Is solar-sanat.net safe?
https://solar-sanat.net/1158-27.exe
Direct malware download flagged by 16 antivirus engines on an 8.7-year-old domain.
This is a direct malware download link. Sixteen antivirus engines flagged the file as malicious, including Fortinet and Emsisoft. Do not download or run the file.
Read the full analysis01 · Investigation Brief
Investigation Brief
The URL points straight to an executable file named 1158-27.exe. Sixteen of 92 engines detected it as malicious, with Fortinet classifying it as phishing and Emsisoft as malware. The domain itself is 8.7 years old and hosted on a clean IP, yet the file still triggers multiple high-quality detections. No browser blocklists caught the domain, but the file-level flags are decisive. The combination of a direct executable link and confirmed detections outweighs the domain's age.
Page Content
The URL serves a Windows executable directly with no landing page or additional content. The filename 1158-27.exe suggests an attempt to appear innocuous or randomly generated.
Infrastructure
The file is hosted on IP 45.14.135.25 with a clean abuse score. SSL is valid from Let's Encrypt and expires in 67 days. No redirects occur before the download begins.
Domain History
The domain solar-sanat.net was registered on 2017-11-16 through 1API GmbH and is now 8.7 years old. Owner information is privacy-protected.
Web Reputation
The domain has no traffic ranking and no entries in independent review aggregators. The executable itself carries the malicious reputation.
What this means for you
Do not download or execute this file. The multiple engine detections indicate it is malware regardless of the domain's age.
Why the score is 14
The score combines saved deterministic evidence with the grounded analysis available for this report. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
Fresh result
19 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 16
- Suspicious
- 3
- Total
- 92
| Engine | Finding |
|---|---|
| alphaMountain.aiMalicious | malicious |
| Chong Lua DaoMalicious | malicious |
| CyRadarMalicious | malicious |
| Dr.WebMalicious | malicious |
| EmsisoftMalicious | malware |
| FortinetMalicious | phishing |
| G-DataMalicious | malware |
| KasperskyMalicious | malware |
| LionicMalicious | malicious |
| LumuMalicious | malware |
| RisingMalicious | malicious |
| SeclookupMalicious | malicious |
| SOCRadarMalicious | phishing |
| SophosMalicious | malware |
| VIPREMalicious | malware |
| WebrootMalicious | malicious |
| ESETSuspicious | suspicious |
| Forcepoint ThreatSeekerSuspicious | suspicious |
| GridinsoftSuspicious | suspicious |
All 92 engine results
- alphaMountain.ai - malicious - Malicious
- Chong Lua Dao - malicious - Malicious
- CyRadar - malicious - Malicious
- Dr.Web - malicious - Malicious
- Emsisoft - malware - Malicious
- Fortinet - phishing - Malicious
- G-Data - malware - Malicious
- Kaspersky - malware - Malicious
- Lionic - malicious - Malicious
- Lumu - malware - Malicious
- Rising - malicious - Malicious
- Seclookup - malicious - Malicious
- SOCRadar - phishing - Malicious
- Sophos - malware - Malicious
- VIPRE - malware - Malicious
- Webroot - malicious - Malicious
- ESET - suspicious - Suspicious
- Forcepoint ThreatSeeker - suspicious - Suspicious
- Gridinsoft - suspicious - Suspicious
- 0xSI_f33d - unrated - Clean
- Abusix - clean - Clean
- Acronis - clean - Clean
- ADMINUSLabs - clean - Clean
- AILabs (MONITORAPP) - clean - Clean
- AlienVault - clean - Clean
- AlphaSOC - unrated - Clean
- Antiy-AVL - clean - Clean
- ArcSight Threat Intelligence - unrated - Clean
- AutoShun - unrated - Clean
- Bfore.Ai PreCrime - unrated - Clean
- BitDefender - clean - Clean
- Bkav - unrated - Clean
- BlockList - clean - Clean
- Blueliv - clean - Clean
- Certego - clean - Clean
