HTTPS & certificate details
A successful HTTPS response indicates a TLS connection completed. It does not establish trust. The Worker cannot expose certificate expiry or chain fields; use your browser’s certificate viewer for manual review.
NETSCOPE / OVERVIEW
WEB WORKSPACE · READY
Web security intelligence
Clearer insight into your digital environment.
Review links, inspect public DNS, assess website signals, and run authorized network diagnostics in one focused workspace.
Analyses this session0Current browser session
Verified checks0Individual checks passed
Review required0Caution signals found
Latest analysisNot runLocal browser history
Quick analysis
Enter a URL to start an on-page inspection.
URL / Link Analyzer
URL structure, HTTPS use, risky formatting hints, and public DNS. This is a signal review—not a malware verdict.
Avoid entering private tokens or secret URLs. Analysis results are kept in this browser only.
Your findings will appear here after you analyze a URL.
Recent activity
Latest URL analyses stored in this browser.
No activity yet. Run your first analysis.
Link Analyzer
Detailed URL inspection and DNS checks.
Use the Quick analysis form on Overview to inspect a link. Results include URL parsing, HTTPS status, user-info and encoding hints, known shortener domains, and public DNS records.
DNS Inspector
Query public DNS-over-HTTPS for common record types.
Only queried when supplied; ask your mail provider for the active selector.
DNS records will appear here.
DNS queries are sent to Cloudflare's public DNS-over-HTTPS endpoint. The DNS provider can see the hostname you query.
Analysis History
Stored locally in this browser profile.
No analyses yet.
📶 Wi-Fi Network Scan
See your connected Wi-Fi, nearby access points, and devices observed on your authorized local network.
A Fing-inspired scan workflow built around facts your Windows laptop can observe. It reads the current connection, lists nearby access points, checks selected TCP ports on your private subnet, and adds MAC addresses from the Windows ARP cache when available.
Connected networkNot checked
Nearby access points—
Devices observed—
Last scannedNot scanned
Current connection
Connection details have not been checked yet.
Ready. A scan runs only when you start it.
Nearby access points
Networks visible to this Windows adapter.
No nearby access-point scan has run.
Devices on this subnet
Only devices seen in the local ARP cache or accepting one of the selected TCP ports appear.
No device scan has run.
GitHub Pages cannot inspect local Wi-Fi. The authenticated local Windows API is required. MAC addresses come from the local ARP table and may be absent or cached; NetScope does not guess vendor, model, operating system, or device name. A device that does not appear may still be connected if it blocks these checks.
Website Security Inspector
Unauthenticated HTTPS, redirects, security headers, and cookie-flag checks for an explicitly authorized allowlisted host.
Configure the Worker API in Main Network Scan first. The Worker must list this exact hostname in ALLOWED_SCAN_TARGETS.
No inspection has been run.
The Worker follows up to four redirects only while they stay on the exact authorized hostname. TLS certificate expiry and chain details are not exposed by this Worker runtime. Scores reflect these observed controls only, not overall security.
Recent inspections
Asset Inventory & Scan Profiles
Saved locally in this browser. Adding a profile does not scan or authorize the host on the Worker.
Profiles only help fill the target field. Every network scan still requires the authorization checkbox and server-side exact allowlist.
Learning Mode
How to interpret observed signals and choose a safe next step.
Security headers
Missing CSP, HSTS, frame protection, or nosniff headers are configuration signals. Review the site’s needs and deploy changes in a test environment before production.
DNS & email
SPF lists permitted email senders; DMARC tells receivers how to handle mail that fails alignment. DNS answers vary by resolver and time. Missing records are not proof of compromise.
Open TCP ports
An open port only shows that a TCP handshake succeeded from the Worker’s network. It does not prove a vulnerability. Closed or filtered is inconclusive.
Safe practice lab
Use a host you own or a dedicated lab target, add it to the Worker’s exact allowlist, confirm written scope, then select only approved ports. Never test third-party systems.
What this page cannot do
A hosted browser cannot inspect Wi-Fi, capture packets, reliably traceroute, enumerate LAN devices, or expose raw TLS certificate chains. No results are simulated.
Main Network Scan
Bounded TCP checks for an explicitly authorized public target. No EXE or local installation.
Scan configuration
Set your Cloudflare Worker URL once, then choose an approved target.
Not connected. Deploy the Cloudflare Worker API and configure ALLOWED_SCAN_TARGETS before running a real scan.
Scan results
No scan has been run.
Results will appear here. No simulated or fabricated scan results are shown.
Recent network scans
Saved only in this browser profile. History is not uploaded to the API.
No saved network scans yet.
Important: This hosted scan checks only selected TCP ports on allowlisted public targets. It cannot discover devices on your private Wi-Fi/LAN. “Closed or filtered” is inconclusive and does not mean a service is vulnerable or safe.
Network Tools
What a website can—and cannot—check without a local agent or backend.
🌐
Public DNS
Available: query A, AAAA, MX, NS, TXT, CAA, and other public DNS record types for a hostname.
🔎
URL risk signals
Available: parse URL, identify HTTP, punycode, user-info, unusual ports, IP literal, and known shortener domains.
📶
Local Wi-Fi & LAN scanner
Real Windows adapter details, nearby access points, and authorized private-LAN TCP discovery run through the authenticated local Python service—not GitHub Pages.
Start NetScope Pro locally first. Setup guide
🖧
LAN port scanning
Use the authorized LAN scanner in the authenticated local workspace.
TCP connect checks only · 350 ms timeout · max 32 connections · two scans per minute.
Open authenticated local Network Tools🛡️
Live site security headers
Limited: cross-origin browser rules prevent dependable inspection of arbitrary sites' response headers or TLS certificate details.
🧾
On-screen reports
Available: copy findings to clipboard or use your browser's Print / Save PDF feature. History stays in local browser storage.
Accuracy note: DNS success or HTTPS in the URL does not prove a site is trustworthy. The hosted web page does not detect malware or scan Wi-Fi; nearby Wi-Fi scanning is available only when this workspace is served by the authenticated local Windows API.