Detect weak passwords used with corporate account on untrusted domains

[carbureted]

Detect username/password pairs on generic login forms
On submit, check for enterprise account (user@example.com)
If enterprise account, check password complexity
If password complexity is below configurable requirement, send an alert with domain/username