PHP
PHP is one of the most common server-side languages on the web, underpinning a large fraction of CMS and custom application stacks. It is usually inferred from X-Powered-By headers, session-cookie names such as PHPSESSID, and .php URL patterns.
End-of-life PHP versions no longer receive security fixes, so an exposed version banner is a useful risk signal. The language itself is neutral — what matters is the application running on top of it and the behaviour the scan records.
Commonly deployed alongside PHP
Of the 49,539 public scans where PHP was detected, these are the technologies most often present on the same site. The share is the percentage of PHP sites that also ran each one.
| Technology | Category | Share of PHP sites |
|---|---|---|
| MySQL | wappalyzer | 82.63% |
| WordPress | cms | 74.33% |
| MetaGenerator | miscellaneous | 73.82% |
| jQuery | wappalyzer | 69.83% |
| JQuery | miscellaneous | 60.88% |
| Open-Graph-Protocol | miscellaneous | 54.73% |
| WordPress | wappalyzer | 49.7% |
| Google Analytics | wappalyzer | 38.87% |
| HTTP/3 | wappalyzer | 37.07% |
| Cloudflare | wappalyzer | 32.93% |
| HSTS | wappalyzer | 31.92% |
| Cloudflare Bot Management | wappalyzer | 28.44% |
| Script | miscellaneous | 27.03% |
| Google-Analytics | miscellaneous | 26.22% |
How ScanMalware detects PHP
PHP is detected by analysing the response headers, HTML markup, JavaScript runtime and asset URLs captured when ScanMalware loads the site in a real headless browser.
From any scan you can pivot into related signals — JARM TLS fingerprints, ASN ownership and BGP routing, certificate history, JavaScript analysis and the overall security verdict — to understand not just that PHP is present, but how it is being used. Open the full search interface for PHP →
Recent public scans featuring PHP
A rolling sample of recent public scans where PHP was detected. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| Testing Heading 1 - Tiêu đề trang web http://febet-c1-t1-demo2-com.pages.dev/ | 2026-07-16 |
| Synthtopia – Synthesizer and electronic music news, synth and music software reviews and more! https://synthtopia.com | 2026-07-16 |
| Venta al por mayor de bolsos complementos distribuidor mayorista Cobo Calleja Fuenlabrada - Bolsos Benini Kai Fei, S.L. https://bolsosbenini.es | 2026-07-16 |
| - DataDroped https://datadroped.com/bulk-url-checker/ | 2026-07-16 |
| Property Management System in Thailand https://thelivingos.com | 2026-07-16 |
| Explore Flavors, Discover Life. https://www.pathculture.com | 2026-07-16 |
| Miyeon - Chapter 53 (+ Hiatus Notice) - Lovesjane Scans http://lovesjane.site/manga/miyeon/chapter-53-hiatus-notice/ | 2026-07-16 |
| Crimes — Gore.best https://gore.best/category/crimes?sort=likes | 2026-07-16 |
Frequently asked questions about PHP
- Does using PHP mean a website is unsafe?
- No. PHP is a stack component, not a verdict. ScanMalware scores the whole page — its scripts, redirects, certificates, threat-intelligence matches and behaviour — so a site using PHP can be perfectly safe or actively malicious.
- How many sites using PHP has ScanMalware scanned?
- PHP has been detected in 49,539 public scans on ScanMalware.com. Each scan is a real headless-browser visit, and the figure updates as new URLs are submitted.
- What technologies are commonly used with PHP?
- Across scanned sites, PHP is most often seen alongside MySQL, WordPress and MetaGenerator. The full co-occurrence breakdown is listed on this page.
Browse all profiled technologies on the technology index, or scan a URL to see its full stack.