⚠️ Only checks publicly served HTML, headers, and well-known files - nothing is stored.