Security Report: westlawcourtexpress.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2fd7714b-245c-438a-ae35-1b92ea1021f5 Domain and IP registration (RDAP)/api/v1/rdap/2fd7714b-245c-438a-ae35-1b92ea1021f5 Certificate Transparency/api/v1/ct/signon.thomsonreuters.com How often this domain was scanned/api/v1/domain/stats/westlawcourtexpress.com Scan history for this domain/api/v1/domain/history/westlawcourtexpress.com?limit=15

This website contacted 4 IPs in 1 country across 7 domains to perform 30 HTTP transactions. The main domain is signon.thomsonreuters.com and was registered 19 years ago.

Submitted URL: https://westlawcourtexpress.com/

Effective URL:

https://signon.thomsonreuters.com/?productid=CBT&lr=0&culture=en-US&re...

Redirected

AI Security Verdict

Low Risk

Confidence: 88%

Risk Score

The site impersonates Thomson Reuters and harvests credentials via a login form on an unrelated, unranked domain, indicating a high‑risk phishing page.

Risk Factors (4)

Brand impersonation of Thomson Reuters

Credential collection on unrelated domain

Unranked / low‑reputation domain

Multiple password fields

Safety Factors (5)

Cross‑origin form targets legitimate Thomson Reuters SSO endpoint

No Indicators of Compromise matches

No JavaScript malware YARA detections

No network IDS alerts

Top-ranked domain (Cisco Umbrella #0, 7047 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3

Domain age information unavailable

Details

Page Title

Westlaw Sign In | Thomson Reuters

Scan Type

public

Favicon Hash

MMH3: -881103875

MD5: 430acce94ba315def125dd60af0d607e

Domain Name Analysis

Domain 'westlawcourtexpress.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'westlawcourtexpress' spans 19 characters split between 6 vowels and 13 consonants. Segmentation suggests four words: west, law, court, express. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.07s

Total Load Time

304 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:761 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical84% confidence

Type: webapp

Method: ml+structural

All Detected Categories

documentation technical

84%

technology software

74%

government public service

63%

corporate business

59%

news media journalism

48%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	172.64.154.160Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	167.68.5.194	United States	AS209242Cloudflare London, LLC
7	50.16.207.21Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
7	155.46.172.255	United States	AS4583West Publishing Corporation
30	4	-	-