{"report_id":"067c8402-ca0d-45b8-b112-d41e5f2f5502","version":6,"status":"done","tags":[],"date":"2025-10-28T22:20:01Z","url":{"schema":"https","addr":"simpcity.su/threads/ninicherri.266699/","fqdn":"simpcity.su","domain":"simpcity.su","tld":"su"},"ip":{"addr":"186.2.163.153","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"simpcity.cr/threads/ninicherri.266699/","fqdn":"simpcity.cr","domain":"simpcity.cr","tld":"cr"},"title":"Error 504","dom":{"size":615,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (611), with no line terminators","md5":"986b5f2cbc62f7fbc23d9960d3a34805","sha1":"92b99b553c96a91abe8f9df201ea08e5850c50e1","sha256":"70267be02606b1759df1edf3234e0eabc76f62a257d4e16d48c59388786bb105","sha512":"55ee4345011829efbc1b29ec988b6a15201624e668470f15a5774164ac1b09c26490a8ff91c689045c61ce524dcb49dae2d975a4218ea1b41f7455d65a4da45a","ssdeep":"","tlshash":"3ff00215c793209fa01941dcd8f1708830441c71a3b6afe55a4716b8d488264a0b2299","dom_hash":"domhash72759777b1149cb652491e20ae3e3c21","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"https","addr":"simpcity.su/threads/ninicherri.266699/","fqdn":"simpcity.su","domain":"simpcity.su","tld":"su"},"ip":{"addr":"186.2.163.153","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-02T22:20:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"simpcity.su","ip":{"addr":"186.2.163.153","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-08-25","domain_rank":56582,"first_seen":"2022-08-30T15:50:38Z","last_seen":"2025-10-12T08:11:10.474539Z","alert_count":0,"request_count":1,"received_data":1351,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"simpcity.cr","ip":{"addr":"190.115.31.84","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2025-07-16","domain_rank":50493,"first_seen":"2025-07-22T23:50:09.712339Z","last_seen":"2025-10-28T05:21:25.130491Z","alert_count":0,"request_count":1,"received_data":751,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"simpcity.su/threads/ninicherri.266699/","fqdn":"simpcity.su","domain":"simpcity.su","tld":"su"},"ip":{"addr":"186.2.163.153","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-28T22:19:39.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpcity.su","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 11:39:30 GMT","end":"Fri, 21 Nov 2025 11:39:29 GMT"},"fingerprint":{"sha1":"79:7A:83:2D:C2:78:1B:79:24:74:C3:45:B1:F5:55:A2:FB:2F:88:03","sha256":"D3:9C:77:02:13:25:CC:3A:6B:BB:2D:83:01:B5:A9:16:27:D2:E3:4E:8B:5B:C8:20:55:59:C3:BD:B8:DC:DF:E7"}}},"request":{"raw":"GET /threads/ninicherri.266699/ HTTP/1.1\r\nHost: simpcity.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=b3wg6j0WH7j5WPIz; Domain=.simpcity.su; Path=/; Expires=Tue, 28-Oct-2025 22:39:40 GMT\n__ddg10_=1761689980; Domain=.simpcity.su; Path=/; Expires=Tue, 28-Oct-2025 22:39:40 GMT\n__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Tue, 28-Oct-2025 22:39:40 GMT\n__ddg1_=ZFJUVBPZIvqHScgnLbYc; Domain=.simpcity.su; HttpOnly; Path=/; Expires=Wed, 28-Oct-2026 22:19:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 28 Oct 2025 22:19:40 GMT\r\ncontent-type: text/html\r\ncontent-length: 175\r\nlocation: https://simpcity.cr/threads/ninicherri.266699/\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":127,"dns":69,"connect":29,"send":0,"wait":97,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"simpcity.cr/threads/ninicherri.266699/","fqdn":"simpcity.cr","domain":"simpcity.cr","tld":"cr"},"ip":{"addr":"190.115.31.84","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-28T22:19:40.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpcity.cr","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:19:39 GMT","end":"Mon, 19 Jan 2026 09:19:38 GMT"},"fingerprint":{"sha1":"DD:78:3F:62:DE:99:DE:98:39:4E:05:71:3B:39:B9:54:5E:70:DF:BF","sha256":"EC:AA:4E:B0:83:AA:63:F9:0F:9E:E6:E5:EA:99:AD:94:6F:27:96:8F:D5:92:F6:16:D5:12:B1:86:DE:D7:27:3E"}}},"request":{"raw":"GET /threads/ninicherri.266699/ HTTP/1.1\r\nHost: simpcity.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 504 Gateway Timeout\r\nserver: ddos-guard\r\ndate: Tue, 28 Oct 2025 22:19:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 583\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"504","status_text":"Gateway Timeout","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (579), with no line terminators","md5":"e9f642657e61c1a7f2fe038474abf083","sha1":"5a506a1f8b95f50395e87f8a3ddfd5f21475fed1","sha256":"ed784195e804233002feb7cf3ff653c936a54b69fde0165ecbc7ce4f0bd068a9","sha512":"3b6fae427a80049865922578a74992f8eb892ad19498a1a1756ae2049f839c341c34a6d7b2d1015d9a63f42a2ae121d559a0a5c5be4b2bfb6eddd0aab34adf93","ssdeep":"","tlshash":"74f09609cb9330dfe01a40e8d8f1308830550cb1e3b6a3f1ae4b2b79ecc82a470b224d","first_seen":"2025-04-30T17:27:52.103081Z","last_seen":"2026-05-12T11:07:38.416556Z","times_seen":122,"resource_available":true,"data":null}},"time_used":16143,"timings":{"blocked":61,"dns":14,"connect":20,"send":0,"wait":16021,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
