Varnish
Varnish is a high-performance HTTP reverse-proxy and caching server placed in front of web applications to accelerate delivery. ScanMalware detects it from the Via and X-Varnish response headers.
Varnish sits ahead of the origin, so it confirms a caching layer but reveals nothing about the application behind it — that is what the rest of the scan analyses.
Commonly deployed alongside Varnish
Of the 3,873 public scans where Varnish was detected, these are the technologies most often present on the same site. The share is the percentage of Varnish sites that also ran each one.
| Technology | Category | Share of Varnish sites |
|---|---|---|
| HSTS | wappalyzer | 60.19% |
| Open-Graph-Protocol | miscellaneous | 55.03% |
| X-UA-Compatible | miscellaneous | 42.21% |
| MetaGenerator | miscellaneous | 28.66% |
| Script | miscellaneous | 22.27% |
| Google Analytics | wappalyzer | 20.15% |
| jQuery | wappalyzer | 18.73% |
| Google Tag Manager | wappalyzer | 18.63% |
| PHP | wappalyzer | 18.06% |
| PoweredBy | miscellaneous | 15.25% |
| Cloudflare | wappalyzer | 13.8% |
| Google-Analytics | miscellaneous | 12.15% |
| WordPress | cms | 11.07% |
| JQuery | miscellaneous | 9.96% |
How ScanMalware detects Varnish
Varnish is detected by analysing the response headers, HTML markup, JavaScript runtime and asset URLs captured when ScanMalware loads the site in a real headless browser.
From any scan you can pivot into related signals — JARM TLS fingerprints, ASN ownership and BGP routing, certificate history, JavaScript analysis and the overall security verdict — to understand not just that Varnish is present, but how it is being used. Open the full search interface for Varnish →
Recent public scans featuring Varnish
A rolling sample of recent public scans where Varnish was detected. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| 飒拉（ZARA Online） https://zara.cn | 2026-08-15 |
| INDEPENDENCE DAY OF INDIA – India NCC https://indiancc.mygov.in/activity/subhomoydas/independence-day-of-india/ | 2026-08-15 |
| Winning Powerball Ticket Sold in Quincy | Woodward Community Media Springfield https://wcmspi.com/2026/08/13/winning-powerball-ticket-sold-in-quincy/ | 2026-08-15 |
| Billion-dollar Powerball Ticket Sold At Quincy, Illinois HyVee https://khmoradio.com/ixp/712/p/quincy-illinois-winner-powerball/ | 2026-08-15 |
| Bighead Carp | Nebraska Invasive Species Council | Nebraska https://neinvasives.com/aquatic-invasive-fish/bighead-carp/ | 2026-08-15 |
| Inicio | RUNT https://www.runt.gov.co | 2026-08-15 |
| Miami area’s Corte Argentino recalls 14 tons of premium beef | Miami Herald https://amp.miamiherald.com/news/recalls/article316852749.html | 2026-08-14 |
| Wiadomości - najnowsze informacje z Polski i Świata - Radio ZET https://gfx.wiadomosci.radiozet.pl | 2026-08-14 |
Frequently asked questions about Varnish
- Does using Varnish mean a website is unsafe?
- No. Varnish is a stack component, not a verdict. ScanMalware scores the whole page — its scripts, redirects, certificates, threat-intelligence matches and behaviour — so a site using Varnish can be perfectly safe or actively malicious.
- How many sites using Varnish has ScanMalware scanned?
- Varnish has been detected in 3,873 public scans on ScanMalware.com. Each scan is a real headless-browser visit, and the figure updates as new URLs are submitted.
- What technologies are commonly used with Varnish?
- Across scanned sites, Varnish is most often seen alongside HSTS, Open-Graph-Protocol and X-UA-Compatible. The full co-occurrence breakdown is listed on this page.
Browse all profiled technologies on the technology index, or scan a URL to see its full stack.