Comment by jroes

They would only discover the domains, not the passwords you entered. You type the domain at the command line, but you type the password into stdin.