buriedchapters.com - malicious URL scan, 12 Aug 2026

MalwareAnalyzer by Cyble scanned buriedchapters.com and returned a malicious verdict (score 82), categorised as credential-harvest. The page resolved to 104.21.40.156. 23 domains and 4 IPs were contacted, over 24 HTTP requests. The request followed 3 redirects before landing. This is a point-in-time observation from 12 Aug 2026; the page may have changed since.

Scan result

• Verdict: malicious (score 82) · Confidence 97%
• Scanned URL: http://kunjipsc.com/uploads/files/ranazefakedasa.pdf
• Domain: buriedchapters.com · IP: 104.21.40.156
• Server: cloudflare
• Page title: SEHOKI : Link Apk Situs Slot Jackpot Berkolaborasi Dengan Slot Gacor Malam Ini Paling Hoki
• HTTP status: 200 · text/html
• TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 10 14: · subject CN=buriedchapters.com
• HTTP requests captured: 24
• Scan tier: standard · observed 2026-08-12 19:15:51 UTC

Redirect chain

1. http://kunjipsc.com/uploads/files/ranazefakedasa.pdf
2. https://pelhamparkwayhouses.com/
3. https://zandfilmfest.com/
4. https://buriedchapters.com/

Antivirus & YARA (1 of 44 engines)

• YARA: JPCERT/CC [yara]: JPCERT_LODEINFO (page content)

Categories

• credential-harvest

Why this verdict

• Credential-harvesting form
• Antivirus/YARA detection in page content: JPCERT_LODEINFO
• Valid TLS, no impersonation or off-origin credential post
• Certificate issued < 48h ago
• Cross-host redirect chain

Detected technologies

• Cloudflare

Contacted infrastructure

• 104.21.40.156 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

• buriedchapters.com
• linksehoki.buriedchapters.com
• cdn.databerjalan.com
• www.samsung.com
• images.samsung.com
• assets.adobedtm.com
• in2.ecom-qa.samsung.com
• account.samsung.com
• shop.samsung.com
• r1.community.samsung.com
• via.placeholder.com
• i.ibb.co
• static.cloudflareinsights.com
• facebook.com
• twitter.com
• instagram.com
• youtube.com
• cdnjs.cloudflare.com
• www.google.com
• play.google.com

Other scans of buriedchapters.com (3)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

• 14 Aug 2026 - malicious
• 12 Aug 2026 - malicious
• 12 Aug 2026 - malicious

Questions about buriedchapters.com

Is buriedchapters.com safe?

No. MalwareAnalyzer scanned buriedchapters.com on 12 Aug 2026 and returned a malicious verdict with a score of 82 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.

How was buriedchapters.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of buriedchapters.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan