No, that won't manually test it in random sites. They will add this creds to their bot net to test Mandy specific sites like Facebook, Twitter, GMail, several larger financial institutions, and many others.
Always use different strong passwords and use MFA wherever it's available. Security, like ogres, has layers.
Yeah, they have ones with 1 TB HDD, and some with Windows installed too. Besides these guys, I routinely search for surplus equipment all the time