Security Scan Report: mount-and-blade-2-bannerlord.en.softonic.com

Site favicon
Submitted: Oct 6, 2026, 7:18:40 AMCompleted: Oct 6, 2026, 7:19:59 AMpubliccompleted

This website contacted 194 IPs in 11 countries across 158 domains to perform 724 HTTP transactions. The main domain is mount-and-blade-2-bannerlord.en.softonic.com and was registered 2 years 2 months ago.

Submitted URL: https://mount-and-blade-2-bannerlord.en.softonic.com/

The Cisco Umbrella rank of the primary domain is #62,653 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 65%

2
Risk Score

Established Softonic software-download page for Mount & Blade II: Bannerlord. No credential/payment forms, no malware or IDS signals; only an unverified single-source IoC on a sibling subdomain and heavy ad-driven redirects.

Risk Factors (2)
Excessive redirect chain (36 hops, 28 cross-domain) driven by advertising and tracker frames
One single-source, unverified threat-intel report of 'fakeapp' on a sibling subdomain of the same parent domain
Safety Factors (6)
Domain age 26 years (WELL_ESTABLISHED, minimal age risk)
Ranked in Cisco Umbrella Top 100K (62,653) — real, established web property
No password, disguised-password or payment fields anywhere on the page
No cross-origin credential forms, no credential exfiltration, no JavaScript behavioral signals
No YARA malware patterns, no native-YARA high-precision hits, no network IDS alerts, no Safe Browsing threat
Page displays its own brand (Softonic) rather than impersonating another entity; the game title is the subject of a download listing, not a brand claim
Domain age information unavailable

Details

Page Title

Mount & Blade II: Bannerlord for Mount & Blade II: Bannerlord - Download

Scan Type

public

Domain Name Analysis

The domain 'mount-and-blade-2-bannerlord.en.softonic.com' uses the commercial generic top-level domain (.com), featuring subdomain 'mount-and-blade-2-bannerlord.en'. Count 8 characters in 'softonic' containing 3 vowels alongside five consonants. Segmentation suggests three words: s, of, tonic. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mount-and-blade-2-bannerlord.en.softonic.com/

Page Load Overview

5.07s
Total Load Time
8.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:32,523 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software72% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
72%
corporate business
45%
e-commerce shopping
42%
corporate
35%
documentation technical
32%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
145146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
33.174.46.14Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3150.171.27.10Azure · CLOUDUnited States
AS8075Microsoft Corporation
3142.251.14.155Google · CDNUnited States
AS15169Google LLC
3142.251.154.119Google · CDNUnited States
AS15169Google LLC
33.174.46.118Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3150.171.28.10Azure · CLOUDUnited States
AS8075Microsoft Corporation
3142.251.14.157Google · CDNUnited States
AS15169Google LLC
33.174.46.38Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
724194--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T147C40973A590202E733B46C4A251770D31028106F926DCF6FA9C86E97BD7EA16A3F74D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:yG73sODYk06UYmiQA2MtH9pRNASEhbXDVVm7NUpRWs7b0w2VvwOJhKGA5na4oMDM:9JhKGA5na+M

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:556032:D4jOhcKkYpBEACFB4gkaRI0CAAEsaAFEC7EwVTILIAOKcgUCuTCUQQGUIxCAAAOAAUEEA1SmJx4QnQmNScQlywBQhsQCFAgO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00c7ebcf83c33f37
Perceptual Hash:b370066b5e1f680f
Difference Hash:1b0e161e1b0f7a66
Wavelet Hash:00c7ebcf83c12f27
Color Hash:#d0e06c

Other Hashes

Crop Resistant:1b0e161e1b0f7a66

Scan History

Scan history not available

Unable to load historical scan data