Check domains for exposed credentials