Six-check network forensics scan: TLS interception, DNS hijack, captive portal manipulation, certificate transparency (offline SCT verification), NTP drift, and route anomaly. Returns an aggregated verdict with per-check evidence and confidence scores. Result hash is anchored on-chain to Base for independent verification.