I'm looking at the certificate, and I'm honestly not sure what I'm even looking for. Oddest thing I can discern is that the page info does not supply ownership information, and when I go to check the certificate, it says the OU is not part of the certificate, neither issued to nor issued by.
And on top of that, another login attempt was made just today (about an hour before this post), despite the new rangen password from Last Pass. The info Google provides feels confusing and unhelpful; saying the attempt was made in the United States (just "United States"), but when I do a lookup for the IP address, it tells me it's from Google Ireland.
I suppose the only bit of relief is that the login attempt was blocked, but it's still frustrating being told someone knows my randomly generated password. I went ahead and gave it a newer, longer rangen password, but it's starting to feel like an exercise in futility. I suppose I can be thankful I don't even use that address for anything, but it's still worrying.