aren't (then they are not leaked), yes, go brute force google api.