Check Page Source and Response Headers

Ctrl+U, check JS files.

View page source and HTTP response headers for hidden comments, API keys, and linked JavaScript files. A hit is credentials in HTML comments, interesting endpoints in JS, or debug data leaked in response headers.