Skip to main content
Sandfish

Log in to Charles Schwab

https://login.icims.com/u/reset-password/request/hs-100…

Groupb2a7766b-8d77-4e0b-8d35-2f105cea901bsubmitted urlMember 1

Case summary

The target, observed result, and important findings.

Status
Current evaluation

Limited evidence: critical response missing, interaction stalled

Findings
13Critical
Kit source work

Loading related source work…

Discover or upload kit source
Domain registration
sonicapply.comMore than 90 days oldRegistered 2025-10-21 · Registrar Amazon Registrar, Inc.
Language
Detecting...
Network
186 requests across 32 hosts
Infrastructure
Loading...
Behavior
11 recorded events
Interaction
9 actions · 2 submissions · stopped: repeated state · download stage: no remaining download controls
  1. 1. clicksucceededLog in
  2. 2. clicksucceededEmbedded human verification control
  3. 3. fillsucceededtext | username | Username or email address * |
  4. 4. submitsucceededContinue
  5. 5. fillsucceededpassword | password | Password * |
  6. 6. submitsucceededLOG IN
  7. 7. clicksucceededEmbedded human verification control
  8. 8. validationobservedValidation (valueMissing, ariaInvalid) | password | password | Password *
  9. 9. download control presssucceededReset your password [dispatched]

A successful press does not prove that a file arrived. Check the Payloads tab for recorded files.

Analysis metadata

How and when the analysis ran.

Input kind
url
Execution kind
capture
Duration
2.3m
Navigation
11 navigations
Engine version
0.4.1
Created
2026-11-12 14:03:08Z
Started
2026-11-12 14:03:08Z
Finished
2026-11-12 14:05:28Z
Archive
5.7 MB
Favicon source
html_link / favicon-v7
Analysis ID
0ee4fda6-0e76...

Document-source diagnostics

These records identify rejected document reads. A current epoch does not prove that a replacement read succeeded. Later success does not erase an earlier evidence limit.

No rejected document reads were recorded.

Browser-observed navigation status

The browser status can differ from the normalized origin response, including during a proxy failure. Inspect the recorded document request for origin response evidence.

Signals by severity

Detected findings grouped by risk

Request activity

Network requests grouped by resource type

Behavior

Recorded actions grouped by type

Network contacts

Requests to the most active hosts

Request ownership

First-party and third-party requests

Response MIME types

Network responses grouped by MIME type