# Feature Request: Dark Web & Credential Leak Monitor
## Overview
The `contact_spy.rs` module already extracts employee emails from the target domain perfectly. The next logical step in an enterprise assessment is answering the question: *"Are any of these discovered emails compromised in known database breaches?"*
We need a module that takes the output of `contact_spy` and cross-references it against credential leak APIs.
## Implementation Requirements
1. **New Module**: Create `src/leak_monitor.rs`.
2. **Integration Sources**:
- **HaveIBeenPwned (HIBP) API**: `https://haveibeenpwned.com/api/v3/breachedaccount/{email}`.
- **DeHashed API**: For more advanced enterprise/cleartext password monitoring.
3. **Workflow Integration**:
- This module should optionally accept the `emails` vector generated by the `contact_spy` module.
- For each email, query the breach APIs.
4. **Result Struct**:
- Output an array of breached accounts containing the specific breach name, date, and compromised data classes (e.g., "Passwords, IP Addresses, Phone Numbers").
## Why is this Pro-Level?
Identity compromise is the fastest way into a network. Correlating scraped corporate emails directly with active dark web breaches provides immediate, actionable intelligence to Chief Information Security Officers (CISOs) using the platform.