Security Scan Report: onlyfans.com

Redirected to:
https://onlyfans.com/?return_to=%2Fmy%2Fsettings%2Fnotifications
Site favicon
Submitted: Oct 4, 2026, 10:49:42 PMCompleted: Oct 4, 2026, 10:50:25 PMpubliccompleted

This website contacted 16 IPs in 1 country across 7 domains to perform 172 HTTP transactions. The main domain is onlyfans.com and was registered 7 years ago.

Submitted URL: https://onlyfans.com/my/settings/notifications

Effective URL:

https://onlyfans.com/?return_to=%2Fmy%2Fsettings%2Fnotifications
Redirected

The Cisco Umbrella rank of the primary domain is #32,322 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 96%

1
Risk Score

Official OnlyFans login page on its own long-established domain with self-branding; standard same-origin login, no phishing or malware indicators.

Safety Factors (5)
Established domain (>13 years old)
Official brand domain with matching self-branding
No cross-origin credential forms or exfiltration
No Indicators of Compromise, YARA, or IDS hits
Legal/compliance pages present
Domain age information unavailable

Details

Page Title

OnlyFans

Scan Type

public

Domain Name Analysis

The domain name 'onlyfans.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'onlyfans' stretches across 8 characters with 2 vowels and 6 consonants. Word splitting yields two words: only, fans. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://onlyfans.com/my/settings/notifications

Page Load Overview

3.73s
Total Load Time
3.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,529 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media26% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
26%
social_media
25%
corporate
25%

Detected Features

Login Form
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22162.159.140.146Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1065.8.131.37Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1018.245.86.129Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1018.66.122.46Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
103.174.46.87Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1065.8.131.82Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1065.8.131.30Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1065.8.131.4Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1018.245.86.125Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
17216--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E764B63A521813FF4453CBC89A12B595334EE1AAF5F580E4AF6E4BA49E42DF3D473860

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:vBcbH69RIBXZ3Xnr3WlXpo1SDdWNmG9i9WUZ78H+wisTPZ8Ncd+y5DhdxabOTcbV:rb4QiKizyEiLLk2vWTgqXXY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:308613:4FFCeCIFUNMwIAFEp0FgLzA8gACBEiAAQKIqBUAAAo2UCycoMkCAECEw7lBAMAFgRxuAJThLDMiiFMIECiamIUYCzV+jQpYw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0f0f0f0f0b0fffff
Perceptual Hash:b913c6c56cc6e0ec
Difference Hash:1e5a5a5adadab09e
Wavelet Hash:0b0f0f0f030fdfc3
Color Hash:#e0856c

Other Hashes

Crop Resistant:1e5a5a5adadab09e

Scan History

Scan history not available

Unable to load historical scan data