Is lobbydesires.com safe?

No. MalwareAnalyzer scanned lobbydesires.com on 22 Aug 2026 and returned a suspicious verdict with a score of 42 out of 100. Treat it as hostile until it is re-checked.

What malware is associated with lobbydesires.com?

4 analysed samples communicate with this URL.

How was lobbydesires.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

lobbydesires.com - suspicious URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned lobbydesires.com and returned a suspicious verdict (score 42). The page resolved to 185.165.240.137 on WorldStream B.V. in NL. The domain was registered 939 days ago through NameSilo, LLC. 2 domains and 1 IP were contacted. 4 malware samples communicate with this URL. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 42) · Confidence 51%
Scanned URL: https://lobbydesires.com/location.js?la=1
Domain: lobbydesires.com · IP: 185.165.240.137 · AS49981 · NL
Server: nginx/1.26.3
HTTP status: 200 · application/javascript
Registrar: NameSilo, LLC · domain age 939 days · created 2024-01-25
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Nov 6 03: · subject CN=lobbydesires.com
Scan tier: fast · observed 2026-08-22 07:58:14 UTC

Malware communicating with this URL (4)

These samples were observed contacting or being served from lobbydesires.com. Each links to its full analysis.

81e8f55f013063e915ad8d09315fba3dad6067cc56c389b6430ade6d886cbb4e - referenced · 81e8f55f013063e915ad8d09315fba3d · first seen 2026-08-22
97da388b05bf0ca772ddb6fde97a21eeff24852b7f4d8a252e3dda9b95ac941d - referenced · 97da388b05bf0ca772ddb6fde97a21ee · first seen 2026-08-22
dbb1a4f969175224150ae2359c3fa43156dddc976dbb27bf6bf86384bbbd4798 - referenced · dbb1a4f969175224150ae2359c3fa431 · first seen 2026-08-20
9fff1a774a85a191dd95c19f580cb9c108a3b15f35b81ca6026a59449a74f33f - referenced · 9fff1a774a85a191dd95c19f580cb9c1 · first seen 2026-08-17

Antivirus & YARA (1 of 48 engines)

ClamAV feed: InterServer (malware) [av]: sigs.InterServer.net.HEX.Topline.malware.js.lobbydesires.com.879.UNOFFICIAL (served file)

Why this verdict

Antivirus/YARA detection in page content: sigs.InterServer.net.HEX.Topline.malware.js.lobbydesires.com.879.UNOFFICIAL
File download routed to the malware sandbox (location.js)
Valid TLS, no impersonation or off-origin credential post

Detected technologies

Nginx
PHP

Contacted infrastructure

185.165.240.137 - AS49981 WorldStream B.V. (Netherlands)

Files served by this page

location.js · e6eea91373ef3199376e667fd72c21ec

Observed indicators

lobbydesires.com
statinside.com
185.165.240.137
https://lobbydesires.com/location.js?la=1
https://lobbydesires.com/page.php?url=
https://statinside.com/counter.js

Questions about lobbydesires.com

Is lobbydesires.com safe?: No. MalwareAnalyzer scanned lobbydesires.com on 22 Aug 2026 and returned a suspicious verdict with a score of 42 out of 100. Treat it as hostile until it is re-checked.
What malware is associated with lobbydesires.com?: 4 analysed samples communicate with this URL.
How was lobbydesires.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of lobbydesires.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan