Is 4dlabs-community.firebaseapp.com safe? TrustSniffer's low-trust assessment: 41/100

Overview

The site is a single-page web application served from a free subdomain of a Google-operated app-hosting platform. Its page is titled "4Dlabs Alpha Badge Claim" and presents itself as a community "alpha badge" claim portal. The apparent purpose is to have visitors claim a badge or credential associated with a project called 4Dlabs. The page carries a moderate amount of text, but its content could not be semantically interpreted, so the operator's business model and the nature of the badge are not independently established.

Scam/Impersonation Risk

Contradictory signals are present, and the posture here is cautionary. The site is blacklisted by external threat intelligence. At least one engine rates it as malicious and another as suspicious. The only other file the platform serves under this name is the claim page itself, so this reputational hit applies to the page and not to the platform as a whole. "Badge claim" pages are a recognised lure format in community and token-airdrop campaigns, which makes the listing more significant. Separately, abuse reports exist against a shared platform address that serves this site. These are attributed to shared infrastructure and are not discounted, but they say little about this page specifically. They are a soft supporting signal and do not confirm wrongdoing. The sandbox runs found no wallet-connection prompts, clipboard tampering, hidden forms or cloaking. They did show that nearly all network activity was directed to external destinations, repeated outbound data submissions, and a high count of console errors on the homepage. That pattern is consistent with a thin front end that hands off to third-party services. It does not show what data is collected or where it goes. No conflicting legal identities or brand impersonation were observed. Evidence:

• Homepage: external threat intelligence lists the domain, with 1 engine reporting malicious and 1 reporting suspicious.
• Homepage sandbox runs (3 of 3 completed): 12 console errors, about 95.7% external network activity, and 9 outbound POST requests, none to non-whitelisted destinations.
• Homepage: the page title presents an "alpha badge claim" flow, a format commonly used in credential and airdrop lures.
• Shared platform address: 4 abuse reports on record (low confidence score), most recently about 8 days before analysis.

Regulatory Verification Notes

The analysis found no regulator, licensing body or registered business behind this site, and no third-party broker-rating match. The homepage's disclosure of the operator, legal entity or licensing status is unclear, and this is a verification gap only. It is not evidence of wrongdoing, and it is not offset by anything the site declares about itself. Independent attribution of the site to the 4Dlabs name or any real-world party has not been established. The only positive signals are technical: a valid transport-encryption certificate and a stable, fast-loading page. Such signals show the connection is encrypted and the page is available. They do not show who operates the site or whether it is legitimate. Evidence:

• Homepage: no corporate registration, licence or named operator was identified in the captured page content.
• Hosting infrastructure: served from AS54113 (Fastly, US), registry ARIN.
• Transport encryption: certificate issued by WR4 (domain-validated only), valid to 2026-12-22.
• Third-party broker database: no match found for this domain.

What to Verify Next

Any claim that the "4Dlabs" community runs a badge programme should be confirmed through that project's own channels, reached independently of this page: its official website, verified social accounts or documentation. Any such link should be typed manually and not followed from this page. Before any interaction, confirm the badge's existence and issuer in that project's published announcements. Confirm whether the project is registered or licensed in any jurisdiction relevant to the visitor. Also confirm that it uses this exact subdomain, since free hosted subdomains can be created by anyone. Finally, confirm the official support and contact channels through an offline or independent route. Evidence:

• Homepage: the page offers a claim flow, but no independently verifiable issuer or project reference was captured.
• Hosting platform: the domain is a subdomain on a free app-hosting platform, so its registration does not itself identify the operator.
• External reputation: the listing remains active, so any claim of legitimacy needs independent confirmation.

Summary Verdict

The available evidence supports an elevated-risk posture for this site. Active adverse threat-intelligence findings outweigh the sound transport security and stable technical behaviour. These establish a working web presence but not a trustworthy operator. Real-world identity is unverified, so legitimacy cannot be inferred.

Infrastructure Integrity

The site is delivered through Fastly's content delivery and edge-protection network. Every observed address is an edge node, and the origin server was not observable, so the real hosting location cannot be independently verified. This setup gives resilience and some protection against attack. It also means page content can be changed quickly without any visible change in infrastructure. It is a mitigating factor only and does not offset the adverse reputation findings.

Closing Assessment

The site is suitable for read-only viewing at most. Account logins, credential entry, wallet connections and any payment or financial action should be avoided until the operator and the badge programme are confirmed through independent channels.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.