What the scanner looks at
It inspects the public homepage only: DNS records, the HTTP redirect chain, the final response IP, and every external script, stylesheet, image, iframe and form action in the HTML. It does not browse the site, submit forms, or run JavaScript.