What Is SimpCity?

SimpCity (SimpCity.su) is a forum that shares premium OnlyFans content. As of December 2022, the website SimpCity.su gets an estimated 63.8 million monthly views, according to SimilarWeb. The Wayback Machine estimates that SimpCity.su was founded on August 31, 2022.

Links and Profiles

Website: simpcity.su

Is SimpCity Safe?

I analyzed simpcity.su for malware and malicious content to check if it was legit or a scam. Here are the results:

I checked the site SimpCity.su on an online malware scanner Sucuri and it returned a 403 Forbidden site issue. Even with the 403 Forbidden error, the malware scanner has graded the site SimpCity.su as a low security risk. You can see the same here: Sucuri scan for the site SimpCity.su.

SimpCity Sucuri results

A reason for the low security risk grade could be due to the 403 Forbidden warning coming not for the homepage but rather to lesser pages listed below:

  • https://simpcity.su/account/dismiss-notice?notice_id=68
  • https://simpcity.su/members/simpcity.67275/

The scan results also show that the site SimpCity.su has not been blacklisted by any security vendors.

Some things could be improved on the SimpCity.su domain. No website firewall was detected during the scan and there are several missing security headers:

  • Missing security header for ClickJacking Protection. Alternatively, you can use Content-Security-Policy: frame-ancestors 'none'. Affected pages:
    https://simpcity.su/404javascript.js
  • Missing security header to prevent Content Type sniffing. Affected pages:
    https://simpcity.su/404javascript.js
  • Missing Strict-Transport-Security security header.
  • Missing Content-Security-Policy directive. We recommend to add the following CSP directives (you can use default-src if all values are the same): script-src, object-src, base-uri, frame-src

However, these hardening improvements don’t impact the Sucuri grade.

To check this further I ran a parasite scan with Unmask Parasites on the site SimpCity.su and it says the page is suspicious. You can see the same here: Unmask Parasites scan for the site SimpCity.su.

Unmask Parasites cites 1 suspicious inline script found:

var d1 = document.getElementsByClassName('formButtonGroup-extra');
var frame = null;
window.onload = function(e){
if (d1....

Lastly, I ran a malware scan with VirusTotal for the domain SimpCity.su and the scan detected one file embedding the domain and no security vendor flagged the domain as malicious. You can see the same here: VirusTotal scan for the site SimpCity.su.

SimpCity VirusTotal results

In conclusion, we didn’t find malware during our scans. And the online malware scanner has graded the site SimpCity.su as a low security risk even though it did return with a 403 Forbidden warning when the malware scanner tried to scan it. You are likely safe to visit this site even though it blocked the Sucuri scan. Overall grade: Relatively Safe.

References

1. SimilarWeb – SimpCity.su

2. Wayback Machine – SimpCity.su