No. MalwareAnalyzer scanned dhs.io on 20 Aug 2026 and returned a suspicious verdict with a score of 35 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

What malware is associated with dhs.io?

1 analysed samples communicate with this URL, including Zusy.

How was dhs.io checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

dhs.io - suspicious URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned dhs.io and returned a suspicious verdict (score 35), categorised as phishing. The page resolved to 104.21.50.35 on Cloudflare, Inc. in US. 3 domains and 1 IP were contacted, over 1 HTTP request. 1 malware sample communicates with this URL (Zusy). This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 35) · Confidence 38%
Scanned URL: https://dhs.io/
Domain: dhs.io · IP: 104.21.50.35 · AS13335 · US
Server: cloudflare
Page title: Dynamite Hosting Services
HTTP status: 200 · text/html
TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Sep 21 14: · subject CN=dhs.io
HTTP requests captured: 1
Scan tier: fast · observed 2026-08-20 07:17:10 UTC

Malware communicating with this URL (1)

These samples were observed contacting or being served from dhs.io. Each links to its full analysis.

Zusy - referenced · 3468231cf540f28d9ce0344e4b48d3d4 · first seen 2026-08-20

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Domain impersonates dhl (typosquat)

Detected technologies

Cloudflare
Cloudflare Insights

Contacted infrastructure

104.21.50.35 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

dhs.io
fonts.googleapis.com
static.cloudflareinsights.com
104.21.50.35
https://dhs.io/
https://fonts.googleapis.com/css?family=Shadows+Into+Light
https://dhs.io/dhs.css
https://dhs.io/images/dynamite-pixabay.png
https://dhs.io/contact.html
https://static.cloudflareinsights.com/beacon.min.js/v4513226cdae34746b4dedf0b4dfa099e1781791509496

Questions about dhs.io

Is dhs.io safe?: No. MalwareAnalyzer scanned dhs.io on 20 Aug 2026 and returned a suspicious verdict with a score of 35 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
What malware is associated with dhs.io?: 1 analysed samples communicate with this URL, including Zusy.
How was dhs.io checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of dhs.io

Scanned on MalwareAnalyzer by Cyble · Open interactive scan