What the public page does not do
This public page does not fetch the target page, expand redirects, scan infrastructure, or probe hosts. It prepares a WhatsApp draft so Kaval can review the context in a controlled product flow.
- It cannot prove a site is safe without opening or scanning it.
- It does not expand short links in the public page.
- A clean-looking URL can still host a phishing page later.