---
title: "Is 4dlabss.firebaseapp.com Safe? Risk Report, Score 41/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "4dlabss.firebaseapp.com"
verdict: "Low Trust"
title: "Is 4dlabss.firebaseapp.com Safe? Warning Signs, Score 41/100"
trust_score: 41
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/4dlabss.firebaseapp.com
assessed: 2026-10-22
---

# Is 4dlabss.firebaseapp.com safe? TrustSniffer's low-trust assessment: 41/100

## Verdict


**Verdict: Low Trust, trust score 41/100.** 4dlabss.firebaseapp.com is low-trust and potentially risky.

Several risk patterns were present. Do not send money or personal details until you have verified this business another way.

Labels: Sensitive Interaction Risk

Assessed 2026-10-22 by automated analysis. Classification confidence 55%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 1 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 3% confidence (AbuseIPDB, 4 reports; shared hosting inflates reports) | Clear |
| Domain age | Not available (No registration record was returned) | Noted |
| Certificate | Encrypted connection (Issued by WR4) | Noted |
| Hosted by | FASTLY (Server in US) | Noted |

## The page as captured


![Screenshot of the 4dlabss.firebaseapp.com homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/4dlabss.firebaseapp.com/screenshots/first.png)

_What 4dlabss.firebaseapp.com served when TrustSniffer captured it on 2026-10-22. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

This is a single-page web application served from a free-tier subdomain of Google's Firebase hosting platform. Its page title is "4Dlabs Alpha Badge Claim", and it presents a claim-style interface tied to a project called 4Dlabs. The apparent purpose is to let visitors claim a digital "alpha badge", a mechanic typical of community, token or early-access campaigns. The site does not independently connect itself to an established brand or operator.


### Scam/Impersonation Risk

Independent threat-intelligence sources currently flag this site. At least one reputation source rates it malicious and another rates it suspicious, and the aggregate result is a confirmed **blacklist** listing. This is the decisive contradiction and it drives the cautionary posture. Identity inconsistency, brand impersonation and a confirmed phishing classification were not established. The listing alone is enough to treat any sensitive interaction as elevated risk. A "claim"-style page on a disposable, free-to-register subdomain also matches the pattern used by credential-harvesting and wallet-connection lures. That is a pattern consideration, not a finding. Abuse reports exist against one of the site's edge IP addresses, but that address belongs to shared content-delivery infrastructure used by many unrelated sites, so those reports are weak evidence about this site specifically. Behavioral testing was comparatively benign. Three of three sessions loaded stably, with no wallet-drainer behavior, clipboard manipulation, hidden or externally posting password forms, or cloaking. Outbound data requests went only to recognized destinations, though a very high share of the page's network activity was external and the page produced a notable number of console errors, which indicates a thin, third-party-dependent front end. Evidence:

- Homepage: titled "4Dlabs Alpha Badge Claim", with roughly 4,600 characters of text, served on a Firebase-hosted subdomain rather than a branded domain.
- Reputation sources: one malicious and one suspicious detection, which together trigger the confirmed blacklist listing.
- Shared edge address: four abuse reports against a CDN-operated IP, attributed to shared infrastructure and not discounted.
- Homepage behavior: 12 console errors, 9 external data requests (none to non-whitelisted destinations), and no wallet, clipboard or hidden-form activity across 3 test runs.

### Regulatory Verification Notes

The site's real-world operator could not be independently established, and the automated page-content analysis did not complete. Nothing therefore links "4Dlabs" to a verifiable legal entity, and the page's identity claims cannot be treated as proof. No licensing or registration status could be associated with the site, and no third-party regulatory or broker record matched it. Ownership and governance transparency are limited. This gap is a verification matter, and the blacklist signal above is what carries the risk weight. The site relies on a domain-validated TLS certificate. That certificate confirms only control of the hostname and says nothing about the operator's identity or legitimacy. Evidence:

- Transport encryption: TLS certificate issued by WR4 (DV), valid to 2026-12-22.
- Homepage: no verifiable operating entity or registration identifier could be tied to the "4Dlabs" name.
- Broker and regulatory datasets: no matching record for this site.

