app-shadeprotocol-io[.]pages[.]dev

This domain, app-shadeprotocol-io.pages.dev, is an active phishing site that impersonates the Shade Protocol platform. It is designed to trick users into entering their login credentials, private keys, or other sensitive information under the guise of a legitimate service. The site's title, "Shade App," is a clear attempt to mimic the official Shade Protocol interface, and the domain itself uses a deceptive subdomain structure to appear authentic. Anyone who interacts with this site risks having their digital assets stolen or their accounts compromised.

PhishDestroy has confirmed this threat through multiple indicators. The domain was created on April 30, 2026, and is registered through Cloudflare, Inc., which is often used by both legitimate and malicious actors. It resolves to IP address 188.114.96.3 and uses an SSL certificate from Google Trust Services, giving it a false sense of security. While VirusTotal shows 0 out of 95 security vendors flagging the site, it already appears on two security blocklists, indicating that the threat is recognized but not yet widespread. The domain is still active and actively serving phishing content, making it a current danger.

If you have visited this site or entered any information, act immediately. Change your passwords for any accounts associated with Shade Protocol or similar services, enable two-factor authentication wherever possible, and monitor your accounts for unauthorized activity. Consider running a full security scan on your device to check for malware or keyloggers. Report the site to your email provider or browser security team to help block it for others. Stay vigilant—phishing sites like this one are increasingly sophisticated and often evade initial detection.