ScanMalware.com

Security Scan Report: westlawcourtexpress.com

Redirected to:
https://signon.thomsonreuters.com/?productid=CBT&lr=0&culture=en-US&re...
Site favicon
Submitted: Aug 19, 2026, 4:33:45 PMCompleted: Aug 19, 2026, 4:34:56 PMpubliccompleted

Summary

This website contacted 4 IPs in 1 country across 4 domains to perform 2 HTTP transactions. The main domain is signon.thomsonreuters.com and was registered NaN years ago.

Submitted URL: https://westlawcourtexpress.com/

Effective URL: https://signon.thomsonreuters.com/?productid=CBT&lr=0&culture=en-US&returnto=https%3a%2f%2f1.next.westlaw.com%2fCosi%2fSignOn&tracetoken=0819261134180TghK-_tT5-5t6DmRVk7hG91ND7LZ2XSzly7D3pBj-ZeW-PutdcH_E2vHdNCsh8TbMjh6Qtgcb2yX-F-CdNRJKU9IjDs_hVYkzZp21vpAdx9FX2dFhX3Anp7a3N9OwcA1g9RUcBO7AyCLjNFvId2uYSPKFX8TglZv37lTmxc3IWN6bSxDnINA5J9yF9JKD7a6tW3ZPkU4SG7eRduKr84wbHzi6JAvAs2ZxEfu2ByZsYptCOdXS1WaDQnCyto-5STgBkOijD00_TeAD3MVAM51tH062tqYnylOAPoD_NsC_XayqO1aXec85jDd5DeB2o83G4UWxqNYEUASFTYzJanLTIgMo7viwmffxTAuW3t7pghrON8xSOHb-EskXdDkFSd-&bhcp=1Redirected

AI Security Verdict

Low Risk

Confidence: 88%

3
Risk Score

The site impersonates Thomson Reuters and harvests credentials via a login form on an unrelated, unranked domain, indicating a high‑risk phishing page.

Risk Factors
Brand impersonation of Thomson Reuters
Credential collection on unrelated domain
Unranked / low‑reputation domain
Multiple password fields
Safety Factors
Cross‑origin form targets legitimate Thomson Reuters SSO endpoint
No Indicators of Compromise matches
No JavaScript malware YARA detections
No network IDS alerts
Top-ranked domain (Cisco Umbrella #0, 7047 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Westlaw Sign In | Thomson Reuters

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

documentation technical

(84%)

Domain Information

Domain 'westlawcourtexpress.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'westlawcourtexpress' spans 19 characters split between 6 vowels and 13 consonants. Segmentation suggests four words: west, law, court, express. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://westlawcourtexpress.com/

Page Load Overview

3.07s
Total Load Time
30
HTTP Requests
7
Domains
260 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:761 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical84% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
84%
technology software
74%
government public service
63%
corporate business
59%
news media journalism
48%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9172.64.154.160Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7167.68.5.194United States
AS209242Cloudflare London, LLC
750.16.207.21Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
7155.46.172.255United States
AS4583West Publishing Corporation
304--

Page Statistics

30
Requests
7
Unique Domains
304.1 KB
Total Size

Detected Technologies5

X-UA-Compatible
100%
PasswordField
100%
JQueryv3.6.1
100%
F5 BigIP
40%
jQuery UI
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T171820622DC4D9C3B180181D6A068EDCCB0EFCE74E5905896F8FB9B0D63EBED11625569

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:chScxoxTaPs6tj7gutTMoWQv3PwFUUIOciTziHOU2kBukB8kBD+i+5tS6CZB:cAcGMjps+v3IpMxHR9+Xgv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18515:iIsUAuEChSDSQAMAbxqXI2i0i5GHBZEAEUKTQS5OOAJkYAR4RgiAMGQwSICSIF4QEkozA6SkFRQVKgQEGALbtIUGAN40LkDQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:081c3c1c5c004218
Perceptual Hash:99c926339966ce99
Difference Hash:10323232524c4c32
Wavelet Hash:0f3f3f3fecc0c000
Color Hash:#bfbd40

Other Hashes

Crop Resistant:10323232524c4c32

Scan History

Scan history not available

Unable to load historical scan data