What Is SimpCity?
SimpCity (SimpCity.su) is a forum that shares premium OnlyFans content. As of December 2022, the website SimpCity.su gets an estimated 63.8 million monthly views, according to SimilarWeb. The Wayback Machine estimates that SimpCity.su was founded on August 31, 2022.
Links and Profiles
Website: simpcity.su
Is SimpCity Safe?
I analyzed simpcity.su for malware and malicious content to check if it was legit or a scam. Here are the results:
I checked the site SimpCity.su on an online malware scanner Sucuri and it returned a 403 Forbidden site issue. Even with the 403 Forbidden error, the malware scanner has graded the site SimpCity.su as a low security risk. You can see the same here: Sucuri scan for the site SimpCity.su.
A reason for the low security risk grade could be due to the 403 Forbidden warning coming not for the homepage but rather to lesser pages listed below:
- https://simpcity.su/account/dismiss-notice?notice_id=68
- https://simpcity.su/members/simpcity.67275/
The scan results also show that the site SimpCity.su has not been blacklisted by any security vendors.
Some things could be improved on the SimpCity.su domain. No website firewall was detected during the scan and there are several missing security headers:
- Missing security header for
ClickJacking Protection
. Alternatively, you can useContent-Security-Policy: frame-ancestors 'none'
. Affected pages:
https://simpcity.su/404javascript.js - Missing security header to prevent
Content Type
sniffing. Affected pages:
https://simpcity.su/404javascript.js - Missing
Strict-Transport-Security
security header. - Missing
Content-Security-Policy
directive. We recommend to add the following CSP directives (you can usedefault-src
if all values are the same):script-src
,object-src
,base-uri
,frame-src
However, these hardening improvements don’t impact the Sucuri grade.
To check this further I ran a parasite scan with Unmask Parasites on the site SimpCity.su and it says the page is suspicious. You can see the same here: Unmask Parasites scan for the site SimpCity.su.
Unmask Parasites cites 1 suspicious inline script found:
var d1 = document.getElementsByClassName('formButtonGroup-extra');
var frame = null;
window.onload = function(e){
if (d1....
Lastly, I ran a malware scan with VirusTotal for the domain SimpCity.su and the scan detected one file embedding the domain and no security vendor flagged the domain as malicious. You can see the same here: VirusTotal scan for the site SimpCity.su.
In conclusion, we didn’t find malware during our scans. And the online malware scanner has graded the site SimpCity.su as a low security risk even though it did return with a 403 Forbidden warning when the malware scanner tried to scan it. You are likely safe to visit this site even though it blocked the Sucuri scan. Overall grade: Relatively Safe.
September 11, 2023 @ 22:49
Editor’s Note:
See also: Enable/Disable Cloud-Delivered Protection for Microsoft Defender in Windows 11