Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
4dlabss.firebaseapp.com is low-trust and potentially risky.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 3% confidenceAbuseIPDB, 4 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WR4 | Noted |
| Hosted by | FASTLYServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This is a single-page web application served from a free-tier subdomain of Google's Firebase hosting platform. Its page title is "4Dlabs Alpha Badge Claim", and it presents a claim-style interface tied to a project called 4Dlabs. The apparent purpose is to let visitors claim a digital "alpha badge", a mechanic typical of community, token or early-access campaigns. The site does not independently connect itself to an established brand or operator.
Scam/Impersonation Risk
Independent threat-intelligence sources currently flag this site. At least one reputation source rates it malicious and another rates it suspicious, and the aggregate result is a confirmed blacklist listing. This is the decisive contradiction and it drives the cautionary posture. Identity inconsistency, brand impersonation and a confirmed phishing classification were not established. The listing alone is enough to treat any sensitive interaction as elevated risk. A "claim"-style page on a disposable, free-to-register subdomain also matches the pattern used by credential-harvesting and wallet-connection lures. That is a pattern consideration, not a finding. Abuse reports exist against one of the site's edge IP addresses, but that address belongs to shared content-delivery infrastructure used by many unrelated sites, so those reports are weak evidence about this site specifically. Behavioral testing was comparatively benign. Three of three sessions loaded stably, with no wallet-drainer behavior, clipboard manipulation, hidden or externally posting password forms, or cloaking. Outbound data requests went only to recognized destinations, though a very high share of the page's network activity was external and the page produced a notable number of console errors, which indicates a thin, third-party-dependent front end. Evidence:
- Homepage: titled "4Dlabs Alpha Badge Claim", with roughly 4,600 characters of text, served on a Firebase-hosted subdomain rather than a branded domain.
- Reputation sources: one malicious and one suspicious detection, which together trigger the confirmed blacklist listing.
- Shared edge address: four abuse reports against a CDN-operated IP, attributed to shared infrastructure and not discounted.
- Homepage behavior: 12 console errors, 9 external data requests (none to non-whitelisted destinations), and no wallet, clipboard or hidden-form activity across 3 test runs.
Regulatory Verification Notes
The site's real-world operator could not be independently established, and the automated page-content analysis did not complete. Nothing therefore links "4Dlabs" to a verifiable legal entity, and the page's identity claims cannot be treated as proof. No licensing or registration status could be associated with the site, and no third-party regulatory or broker record matched it. Ownership and governance transparency are limited. This gap is a verification matter, and the blacklist signal above is what carries the risk weight. The site relies on a domain-validated TLS certificate. That certificate confirms only control of the hostname and says nothing about the operator's identity or legitimacy. Evidence:
- Transport encryption: TLS certificate issued by WR4 (DV), valid to 2026-12-22.
- Homepage: no verifiable operating entity or registration identifier could be tied to the "4Dlabs" name.
- Broker and regulatory datasets: no matching record for this site.
What to Verify Next
Confirm through the project's officially published channels, reached independently of this page (for example a known website, a verified social account, or a published announcement), that the "alpha badge claim" is a genuine 4Dlabs initiative and that this address is the sanctioned claim location. Check whether the claim flow asks for a wallet connection, seed phrase, signature approval or login. Any such request should be assumed hostile until the project confirms it. Re-check the listing status with the relevant threat-intelligence sources, since a listing on a free hosting subdomain can reflect either abuse or a compromised deployment. Confirm the legal entity behind 4Dlabs through an independent corporate registry, and confirm the official support and contact channels offline. Evidence:
- Homepage: the badge-claim mechanic is the main surface where credentials or wallet permissions could be requested.
- Reputation sources: the current listing and shared-IP reports were last reported within days of the analysis, so status can change quickly.
- Firebase-hosted subdomain: no brand-controlled domain exists to corroborate the project's identity.
Summary Verdict
The site carries an elevated-risk, cautionary posture. Active third-party threat detections outweigh its technically sound transport security and its largely benign observed browser behavior, and its operator identity is unverified. It is classed as unsuitable for sensitive interaction.
Infrastructure Integrity
The site is delivered through Fastly's content-delivery network (AS54113, US, ARIN registry). All observed addresses are edge nodes, and the origin server is not observable. Edge-only visibility prevents independent hosting verification and can mask rapid content swaps. Fastly is a mainstream, reputable provider, so this is a mitigating factor only. It does not offset the external threat detections and is not evidence of legitimacy. Evidence:
- Hosting infrastructure: served from AS54113 (FASTLY - Fastly, Inc., US) via two edge IPs, 199.36.158.100 and 2620:0:890::100.
- Origin visibility: no origin-server candidates were identified.
Closing Assessment
Treat the site as read-only at most. Do not log in, connect a wallet, sign transactions, submit credentials or personal data, or make any financial commitment through it until the project's operator and the claim campaign are confirmed through an independent, official channel and the current listing is cleared.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page produced an unusually high number of errors while it ran.Behaviour in a sandbox
rule:BEHAV_CONSOLE_ERRORS_HIGH - The page sent data to other domains many times while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_POSTS_HEAVY
Signals weighed against the site
- AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of 4dlabss.firebaseapp.com.
- The request stayed on 4dlabss.firebaseapp.com. It was not redirected to another domain. Clear
- It is hosted on FASTLY, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | FASTLY - Fastly, Inc., US |
| Country | US |
| Server IP | 2620:0:890::100 |
| Name servers | Not available |
| CDN / edge network | Detected (fastly) |
| Resolved IP addresses | 2 |
| Edge IP addresses | 2 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR4 |
| SSL expiry | 2026-12-22 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 3% confidence, 4 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about 4dlabss.firebaseapp.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.