Security Scan Report: instant-as-built.de

Submitted: Oct 14, 2026, 5:51:12 PMCompleted: Oct 14, 2026, 5:51:59 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

10
Risk Score

Confirmed Adobe-impersonating 'secured document' download page identified by an analyst-vetted kit roster match; it lures Windows users into downloading a remote-management agent. Do not interact.

Risk Factors (4)
Known malicious Adobe-branded 'secured document' kit delivering a remote-management agent
Brand impersonation of Adobe on a domain unrelated to Adobe
Multi-source phishing Indicators of Compromise against the primary domain
Kit selectively serves Windows visitors and evades Edge/Mac/mobile (anti-analysis targeting)
Domain age information unavailable

Details

Page Title

Background Image Page

Scan Type

public

Domain Name Analysis

The domain name 'instant-as-built.de' uses the German country-code top-level domain (.de). The second-level label 'instant-as-built' is 16 characters long containing five vowels alongside nine consonants; it also includes two hyphens. It segments into 3 words: instant, as, built. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://instant-as-built.de/Acmecos/download.html

Page Load Overview

5.02s
Total Load Time
73 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:316 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical36% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
36%
healthcare medical
34%
news media journalism
30%
government public service
30%
technology software
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4193.34.145.201Lauterbourg, Grand Est, France
AS51167Contabo GmbH
41--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10361624BA9F3005B390790716BF36B062665C003D20ACA593FBD62E8CF84A9494B73CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TBr+5LMAFtyizQfYn9lPh7TsFWtCtWyN8y7euXDc:TBr0z9zQfk9lFoFWtCtWyneuXDc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3293:EAgBYcAZAAAAIIgMAAAAAABIBXAAZJCIAIIABBgsBgJCUIAQgAADACEIVGICAEBAQQKYAgAAACASBkKAIgQAAEAACQAAAAAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00001c3c3c3c0000
Perceptual Hash:9c1c6363ed9c9c98
Difference Hash:c4b23232b2aab084
Wavelet Hash:00063e3e7e7e427e
Color Hash:#6ce0bd

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data