Security Scan Report: xn--nlyfans-4lb.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 3 domains to perform 8 HTTP transactions. The main domain is xn--nlyfans-4lb.com and was registered 3 weeks ago.

Submitted URL: https://xn--nlyfans-4lb.com

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Punycode homoglyph of 'onlyfans' on a 13-day-old unranked domain hosting a fake creator-earnings dashboard with a withdrawal lure; strong brand impersonation, DevTools blocked. No forms or IoCs found.

Risk Factors (5)
Brand impersonation of OnlyFans via a deceptive punycode domain
Homoglyph/typosquat hostname unrelated to the real brand's official domain
Anti-analysis: DevTools and view-source blocking in page JavaScript
Very new (13 days) and unranked domain presenting itself as an established creator platform
Page content is a simulated earnings dashboard with a 'Request Withdrawal' lure
Domain age information unavailable

Details

Page Title

Creator Statistics

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'xn--nlyfans-4lb.com' is registered. The registrable portion 'xn--nlyfans-4lb' spans 15 characters split between one vowel and 10 consonants; bonus characters include 1 digit and three hyphens. Tokenizing the label suggests six words: xn, n, ly, fans, 4, lb. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

€ STATISTICS (0) STATEMENTS OVERVIEW = ENGAGEMENT = REACH FANS, Earnings Payout Requests Chargebacks Referrals swe YOU ARE IN THE TOP 0.05% OF ALL CREATORS! $54,418.16 $77,896.48 Current balance P...

Page Load Overview

0.46s
Total Load Time
220 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,525 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking53% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
53%
corporate business
42%
documentation technical
33%
entertainment media
27%
technology software
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.13.95Google · CDNUnited States
AS15169Google LLC
2192.178.183.94Google · CDNUnited States
AS15169Google LLC
83--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T117430A2537A51931F12391BDB79F720AB62E9043C109DA20799C68D04FC65FC5A3BAFB

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:dkL42n2fI8im+wdVg4qCbzXq3b9aAfItmBsr5XVDPbllPv3T3+m:vi2fbVZ529F2FYm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55594:KLNKFE1pGAAEowNj9IYkGE4EKkkicAASEEAFOzRCA4KCdorFSEQSMUDAglB0cEA4xEgASNIgLFLClyCa0rEAAKYH5+ANgDCf

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7e7e7e7f7
Perceptual Hash:b3338989cd336699
Difference Hash:0c0c0c0c0c0c0c04
Wavelet Hash:c3c3c3c3c3c3c3c3
Color Hash:N/A

Other Hashes

Crop Resistant:0c0c0c0c0c0c0c04

Scan History

Scan history not available

Unable to load historical scan data