Researchers from Agari entered credentials that didn’t belong to anyone into phishing sites and then waited to see what the…