Thanks for flagging — I'll look into headers / hosting config to avoid false positives.