This kind of phishing has been around for quite a while, in exactly the form you describe. I use a password manager, and change the passwords fairly often. So

This kind of phishing has been around for quite a while, in exactly the form you describe. I use a password manager, and change the passwords fairly often. So the first time I got one of these phishing attempts, I laughed and thought "Oh, so that's what my passwords look like!" By that time, it was long-retired and so I don't even have a way to find out what site it was that had been compromised.