Security Scan Report: dev1.schwab.communify-app.com

Redirected to:
https://dev1.schwab.communify-app.com/auth/realms/schwab-communify/pro...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 3 domains to perform 53 HTTP transactions. The main domain is communify-app.com and was registered 1 year 6 months ago.

Submitted URL: http://dev1.schwab.communify-app.com/

Effective URL:
https://dev1.schwab.communify-app.com/auth/realms/schwab-communify/pro...
Redirected

AI Security Verdict

Low Risk

Confidence: 78%

3
Risk Score

Keycloak login page wearing the SCHWAB brand on the non-official domain communify-app.com, with a password form. Since it is not Charles Schwab's own domain, treat it as brand impersonation/credential phishing and do not enter credentials.

Risk Factors (4)
Another entity's brand (SCHWAB) displayed on a domain that is not that brand's official domain
Credential (password) form on a non-official, unranked domain bearing a financial brand
Login endpoint appears to be an exposed development/QA realm rather than the official Schwab login service
No reputation ranking for the hosting domain despite impersonating a top-tier financial brand
Safety Factors (6)
Domain age reported as 525 days (established), which caps the verdict below CONFIRMED_SCAM
No Indicators of Compromise matched
No JavaScript malware (hunting rule) patterns and no known malicious kit identified
No cross-origin credential exfiltration and no disguised password fields detected
All JavaScript is served from the page's own domain
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Sign in to schwab

Scan Type

public

Domain Name Analysis

The domain 'dev1.schwab.communify-app.com' uses the commercial generic top-level domain (.com) and includes subdomain 'dev1.schwab'. The core label 'communify-app' covers 13 characters containing 4 vowels alongside 8 consonants, along with one hyphen. Breaking it apart gives four words: com, m, unify, app. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

SCHWAB Sign in to your account Username or email Password Forgot Pa:

Page Load Overview

2.45s
Total Load Time
4.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:100 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism51% confidence
Type: webapp
Method: ml+structural

All Detected Categories

news media journalism
51%
adult content
42%
cryptocurrency blockchain
41%
finance banking
38%
phishing scam
33%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13209.234.238.24United States
AS7334Markit On Demand, Inc.
10172.67.170.97Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10209.234.238.130United States
AS7334Markit On Demand, Inc.
10209.234.238.25United States
AS7334Markit On Demand, Inc.
10209.234.238.131United States
AS7334Markit On Demand, Inc.
535--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1819184669F01C80E3126634B48D0DC5CB885E70AD357F9ED40B7A1B92B92AD60D72EAC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:ZJnTgL1Ea4hzr37AMJDn2gbX4C8vr72RvIs/Us:ZyL1EaQzr37BJZEC8Pgvr/Us

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4549:EAAAQSoXBBEAIiAJRCAgXABEWBJAAQAAECBAwgAoMAAgiaApAQSaBgAlkCBAAgJgQERKBAKCASCgAEBkKggmwERAAJpAAJoA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3000103c3c3c1000
Perceptual Hash:d9f6268999632666
Difference Hash:e0c0f0b0b2b06040
Wavelet Hash:fcf8f8fc3c3c1800
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data