Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
app-shido-io.pages.dev shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 3 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
SHIDO DEX is a single-page website, titled "SHIDO DEX", presented as a decentralized-exchange front end for the Shido brand. It sits on a free subdomain of a shared web-hosting platform rather than on a dedicated brand domain. The homepage carries only a short block of text and appears designed to funnel visitors into trading or wallet-linked interactions. Its apparent purpose is to act as an application portal for a crypto-asset brand.
Scam/Impersonation Risk
Contradictory signals are present and decisive. The site is blacklisted by multiple independent reputation sources. Several security engines rate the page as malicious, and one more rates it as suspicious. Separate reputation checks also associate the address with known phishing activity. The address looks like an application portal for a named crypto brand, but it is a throwaway subdomain on a shared hosting platform. It is not a domain the brand is shown to control, and the pattern closely resembles brand-lookalike phishing used to harvest wallet approvals and credentials. The homepage offers nothing to offset this, such as an identifiable operator, a documented product description, or a recognized protocol listing. Behavioural testing showed no wallet-drainer routines, clipboard tampering, hidden forms or content cloaking. These clean results do not reduce the reputational finding, because such tooling can be activated selectively after a visitor connects a wallet. The page did send data to several external destinations that are not on the expected-services list, which is inconsistent with a simple static front end. No conflicting legal-entity names were observed, since the site publishes no legal identity to compare.
- Homepage: titled "SHIDO DEX" and served from a shared-platform subdomain. The page was retrieved successfully and contains roughly 1,900 characters of text.
- Reputation sources: 3 malicious and 1 suspicious detections from the security engines consulted, plus a confirmed external blacklist match.
- Behavioural testing (3 runs): 19 external background requests and 13 external data submissions, 3 of them to destinations outside the expected-services list. No wallet-connect, drainer, clipboard-hijack or hidden-form activity was recorded.
- Brand recognition: the site is not recognized as a listed DeFi protocol in the protocol-tracking dataset consulted.
Regulatory Verification Notes
The homepage, the only page captured, discloses no operating company, jurisdiction, license, registration number, or terms of service. The site presents an exchange-style product, yet nothing indicates that any financial, securities, or virtual-asset regulator supervises it. No third-party broker-reputation profile matches the site. The absence of regulatory status is a verification gap, but the blacklist findings above, not this gap, drive the cautionary posture. The real-world operator has not been independently connected to the Shido brand or to any accountable legal person. Any claim of affiliation made on the page should therefore be treated as unproven.
- Homepage: no company name, license reference, registration number, or legal pages were captured.
- Transport encryption: the TLS certificate is domain-validated only, issued by WE1 and valid to 2027-01-13. It confirms an encrypted connection but says nothing about the operator's identity.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
What to Verify Next
Before any engagement, the connection between this address and the genuine Shido project should be tested. The official project domain should be reached independently, through the project's verified social or documentation channels reached via an offline or trusted route, and compared with this address. The operator's licensing or registration status in the relevant financial or virtual-asset registry should then be checked. If the legitimate project does not list this subdomain as its application, the address should be treated as unaffiliated. Official support and contact channels should be confirmed the same way.
- Homepage: it presents an application brand on a shared-platform subdomain, so the official project domain is the only reliable reference point for comparison.
- Reputation sources: the current malicious and suspicious detections should be re-checked, and any remediation or delisting confirmed, before the position is reconsidered.
Summary Verdict
The overall posture is high-risk. Independent threat-intelligence sources currently flag the address, its form matches brand-lookalike abuse, and nothing on the site establishes legitimacy. Clean behavioural results and a valid encrypted connection are ordinary hygiene and do not change this conclusion.
Infrastructure Integrity
The site is delivered through Cloudflare's CDN and WAF. All four observed addresses are Cloudflare edge servers and the origin host was not observable, so the real hosting location cannot be independently confirmed. Edge-only visibility also makes it easier to swap content quickly. The protective infrastructure and certificate chain are mitigating factors only, and they cannot offset the external threat detections.
Closing Assessment
At most, the site should be viewed in a read-only manner. No wallet should be connected, no credentials entered, no transactions approved and no funds committed. Any interaction with the genuine Shido project should be started only from its officially verified domain.
Written analysis generated 2026-10-29 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Behaviour in a sandbox
- A large share of what the page loaded came from other domains.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_MODERATE - The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS - The page made many background requests to other domains while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_XHR_HEAVY - The page sent data to other domains many times while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_POSTS_HEAVY
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of app-shido-io.pages.dev.
- The request stayed on app-shido-io.pages.dev. It was not redirected to another domain. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2f6e |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-13 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 3 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about app-shido-io.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.