Security Scan: Sign in to schwab

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9b946564-f247-41b4-9190-a1fb4020f5b8 Domain and IP registration (RDAP)/api/v1/rdap/9b946564-f247-41b4-9190-a1fb4020f5b8How often this domain was scanned/api/v1/domain/stats/pre1.schwab.communify-app.com Scan history for this domain/api/v1/domain/history/pre1.schwab.communify-app.com?limit=15

This website contacted 6 IPs in 1 country across 3 domains to perform 54 HTTP transactions. The main domain is communify-app.com and was registered 1 year 6 months ago.

Submitted URL: http://pre1.schwab.communify-app.com/

Effective URL:

https://pre1.schwab.communify-app.com/auth/realms/schwab-communify/pro...

Redirected

AI Security Verdict

Low Risk

Confidence: 88%

Risk Score

Page impersonates Charles Schwab sign-in on communify-app.com, a non-Schwab domain, and collects username/password; treat as credential phishing.

Risk Factors (4)

Impersonates the Charles Schwab brand on a non-Schwab domain.

Credential login form collects username/email and password.

Brand-specific Keycloak realm is hosted under communify-app.com rather than schwab.com.

Multiple IDS alerts mention Cloudflare workers.dev, including a maintenance-mode worker domain.

Safety Factors (5)

Domain age is 528 days, which is established.

No threat-intelligence matches were found.

No JavaScript malware or hunting-rule patterns were detected.

Form action is same-origin, and no cross-origin credential exfiltration was detected.

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 3

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -1105083093

MD5: 0980755aea543da1af848366656d1d9c

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'pre1.schwab.communify-app.com' is registered; it also runs on subdomain 'pre1.schwab'. The second-level label 'communify-app' is 13 characters long containing four vowels alongside 8 consonants, notching 1 hyphen. Word splitting yields 4 words: com, m, unify, app. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

SCHWAB Sign in to your account Username or email Password Forgot Pa

Page Load Overview

2.12s

Total Load Time

3.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:100 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism51% confidence

Type: webapp

Method: ml+structural

All Detected Categories

news media journalism

51%

adult content

42%

cryptocurrency blockchain

41%

finance banking

38%

phishing scam

33%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	209.234.238.25	United States	AS7334Markit On Demand, Inc.
9	104.21.28.56Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	209.234.238.17	United States	AS7334Markit On Demand, Inc.
9	209.234.238.24	United States	AS7334Markit On Demand, Inc.
9	172.67.170.97Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	209.234.238.16	United States	AS7334Markit On Demand, Inc.
54	6	-	-