Nginx
nginx is the most common web server and reverse proxy on the internet, used both as a site’s origin server and as a load balancer or TLS terminator in front of an application. ScanMalware detects it from the Server response header and its characteristic default pages.
A version banner in that header is useful for matching known CVEs, though many operators suppress or fake it. On its own, nginx says nothing about whether a site is malicious — it is equally common on legitimate sites and on bulletproof-hosted malware infrastructure.
Commonly deployed alongside Nginx
Of the 1,958 public scans where Nginx was detected, these are the technologies most often present on the same site. The share is the percentage of Nginx sites that also ran each one.
| Technology | Category | Share of Nginx sites |
|---|---|---|
| PHP | wappalyzer | 95.51% |
| Fastly | wappalyzer | 85.25% |
| Pantheon | wappalyzer | 85.25% |
| MariaDB | wappalyzer | 85.25% |
| HSTS | wappalyzer | 84.23% |
| MetaGenerator | miscellaneous | 68.45% |
| Google Analytics | wappalyzer | 56.71% |
| Open-Graph-Protocol | miscellaneous | 48.49% |
| Google Tag Manager | wappalyzer | 48.44% |
| Drupal | cms | 45.43% |
| jQuery | wappalyzer | 43.44% |
| MySQL | wappalyzer | 41.86% |
| WordPress | cms | 40.12% |
| Drupal | wappalyzer | 39.25% |
How ScanMalware detects Nginx
Nginx is detected by analysing the response headers, HTML markup, JavaScript runtime and asset URLs captured when ScanMalware loads the site in a real headless browser.
From any scan you can pivot into related signals — JARM TLS fingerprints, ASN ownership and BGP routing, certificate history, JavaScript analysis and the overall security verdict — to understand not just that Nginx is present, but how it is being used. Open the full search interface for Nginx →
Recent public scans featuring Nginx
A rolling sample of recent public scans where Nginx was detected. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| black and blue mermaid tail Detalle 63+ imagem mermaid tail background - 1800 wallpaper https://1800wallpaper.pages.dev/post/black-and-blue-mermaid-tail/ | 2026-08-13 |
| Alteryx: Automate Data Workflows & Get AI-Powered Insights https://whitelist.alteryx.com | 2026-08-13 |
| 秋风影视-丁香花影院,高清片库·极速畅享 | 热门影视在线观看 https://ydtcz.com/ | 2026-08-13 |
| Hooke Road®:1997-2026 Jeep & Truck Parts & SUV Accessories on Sales – Hooke Road 4x4 https://hookeroad.com | 2026-08-13 |
| TYSSU https://vip-ssu.com/ | 2026-08-13 |
| 403 Forbidden https://cdn1.akusherstvo.ru | 2026-08-13 |
| IBAN-Rechner https://iban-4199.kxcdn.com | 2026-08-13 |
| Log in to continue - Log in with Atlassian account https://dmc.atlassian.net | 2026-08-13 |
Frequently asked questions about Nginx
- Does using Nginx mean a website is unsafe?
- No. Nginx is a stack component, not a verdict. ScanMalware scores the whole page — its scripts, redirects, certificates, threat-intelligence matches and behaviour — so a site using Nginx can be perfectly safe or actively malicious.
- How many sites using Nginx has ScanMalware scanned?
- Nginx has been detected in 1,958 public scans on ScanMalware.com. Each scan is a real headless-browser visit, and the figure updates as new URLs are submitted.
- What technologies are commonly used with Nginx?
- Across scanned sites, Nginx is most often seen alongside PHP, Fastly and Pantheon. The full co-occurrence breakdown is listed on this page.
Browse all profiled technologies on the technology index, or scan a URL to see its full stack.