- ChainPatrol - unrated - Clean
- CINS Army - clean - Clean
- Cluster25 - unrated - Clean
- CRDF - clean - Clean
- Criminal IP - clean - Clean
- CSIS Security Group - unrated - Clean
- CTX AI - clean - Clean
- Cyan - unrated - Clean
- Cyble - clean - Clean
- desenmascara.me - clean - Clean
- DNS8 - unrated - Clean
- EmergingThreats - clean - Clean
- Ermes - unrated - Clean
- ESTsecurity - clean - Clean
- Fortra - unrated - Clean
- GCP Abuse Intelligence - unrated - Clean
- Google Safe Browsing - clean - Clean
- GreenSnow - clean - Clean
- GreyNoise - unrated - Clean
- Guardpot - unrated - Clean
- Heimdal Security - clean - Clean
- Hunt.io Intelligence - unrated - Clean
- IPsum - clean - Clean
- Juniper Networks - clean - Clean
- K7AntiVirus - unrated - Clean
- LevelBlue - clean - Clean
- Malwared - clean - Clean
- MalwarePatrol - clean - Clean
- MalwareURL - unrated - Clean
- Mimecast - unrated - Clean
- Netcraft - unrated - Clean
- OpenPhish - clean - Clean
- PhishFort - unrated - Clean
- Phishing Database - clean - Clean
- Phishtank - clean - Clean
- PREBYTES - clean - Clean
- PrecisionSec - unrated - Clean
- Quick Heal - clean - Clean
- Quttera - clean - Clean
- SafeToOpen - unrated - Clean
- Sangfor - clean - Clean
- Sansec eComscan - unrated - Clean
- Scantitan - clean - Clean
- SCUMWARE.org - clean - Clean
- Snort IP sample list - unrated - Clean
- StopForumSpam - clean - Clean
- Sucuri SiteCheck - clean - Clean
- ThreatHive - clean - Clean
- URLhaus - clean - Clean
- URLQuery - unrated - Clean
- Viettel Threat Intelligence - clean - Clean
- ViriBack - clean - Clean
- VX Vault - clean - Clean
- Xcitium Verdict Cloud - unrated - Clean
- Yandex Safebrowsing - clean - Clean
- ZeroCERT - clean - Clean
- ZeroFox - unrated - Clean
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
03 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
Domain Timeline
- Nov 16, 2017Domain registered
First appeared in WHOIS records — 8.7 years old today.
- Jul 28, 2026Saved security review — Flagged as dangerous
The completed checks from this saved scan are detailed above.
solar-sanat.net is an established domain now carrying threat signals. An older domain that starts tripping security checks is a classic pattern for an asset that was sold, repurposed, or compromised — the age alone is not reassurance.
Domain & Encryption
Server Reputation
04 · Evidence Ledger
Evidence ledger
The conclusion is supported by the evidence saved with this report.
Technical threat
Malware, phishing, credential theft and hostile infrastructure.
Antivirus consensus
Operator / customer risk
Complaints, withdrawals, business conduct and commercial traps.
No confirmed evidence in this dimension.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 19 of 92 engines flagged | Completed | Adverse | fresh · Jul 28, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | Not available |
| Page content | Page content was not available for semantic review | Limited | No saved finding | Not available |
| Visual evidence | No usable visual evidence was saved | Unavailable | No saved finding | Not available |
| Independent research | Independent research was not available for this report | Unavailable | No saved finding | Not available |
- Page content
- Result: Page content was not available for semantic review
- Limited
- No saved finding
- Visual evidence
- Result: No usable visual evidence was saved
- Unavailable
- No saved finding
- Independent research
- Result: Independent research was not available for this report
- Unavailable
- No saved finding
06 · Community
Community
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
0 community contributions
Share what happened, what the site requested, and what others should watch for.
Community reviews never change the scanner verdict.