### What to Verify Next

Confirm through the project's officially published channels, reached independently of this page (for example a known website, a verified social account, or a published announcement), that the "alpha badge claim" is a genuine 4Dlabs initiative and that this address is the sanctioned claim location. Check whether the claim flow asks for a wallet connection, seed phrase, signature approval or login. Any such request should be assumed hostile until the project confirms it. Re-check the listing status with the relevant threat-intelligence sources, since a listing on a free hosting subdomain can reflect either abuse or a compromised deployment. Confirm the legal entity behind 4Dlabs through an independent corporate registry, and confirm the official support and contact channels offline. Evidence:

- Homepage: the badge-claim mechanic is the main surface where credentials or wallet permissions could be requested.
- Reputation sources: the current listing and shared-IP reports were last reported within days of the analysis, so status can change quickly.
- Firebase-hosted subdomain: no brand-controlled domain exists to corroborate the project's identity.

### Summary Verdict

The site carries an elevated-risk, cautionary posture. Active third-party threat detections outweigh its technically sound transport security and its largely benign observed browser behavior, and its operator identity is unverified. It is classed as unsuitable for sensitive interaction.


### Infrastructure Integrity

The site is delivered through Fastly's content-delivery network (AS54113, US, ARIN registry). All observed addresses are edge nodes, and the origin server is not observable. Edge-only visibility prevents independent hosting verification and can mask rapid content swaps. Fastly is a mainstream, reputable provider, so this is a mitigating factor only. It does not offset the external threat detections and is not evidence of legitimacy. Evidence:

- Hosting infrastructure: served from AS54113 (FASTLY - Fastly, Inc., US) via two edge IPs, 199.36.158.100 and 2620:0:890::100.
- Origin visibility: no origin-server candidates were identified.

### Closing Assessment

Treat the site as read-only at most. Do not log in, connect a wallet, sign transactions, submit credentials or personal data, or make any financial commitment through it until the project's operator and the claim campaign are confirmed through an independent, official channel and the current listing is cleared.


_Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

2 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox.

### 01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal. (External reputation `rule:EXT_BLACKLIST_MEDIUM`)

### 02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`)
- The page sent data to other domains many times while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_POSTS_HEAVY`)

### Signals weighed against the site

- AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of 4dlabss.firebaseapp.com.

- The request stayed on 4dlabss.firebaseapp.com. It was not redirected to another domain. (Clear)
- It is hosted on FASTLY, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | FASTLY - Fastly, Inc., US |
| Country | US |
| Server IP | 2620:0:890::100 |
| Name servers | Not available |
| CDN / edge network | Detected (fastly) |
| Resolved IP addresses | 2 |
| Edge IP addresses | 2 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR4 |
| SSL expiry | 2026-12-22 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged \| AbuseIPDB: 3% confidence, 4 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about 4dlabss.firebaseapp.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [yieldfarms.firebaseapp.com](https://trustsniffer.com/report/yieldfarms.firebaseapp.com), a similar name (Low Trust, 40/100)
- [consolab.firebaseapp.com](https://trustsniffer.com/report/consolab.firebaseapp.com), a similar name (Low Trust, 37/100)
- [4dlabs-community.firebaseapp.com](https://trustsniffer.com/report/4dlabs-community.firebaseapp.com), a similar name (Low Trust, 41/100)
- [akirolabs.firebaseapp.com](https://trustsniffer.com/report/akirolabs.firebaseapp.com), a similar name (Low Trust, 38/100)
- [project-shiesty.firebaseapp.com](https://trustsniffer.com/report/project-shiesty.firebaseapp.com), a similar name (Low Trust, 48/100)
- [kinetiq-en.firebaseapp.com](https://trustsniffer.com/report/kinetiq-en.firebaseapp.com), a similar name (Critical Risk, 0/100)
- [xapp-folks-finance.firebaseapp.com](https://trustsniffer.com/report/xapp-folks-finance.firebaseapp.com), a similar name (Critical Risk, 0/100)
- [4healthykids.com](https://trustsniffer.com/report/4healthykids.com), another .com site assessed as low-trust (Low Trust, 40/100)
- [albesher.sa](https://trustsniffer.com/report/albesher.sa), another site assessed as low-trust (Low Trust, 40/100)
- [basundhara.org.in](https://trustsniffer.com/report/basundhara.org.in), another site assessed as low-trust (Low Trust, 40/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens)
- [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24)
- [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/4dlabss.firebaseapp.com) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/4dlabss.firebaseapp.com · assessed 2026-10-22.*
