Jasper Yu says to YSITD https://blog.cloudflare.com/using-cloudflare-workers-to-identify-pwned-passwords/