WebScan FREE

A 23-module website scanner I host for free at sevinhub.com/webscan. I forked it from lissy93/web-check (MIT) and rebuilt the whole thing in pure PHP so it runs on plain shared hosting — no Node, no Docker, no tracking. Themed end-to-end with the SevinHub dark UI you see on the rest of my site.

Forked · Open Source · MIT

🍴 Why I forked it

The original web-check by Alicia Sykes is a beautiful Node.js + React app — but it needs a build pipeline, serverless functions, and either Docker or a hosted Node runtime. That doesn't match the way most of my SevinHub users deploy (cPanel shared hosting, upload-and-go).

So I ported the idea into pure PHP — same 23-ish checks, parallel-fetch frontend, zero JavaScript framework, zero npm. It runs on the same SevinHub shared-hosting stack the rest of my marketplace runs on, and it ships with the same dark purple/gold theme my products use. License stays MIT, credit stays on Alicia. I just made it deployable for everyone in my niche.

23 checks. One scan. Parallel.

Type a domain, hit Scan, and every card fills in as its check returns — no waiting on the slowest one.

🌐

IP Info

Resolves IPv4 / IPv6 + ISP, country, city, AS.

🖥️

Server Info

Server header, X-Powered-By, framework hints.

Page Quality

Title, meta description, viewport, favicon, canonical, size, load time.

🛡️

HTTP Security

HSTS, CSP, X-Frame-Options + 6 more — scored A+ → F.

🔐

SSL Certificate

Full chain, issuer, validity, SANs, days remaining.

📡

DNS Records

A, AAAA, MX, NS, TXT, SOA, CNAME, CAA.

🔏

DNSSEC

DoH-verified AD flag — is the domain actually signed?

✉️

Email Auth

SPF + DMARC + MX presence detection.

📋

IP WHOIS

RDAP/ARIN registry lookup of the hosting IP.

🪪

Domain Info

Registration date, expiry, status, nameservers.

📑

HTTP Headers

Every response header, prettied.

↪️

Redirect Chain

Every hop with status code — catches loops.

🍪

Cookies

All Set-Cookie headers, parsed.

🧩

Tech Stack

CMS, JS framework, analytics, payments — detected from HTML + headers.

🧱

Firewall / WAF

Cloudflare, Sucuri, Imperva, AWS, Akamai, Fastly fingerprints.

🔗

Social Tags

og: + twitter: meta — what link previews show.

🤖

robots.txt

Crawl rules + preview.

🗺️

Sitemap

sitemap.xml count + URL preview.

📜

security.txt

RFC 9116 disclosure policy lookup.

🔌

Open Ports

16 common ports probed with 1.2s timeout.

🔍

Linked Pages

Internal vs external link breakdown.

🌱

Carbon Footprint

Estimated CO₂ per visit based on transfer size.

🕰️

Archive History

Closest Wayback Machine snapshot + link.

Original vs. my SevinHub port

Original
lissy93/web-check
  • Node.js + React + Vite
  • Serverless functions for each check
  • Vercel / Netlify / Docker deploy
  • Build step required (npm install)
  • MIT licensed · 22k+ ⭐ on GitHub
My fork
WebScan by SevinHub
  • Pure PHP 8.1+ · zero dependencies
  • Drops into any cPanel public_html/
  • Vanilla JS frontend (no framework)
  • SevinHub dark theme baked in
  • Still MIT — credit + link to upstream everywhere

Use it, fork it, ship it

MIT licensed. If you find a bug, want to add a check, or want to drop it into your own hosting stack — go for it. The original lives at github.com/lissy93/web-check; my SevinHub-themed PHP port follows the same terms.

SevinOS