In the new version of Oxygen Forensic® Detective, we have added support for OnlyFans data extraction from the cloud via our built-in Oxygen Forensic® Cloud Extractor.
What is OnlyFans?
OnlyFans is an internet content subscription service based in London, United Kingdom, where creators on the platform can earn money from users who subscribe to their content. Founded in 2016, the service now has over 150 million subscribed users.
OnlyFans grew rapidly during the pandemic as many people turned to it to earn money after losing their jobs. Between March and April 2020, OnlyFans saw a 75% month-to-month increase in subscriptions, this amounted to an average of 200,000 users signing up every day.
OnlyFans is described as a social platform built to revolutionize content creation of all genres allowing creators to develop relationships with their fanbase and monetize their content. The content is mainly pornography.
Security Risks
While most sex workers on the platform are of legal age and share their own content, there are some exceptions. The platform has faced a spate of controversies, including content leaks and allegations of underage creators.
A BBC investigation discovered that the age verification system on the platform can be bypassed in several ways and that some accounts are not automatically shut down if they are found to share illegal content.
According to BBC, children using the site who contacted Childline reported being victims of prior sexual abuse, while others presented «mental health issues including anger, low self-esteem, self-harm, and suicide ideation».
OnlyFans App Support in Oxygen Forensic® Detective
To help investigators tackle OnlyFan cases, support for the app has been added to Oxygen Forensic® Cloud Extractor in the new version of Oxygen Forensic® Detective.
To authorize in the service, investigators will need the OnlyFans or Google login as well as a password or token linked with the account under investigation.
For the authorization to be successful, the Google Chrome web browser has to be installed on the PC from which Oxygen Forensic® Cloud Extractor operates. When authorized by username and password from an OnlyFans account, investigators will be asked to enter the credentials once again in the opened Google Chrome window.
From there, it will be possible to pass 2-factor-identification by entering a backup code or code sent by SMS to a phone number associated with the account, if it is set up.
If an OnlyFans account is associated with an analyzed device, credentials to the service could be imported into Oxygen Forensic® Cloud Extractor from the “Accounts and Passwords” section.++
Please note that the session will be saved and connected to the account. Investigators can use HTTP, SOCKS4, SOCKS5, or other proxies to protect the details of the investigation. In some cases, all other devices connected to the OnlyFans account under investigation may be logged out of it upon performing the cloud extraction.
As soon as the authorization is complete, the following data could be extracted from the service, if present:
- account information
- sessions
- wishlists
- social networks
- social connections
- notifications
- lists
- history
- polls;
- posts
- bookmarks
- planned posts
- streams
- planned streams
- contacts
- comments
- purchase history
- credit cards
- alternative payment methods
- payout information
- chats
- planned messages
- vault
- promos
Please note that the chats and messages that have been hidden by a user are unavailable and cannot be extracted.
Conclusion
OnlyFans has become a part of popular culture, especially during the pandemic. Due to its popularity, it’s important for investigators to have the ability to obtain information when needed in their investigations.
At Oxygen Forensics we are continually adding apps and features to make sure we are staying on top of digital trends to give law enforcement the tools to solve and prosecute cases.
Want to try extracting cloud data from OnlyFans? Contact us for a free trial.