pypi.org favicon

pypi.org

Category: Technology

Scanned: Jun 16, 2026, 03:20 AM UTC · First seen: Jun 16, 2026 · Threat Engines: 0 / 91 · Times Scanned: 1
94 / 100 Trust Score Based on scan findings at the time of analysis
No Threats Found
0 - High Risk50 - Moderate100 - No Threats
Not scanned has not been scanned yet. Hit Scan Now to check it.

Scans can take up to 5 minutes to complete. Please keep this tab open - we'll redirect you to the report when it's ready.

Failed
Scan unavailable
Scan failed
Screenshot of pypi.org Captured Jun 16, 2026
https://pypi.org
Screenshot of pypi.org
10 years
Very Popular - #2,805 Tranco rank (>10M monthly visitors)
Not listed (91 checked)
✓ Valid (TLS)
Fastly, Inc.
Montreal, Canada
Unknown
Unknown
151.101.0.223
Domain & WHOIS Information
Registrar Gandi SAS
Registered July 24, 2015
Expires July 24, 2032
Name Servers ns-96.awsdns-12.com
DNSSEC Signed
Hosting Fastly, Inc.
Reputation & Threat Check 91 security engines checked
File Scan Summary Powered by Quttera Engine
62 files scanned
No threats
51
Low Risk
0
Medium Risk
11
High Risk
0
No threats Low Risk Medium Risk High Risk
pypi.org/# 22.3 KB Flagged: medium risk
pypi.org/_fs-ch-1t1wmsgaoggasxcx/script.js?reload=true 4.7 KB Flagged: medium risk
pypi.org/trademarks/# 22.6 KB Flagged: medium risk
pypi.org/sitemap/# 22.6 KB Flagged: medium risk
pypi.org/help/#compromised-password 79.6 KB Flagged: medium risk
pypi.org/help/# 79.6 KB Flagged: medium risk
pypi.org/help/#feedback 79.6 KB Flagged: medium risk
pypi.org/sponsors/# 82.0 KB Flagged: medium risk
pypi.org/classifiers/# 513.4 KB Flagged: medium risk
pypi.org/stats/# 31.7 KB Flagged: medium risk
Show 1 more...
pypi.org/opensearch.xml 497 B No threats
analytics.python.org/js/script.js 2.9 KB No threats
pypi.org/rss/updates.xml 31.3 KB No threats
pypi.org/rss/packages.xml 13.9 KB No threats
pypi.org/search/?c=Environment%2B%3A%3A%2BGPU%2B%3A%3A%2BNVIDIA%2BCUDA%2B%3A%3A%2B11.2 3.0 KB No threats
pypi.org/search/?c=Development%2BStatus%2B%3A%3A%2B3%2B-%2BAlpha 3.0 KB No threats
pypi.org/search/?c=Environment%2B%3A%3A%2BGPU%2B%3A%3A%2BNVIDIA%2BCUDA%2B%3A%3A%2B11.6 3.0 KB No threats
pypi.org/search/?c=Environment%2B%3A%3A%2BCygwin%2B%28MS%2BWindows%29 3.0 KB No threats
pypi.org/search/?c=Environment%2B%3A%3A%2BGPU%2B%3A%3A%2BNVIDIA%2BCUDA%2B%3A%3A%2B2.1 3.0 KB No threats
pypi.org/search/?c=Environment%2B%3A%3A%2BGPU%2B%3A%3A%2BNVIDIA%2BCUDA%2B%3A%3A%2B11.8 3.0 KB No threats
Show 41 more...
Quttera flagged medium risk files - is this your website?
Investigate and remove potential threats with Quttera
Remove Malware

Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.

