I imagine password cracking apps are also smart enough to try letters from the site domain combined with other known base passwords (dictionary words, common su

I imagine password cracking apps are also smart enough to try letters from the site domain combined with other known base passwords (dictionary words, common substrings from other password leaks, etc.).