@0xF21D I will assume that this is only on the cloudflare WAF feature where they automatically check against known leaked credentials. The website owner can request this feature to be able to inform the user they should use a different password. If they would analyse all traffic without explicit consent from the site owner it would be dubious at best.