External Links & Domains
1190
External Links
3 Flagged
0
Iframes
Clean
130
Referenced Domains
5 Flagged
8
Flagged Resources
Detected
analytics.python.orgFlagged: Generic Suspicious Object
dtdg.coFlagged: Generic Suspicious Object
files.pythonhosted.orgFlagged: Generic Suspicious Object
inspector.pypi.ioFlagged: Generic Suspicious Object
www.hudsonrivertrading.comFlagged: Generic Suspicious Object
https://analytics.python.org/js/script.jsFlagged: Generic Suspicious Object
https://inspector.pypi.io/Flagged: Generic Suspicious Object
https://www.hudsonrivertrading.com/careers/Flagged: Generic Suspicious Object
https://analytics.python.org/js/script.jsFlagged: Generic Suspicious Object
https://inspector.pypi.io/Flagged: Generic Suspicious Object
https://www.hudsonrivertrading.com/careers/Flagged: Generic Suspicious Object
http://codeflash.aiNot flagged
http://pyfound.blogspot.com/2018/12/upcoming-pypi-improvements-for-2019.htmlNot flagged
http://pypi.org/_fs-ch-1t1wmsgaoggasxcx/assets/errorIcon.svgNot flagged
http://pypi.org/_fs-ch-1t1wmsgaoggasxcx/assets/inter-var.woff2Not flagged
http://pypi.org/_fs-ch-1t1wmsgaoggasxcx/assets/styles.cssNot flagged
http://pypi.org/_fs-ch-1t1wmsgaoggasxcx/script.js?reload%3DtrueNot flagged
http://pypi.org/account/login/?next%3Dhttps%3A%2F%2Fpypi.org%2FNot flagged
http://pypi.org/account/login/?next%3Dhttps%3A%2F%2Fpypi.org%2Fclassifiers%2FNot flagged
http://pypi.org/account/login/?next%3Dhttps%3A%2F%2Fpypi.org%2Fhelp%2FNot flagged
http://pypi.org/account/login/?next%3Dhttps%3A%2F%2Fpypi.org%2Fsecurity%2FNot flagged
http://pypi.org/account/login/?next%3Dhttps%3A%2F%2Fpypi.org%2Fsitemap%2FNot flagged
http://pypi.org/account/login/?next%3Dhttps%3A%2F%2Fpypi.org%2Fsponsors%2FNot flagged
Show 485 more...
Showing first 500 of 1190 entries.
analytics.python.orgFlagged: Generic Suspicious Object
dtdg.coFlagged: Generic Suspicious Object
files.pythonhosted.orgFlagged: Generic Suspicious Object
inspector.pypi.ioFlagged: Generic Suspicious Object
www.hudsonrivertrading.comFlagged: Generic Suspicious Object
1password.comNot flagged
about.facebook.comNot flagged
about.netflix.comNot flagged
aka.msNot flagged
analog.comNot flagged
api.fastly.comNot flagged
api.github.comNot flagged
apify.comNot flagged
astral.shNot flagged
authy.comNot flagged
Show 115 more...
pypi.org Overview

Description of pypi.org

pypi.org appears to be the Python Package Index (PyPI), a major software repository for the Python programming language. Based on the homepage content, it allows developers to find, install, and publish Python packages, and it serves as a central distribution point for open-source Python software. The site includes package search, project browsing, account registration, documentation, and security-related help resources.

Based on the domain name, branding, and visible content, the website appears to be operated as part of the broader Python ecosystem and community infrastructure rather than as a commercial storefront. Its very strong traffic rank and long operating history are consistent with a widely used developer platform that supports package hosting and software distribution for Python users worldwide.

Safety Assessment for pypi.org

The scan results are broadly reassuring. At the time of this scan, 0 out of 91 security engines flagged the domain, and the checked blacklist and threat-database sources did not report active malware, phishing, or unsafe browsing listings. The domain is also well established, with an age of about 10 years, and the screenshot matches the expected appearance of a legitimate software repository.

One malware scanner did label several internal pages, scripts, and referenced domains as "suspicious," but the detections were generic heuristic findings rather than a named malware family, and they were not corroborated by the broader engine consensus or by blacklist data. In context, these appear more consistent with low-confidence pattern matches on scripts, analytics resources, or related infrastructure than with confirmed malicious activity.

Based on available data, no threats were detected at the time of this scan.

Technical Description

The domain uses a valid SSL/TLS certificate issued by GlobalSign that was valid at the time of the scan and is set to expire in 2027. DNSSEC is enabled, which may help protect against certain DNS tampering scenarios. The domain has been registered through Gandi SAS and uses AWS nameservers, while the site itself appears to be delivered through Fastly infrastructure, which is common for high-traffic web services and content delivery.

No major technical red flags were evident from the provided data. The server IP resolves to Fastly-hosted infrastructure in Montreal, Canada, and the long registration term through 2032 is consistent with an established service. The only notable concern was the generic heuristic scanner output, but this was not supported by multi-engine detections or blacklist listings at the time of the scan.

HTTP Redirect Chain
No redirects detected - direct connection to destination
Website Insights
#2,805
Tranco Rank
Very Popular
Visitors >10M/mo
Category: Technology
Rank History (30 days)
May 11 Jun 15
1 cookie detected
Essential1
Analytics0
Advertising0
Social0
1 1st party cookie
0 3rd party (trackers)
Dispute This Score For website owners
Believe this score is inaccurate?
If you are the website owner and believe the scan results contain errors or false positives, you can submit a dispute for manual review. Our team typically responds within 1-2 business days.
You will be asked to verify your email before the dispute can be processed.
By submitting this form, you confirm that the information provided is accurate. Disputes are reviewed manually and results may take up to 48 hours to update.
One more step..
To submit your dispute for pypi.org, please click the verification link we just emailed you. Once verified, we'll review it within 1–2 business days.
This report was generated automatically and is provided for informational purposes only. Results are based on a point-in-time scan and may contain false positives or incomplete data. This does not constitute a security audit or certification. No vendor in the market can guarantee a 100% detection rate. If you believe this report is inaccurate, please submit a dispute.

Share your experience with this website. Was it safe? Did you encounter any issues?