Security Scan Report: instant-as-built.de

Submitted: Sep 23, 2026, 2:50:05 PMCompleted: Sep 23, 2026, 2:50:41 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

New unranked domain flagged as phishing by two independent feeds, serving a fake 'Download Complete' lure for Acmecos.pdf. No forms, but content is a deceptive download trap — avoid.

Risk Factors
Multi-source corroborated phishing threat-intel match on the primary domain
Brand-new, unranked domain used for a simulated file-download notification
Deceptive 'secured document downloaded' narrative designed to induce a file download
Page title unrelated to domain and to visible content
Domain age information unavailable

Details

Page Title

Background Image Page

Scan Type

public

Domain Name Analysis

The domain 'instant-as-built.de' uses the German country-code top-level domain (.de) and has no subdomain. The core label 'instant-as-built' covers 16 characters holding 5 vowels versus 9 consonants, notching two hyphens. Breaking it apart gives three words: instant, as, built. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://instant-as-built.de/Acmecos/download.html

Page Load Overview

0.59s
Total Load Time
73 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:316 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing52% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

download file sharing
52%
technology software
48%
documentation technical
36%
healthcare medical
33%
news media journalism
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4193.34.145.201Lauterbourg, Grand Est, France
AS51167Contabo GmbH
41--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10361624BA9F3005B390790716BF36B062665C003D20ACA593FBD62E8CF84A9494B73CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TBr+5LMAFtyizQfYn9lPh7TsFWtCtWyN8y7euXDc:TBr0z9zQfk9lFoFWtCtWyneuXDc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3293:EAgBYcAZAAAAIIgMAAAAAABIBXAAZJCIAIIABBgsBgJCUIAQgAADACEIVGICAEBAQQKYAgAAACASBkKAIgQAAEAACQAAAAAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3c3c3c0000
Perceptual Hash:999966669999ce8c
Difference Hash:200cb2b2322a1428
Wavelet Hash:0c0c3c3cfcfcf0f0
Color Hash:#c59287

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data