brew.sh favicon

brew.sh

Category: Technology

Scanned: May 20, 2026, 01:05 PM UTC · First seen: May 20, 2026 · Threat Engines: 0 / 91 · Times Scanned: 1
93 / 100 Trust Score Based on scan findings at the time of analysis
No Threats Found
0 - High Risk50 - Moderate100 - No Threats
Not scanned has not been scanned yet. Hit Scan Now to check it.

Scans can take up to 5 minutes to complete. Please keep this tab open - we'll redirect you to the report when it's ready.

Failed
Scan unavailable
Scan failed
Screenshot of brew.sh Captured May 20, 2026
https://brew.sh
Screenshot of brew.sh
13 years
Very Popular - #8,902 Tranco rank (>10M monthly visitors)
Not listed (91 checked)
✓ Valid (TLS)
GitHub, Inc
San Francisco, United States
GitHub.com
Jekyll
185.199.108.153
Domain & WHOIS Information
Registrar 1API GmbH
Registered March 22, 2013
Expires March 22, 2027
Name Servers ns4.dnsimple-edge.org
DNSSEC Signed
Hosting GitHub, Inc
Reputation & Threat Check 91 security engines checked
File Scan Summary Powered by Quttera Engine
97 files scanned
No threats
95
Low Risk
0
Medium Risk
2
High Risk
0
No threats Low Risk Medium Risk High Risk
brew.sh/analytics/# 485 B Flagged: medium risk
brew.sh/analytics/os-version/# 549 B Flagged: medium risk
brew.sh/zh-cn 20.2 KB No threats
brew.sh/hi 22.0 KB No threats
brew.sh/ja 21.1 KB No threats
brew.sh/el 21.6 KB No threats
brew.sh/es 20.7 KB No threats
brew.sh/ca 20.3 KB No threats
brew.sh/fa 20.9 KB No threats
brew.sh/tl 20.5 KB No threats
brew.sh/nl 20.2 KB No threats
brew.sh/zh-tw 20.3 KB No threats
Show 85 more...
Quttera flagged medium risk files - is this your website?
Investigate and remove potential threats with Quttera
Remove Malware

Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.

External Links & Domains
1265
External Links
All Clean
0
Iframes
Clean
43
Referenced Domains
All Clean
0
Flagged Resources
None Detected
http://brew.sh/2019/11/27/homebrew-2.2.0/Not flagged
http://brew.sh/2020/05/29/homebrew-2.3.0/Not flagged
http://brew.sh/2020/06/11/homebrew-2.4.0/Not flagged
http://brew.sh/2020/09/08/homebrew-2.5.0/Not flagged
http://brew.sh/2020/11/18/homebrew-tap-with-bottles-uploaded-to-github-releases/Not flagged
http://brew.sh/2020/12/01/homebrew-2.6.0/Not flagged
http://brew.sh/2020/12/21/homebrew-2.7.0/Not flagged
http://brew.sh/2021/02/05/homebrew-3.0.0/Not flagged
http://brew.sh/2021/04/12/homebrew-3.1.0/Not flagged
http://brew.sh/2021/04/21/security-incident-disclosure/Not flagged
http://brew.sh/2021/06/21/homebrew-3.2.0/Not flagged
http://brew.sh/2021/10/25/homebrew-3.3.0/Not flagged
http://brew.sh/2022/02/28/homebrew-3.4.0/Not flagged
http://brew.sh/2022/05/17/homebrew-security-audit/Not flagged
http://brew.sh/2022/06/06/homebrew-3.5.0/Not flagged
Show 485 more...
Showing first 500 of 1265 entries.
ahmadsantarissy.comNot flagged
avatars2.githubusercontent.comNot flagged
blog.ryotak.meNot flagged
blog.trailofbits.comNot flagged
brew.shNot flagged
bsky.appNot flagged
cargocollective.comNot flagged
cdnjs.cloudflare.comNot flagged
d9hg3g8gs4-dsn.algolia.netNot flagged
discourse.brew.shNot flagged
docs.brew.shNot flagged
enderahmetyurt.comNot flagged
exomel.comNot flagged
formulae.brew.shNot flagged
fosdem.orgNot flagged
Show 28 more...
brew.sh Overview

Description of brew.sh

brew.sh appears to be the official website for Homebrew, a widely used open-source package manager for macOS and Linux. The homepage describes Homebrew as "The Missing Package Manager for macOS (or Linux)" and provides installation instructions, documentation links, release notes, and project-related resources for developers and system users.

Based on the domain, page metadata, and visible content, the site serves as a software project portal rather than a commercial storefront. It appears to be operated by the Homebrew open-source project and is closely integrated with GitHub-hosted infrastructure and related documentation subdomains, which is consistent with a long-established developer tool website.

Safety Assessment for brew.sh

The available scan data is broadly reassuring. At the time of this scan, 0 out of 91 security engines flagged the domain, and the checked blacklist and threat-database sources reported no listings. The domain is also long-established, has a strong web presence, and the visible content matches a legitimate software project homepage rather than a phishing lure or deceptive landing page.

One malware scan did label the overall threat level as suspicious and marked 2 analytics-related paths, but no malware family names were provided and there was no corroboration from other security engines or blacklist sources. In context, this looks more like a low-confidence heuristic finding than strong evidence of harmful activity.

Based on available data, no threats were detected at the time of this scan.

Technical Description

The site uses a valid Let's Encrypt SSL/TLS certificate with expiry shown as 2026-08-02, and DNSSEC is enabled, which may help protect DNS integrity. The domain has been registered since 2013 and uses DNSimple nameservers. Hosting appears to be on GitHub infrastructure, with the web server identified as GitHub.com and the resolved IP located in the United States.

No major infrastructure-level concerns are evident from the provided data. The main technical caution is the isolated heuristic scan result on two analytics-related URLs, but with no flagged external links, no flagged referenced domains, and no iframe concerns, the technical risk indicators appear limited at the time of this scan.

HTTP Redirect Chain
No redirects detected - direct connection to destination
Website Insights
#8,902
Tranco Rank
Very Popular
Visitors >10M/mo
Category: Technology
Rank History (30 days)
Apr 13 May 19
No cookies data available
Dispute This Score For website owners
Believe this score is inaccurate?
If you are the website owner and believe the scan results contain errors or false positives, you can submit a dispute for manual review. Our team typically responds within 1-2 business days.
You will be asked to verify your email before the dispute can be processed.
By submitting this form, you confirm that the information provided is accurate. Disputes are reviewed manually and results may take up to 48 hours to update.
One more step..
To submit your dispute for brew.sh, please click the verification link we just emailed you. Once verified, we'll review it within 1–2 business days.
This report was generated automatically and is provided for informational purposes only. Results are based on a point-in-time scan and may contain false positives or incomplete data. This does not constitute a security audit or certification. No vendor in the market can guarantee a 100% detection rate. If you believe this report is inaccurate, please submit a dispute.

Share your experience with this website. Was it safe? Did you encounter any issues?