Dark Web Monitoring — Domain Exposure Checks (in development)
Dark web monitoring is not running yet. Here is what you can actually run today.
An on-demand exposure check on a domain you own — breach lookup, password exposure, lookalike domains, certificate transparency and email security records.
What the check actually does
Public-source lookups against a domain you own. We do not crawl dark web forums, Telegram channels, WhatsApp groups, paste marketplaces or app stores — no part of this product does that today.
Breach database lookup — live
Looks up addresses on your domain against Have I Been Pwned's breach corpus. This depends on an HIBP key being configured; when it is not, the dashboard states plainly that breach data was unavailable rather than showing an all-clear.
Password exposure check — live
A free, key-less check of a password against known breach corpora using k-anonymity: only the first five characters of the SHA-1 hash are sent, and the password is never stored or logged.
Lookalike domain check — live
Generates typosquat variants of your domain by known techniques and resolves each one over DNS, so you can see which lookalikes are registered and where they point.
Certificate transparency — live
Queries public certificate transparency logs for certificates issued on your domain and its subdomains — useful for spotting hosts you did not know were published.
Email security records — live
Resolves SPF, DMARC and DKIM records for the domain and reports what is missing or weak — the records that decide how easily your domain can be spoofed.
Planned: continuous monitoring and alerts
Scheduled re-checks of a monitored domain, alert routing, and takedown support are on the roadmap. Today the check runs when you run it — nothing watches your domain in the background.
What this product does not do
Worth saying out loud, because most pages in this category imply otherwise.
- No crawling of dark web forums, Telegram channels, WhatsApp groups or criminal marketplaces. There is no such collection anywhere in the product.
- No background monitoring or alerting. The check runs when you run it; scheduled re-checks are not operating.
- No stealer-log, fake-app or counterfeit-listing feeds, and no takedown service.
- Breach lookups depend on an HIBP key. Where a source cannot be queried, the dashboard labels it unavailable — it does not present an unchecked source as clean.
Explore more products
Bachao.AI covers your entire security surface — from code to cloud to compliance.
Run the check, or help us shape the product
Run the on-demand exposure check on a domain you own, or talk to us about piloting continuous monitoring while we build it. We will tell you plainly what it can and cannot do.