Security Scan Report: www.thomasmcafee.com

Submitted: Completed: publiccompleted
This website contacted 59 IPs in 3 countries across 32 domains to perform 183 HTTP transactions. The main domain is thomasmcafee.com and was registered 27 years ago.

Submitted URL: https://www.thomasmcafee.com/obituaries/Kevin-Barry-Cleary?obId=46850223

AI Security Verdict

Low Risk

Confidence: 60%

3
Risk Score

Legitimate long-established funeral home obituary page with no forms or malware; only a single unverified threat-intel report against the third-party redirector linkprotect.cudasvc.com, not the site's own content.

Risk Factors (1)
Single-source, unverified external-link threat-intel match: linkprotect.cudasvc.com/url flagged as 'icedid' (malware) — a third-party redirector domain, not the page's own host; plausibly a wrapped/abused link appearing in or near page resources rather than evidence about the funeral home.
Safety Factors (6)
Domain registered 1999-04-22 (27 years old) — well-established standard hosting.
Page presents its own brand/entity (Thomas McAfee Funeral Homes) matching its domain; no impersonation of another organisation.
No forms at all: no login, password, disguised-password or payment fields; no cross-origin form submissions.
No YARA malware, no kit-roster match, no credential exfiltration, no obfuscated network sink.
Rich, verifiable real-world content (obituary, addresses, staff/services pages) consistent with a legitimate funeral home memorial page.
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

Obituary information for Kevin Barry Cleary

Scan Type

public

Domain Name Analysis

The domain name 'www.thomasmcafee.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www'. The second-level label 'thomasmcafee' is 12 characters long containing five vowels alongside 7 consonants. Splitting it apart reveals two words: thomas, mcafee. Median word length comes out to 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.thomasmcafee.com/obituaries/Kevin-Barry-Cleary?obId=46850223

Page Load Overview

10.35s
Total Load Time
12.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:6,100 chars
Detector Agreement:100%

Website Classification

Primary Category

social_media50% confidence
Type: spa
Method: structural

All Detected Categories

social_media
50%
forum
50%

Detected Features

Comments
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
932.197.143.37Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
318.245.31.35Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.97Google · CDNUnited States
AS15169Google LLC
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
318.66.92.36Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
318.64.16.141Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3172.64.148.115Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3146.75.122.132Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
351.102.127.220Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
18359--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T169D4291D75251C3EA02749A6F153BB6CF2265F03D34698A8B8EC4A1DCFD72D8C12A74E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:nRvaK2rNcBlAdGZj4u4Y4YgTg3emhrTKxGZ/Zd:nMrN4CGZj4u54pTMTKxGZ/P

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:622084:pR2ZQy0hEJgEVasJCEXiCQAawCyIhIgjgiFAxVAiAOojABXgIJJS44pCxcMAkQPGHAOB29I0jUo7AoUSwqAgKarwABHCBAEI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00818b83879fdfff
Perceptual Hash:bc634316674999ba
Difference Hash:413f3b332f383a2c
Wavelet Hash:00008b83879fdfff
Color Hash:#8c40bf

Scan History

Scan history not available

Unable to load historical scan data