WEBSITE ANALYSIS REPORT

https://sucdc.life/doc/docusign/

25 Sep 2026 · 16:57:51.000 UTCpublic

Report tags: phishing fake_captcha
Submit tags

Request review

Phishing detected

1 detection · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:57:15.274 GET 200 document 283.2 KB 434 ms 1 alerts

16:57:15.844 GET 200 img 283.2 KB 325 ms 1 alerts

16:57:22.160 POST 200 fetch 123 B 185 ms 1 alerts

16:57:22.861 GET 200 document 0 B 0 ms 1 alerts

16:57:22.983 GET 302 document 0 B 102 ms 1 alerts

16:57:23.089 GET 302 document 0 B 311 ms 1 alerts

16:57:23.404 GET 200 document 11.6 KB 218 ms 1 alerts

16:57:23.649 GET 200 script 30.4 KB 123 ms 1 alerts

16:57:23.784 GET 200 img 283.2 KB 21 ms 1 alerts

16:57:23.791 POST 404 xhr 151 B 29 ms 1 alerts

16:57:28.153 GET 200 document 897 B 75 ms 1 alerts

16:57:28.247 POST 404 beacon 151 B 31 ms 1 alerts

16:57:28.281 GET 404 img 355 B 140 ms 1 alerts

16:57:28.381 GET 200 img 283.2 KB 20 ms 1 alerts

16:57:31.262 GET 200 document 295.6 KB 238 ms 1 alerts

16:57:33.424 GET 200 document 21.28 MB 2952 ms 1 alerts

16:57:34.525 GET 200 document 21.28 MB 1458 ms 1 alerts

Transaction #17

Request / response

URL

GET HTTPS

https://sucdc.life/doc/docusign/Windows/download/index.php

IP / ASN

104.21.52.187

AS13335 · CLOUDFLARENET

Requested by: Not recorded

Resource information

File type: PE32 executable (GUI) Intel 80386, for MS Windows, 10 sections
MIME type: application/octet-stream
First seen (UTC): 03 Sep 2026 · 01:35:08.255 UTC
Last seen (UTC): 25 Sep 2026 · 16:57:59.197 UTC
Times seen: 4

Size: 21.28 MB (22312104 bytes)
MD5: ff87417126035f9d198bbb7d9be92009
SHA1: f131afc97c13a218bdc25a7cb1a696882c732eed
SHA256: 4eac8f2656e88f71a37c1285f043238acd788e9caa27c5ab30d98496ba849161

Certificate information

Issuer: Let's Encrypt · YE1
Subject: sucdc.life
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 32:99:21:74:CD:02:BE:52:B1:1D:20:DE:BD:FF:94:41:54:97:1F:E5
Valid from: Wed, 23 Sep 2026 19:21:23 GMT
Valid until: Tue, 22 Dec 2026 19:21:22 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - Fake Human Verification Gate	high	Phishing

HTTP headers

Request headers

GET /doc/docusign/Windows/download/index.php HTTP/1.1
Host: sucdc.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Cookie: PHPSESSID=95a481997649d5fdd4bc3299c020e0f6; human_verified=266b76e9a8b671edc984125760d7e5bb
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
server: cloudflare
date: Fri, 25 Sep 2026 16:57:34 GMT
content-type: application/octet-stream
content-description: File Transfer
content-disposition: attachment; filename="Estatement_2502.exe"
pragma: public
cache-control: must-revalidate
expires: 0
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=AJ0Z2jEtRqr2A%2B7YN0Pvof7ioq%2FeQ%2Bc6aO1z%2Be3B4E2bbWW7anuKc9BlVALsIe8wJ0B4dCYMeBY0g0gHHh4U%2BlIrk74nZUTJt9Eo5q1Qfzd5FRnonmfO6SO2FT7e"}]}
priority: u=0,i
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: a40b9196cc24b4eb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

https://sucdc.life/doc/docusign/

Domain graph

Hostnames

Connections

Network requests

Transaction #17

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://sucdc.life/doc/docusign/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #17

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://sucdc.life/doc/docusign/

Domain graph

Network requests