FrankenPHP appears more often by runtime than by page title

FrankenPHP is a PHP application server. A production service built with FrankenPHP may show a title for the application it serves, not for the runtime underneath it. That makes runtime and page-title inventories fundamentally different.

The November 5, 2026 count comparison showed exactly that split. The app field returned 4,922 matches, the title field returned 75 and the HTTP body field returned 1,299. All observations used sub_type="all" , page 1 and pagesize 1.

The observations

app="FrankenPHP" : 4,922 at 2026-11-05T17:49:55Z.

title="FrankenPHP" : 75 at 2026-11-05T17:49:57Z.

http.body="FrankenPHP" : 1,299 at 2026-11-05T17:49:58Z.

The app count is the strongest runtime-level observation. It can identify services whose headers, behavior or packaged characteristics cause ZoomEye to assign the FrankenPHP application fingerprint.…