Report - simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849

Report Overview

Visited public
2025-05-11 09:45:31
Tags
URL
simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Finishing URL
simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
IP / ASN
186.2.163.153
#59692 IQWeb FZ-LLC
Title
Log in | SimpCity Forums

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.7tv.app	102232	2021-02-21	2021-02-21	2025-05-11	457 B	215 kB	37.27.171.106
jpg5.su	unknown	2024-08-10	2024-08-13	2025-05-10	407 B	25 kB	190.115.31.64
fonts.googleapis.com	8877	2005-01-25	2012-05-23	2025-05-07	1.1 kB	32 kB	142.250.178.42
simpcity.su	unknown	2022-08-25	2022-08-30	2025-05-11	23 kB	1.2 MB	186.2.163.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-05-11 09:45:09	medium	Client IP	186.2.163.153	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	From	Size	First Seen	Last Seen
	simpcity.su/js/xf/login_signup.min.js?_v=dc874496	ScriptElement	3.1 kB	2024-07-28	2025-06-07
Pretty URL simpcity.su/js/xf/login_signup.min.js?_v=dc874496 IP 186.2.163.153 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2024-07-28 06:19 Last Seen2025-06-07 10:52 Times Seen71 Hash c19651c62d0d59306217bd0c162ad65d 2a9cb31c3bbdb58f078d315c8429404122a0b9ad 2aa3128304f960b2f5b5bd4eb08c833a12508e3da398ecc3faaf27e072e64267 Loading...

	simpcity.su/js/vendor/vendor-compiled.js?_v=dc874496	ScriptElement	15 kB	2024-05-23	2025-06-07
Pretty URL simpcity.su/js/vendor/vendor-compiled.js?_v=dc874496 IP 186.2.163.153 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-23 19:25 Last Seen2025-06-07 10:52 Times Seen186 Hash 8c1b842a3777eb2b50ca92bd1f39a09a 757304e881079ebdae0c3d87a5e7144b8f5c89d0 40370aee49c7a9cde80f64b5d8373f1bfe3c3de64f855cec1e8ef1afb3767f24 Loading...

	simpcity.su/js/xf/webauthn.min.js?_v=dc874496	ScriptElement	5.3 kB	2024-08-14	2025-06-07
Pretty URL simpcity.su/js/xf/webauthn.min.js?_v=dc874496 IP 186.2.163.153 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-14 17:57 Last Seen2025-06-07 10:52 Times Seen68 Hash eceb1265ace3ee069f75c84e12e0f0cc f5b978eef615e5f50d38c096dabe39abdb94cf6d d6a4f8f9c670fe24e83f49f805487eaacd43a26e81158c233dbd8a7da3d56275 Loading...

	simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849	ScriptElement	2.4 kB	2025-02-08	2025-06-07
Pretty URL simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849 IP 186.2.163.153 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2025-02-08 21:41 Last Seen2025-06-07 10:52 Times Seen30 Hash cffdf544f1521f3d373a67ce8508c1ab 2ef66047682315926584f0da7b71b3446c60523a 0941dc0ced8de84eb237c6a9ad0f42fe36e1c50b0792afbaf07f11c279acc03e Loading...

	jpg5.su/sdk/pup-sc.js?7	ScriptElement	24 kB	2024-07-28	2025-06-07
Pretty URL jpg5.su/sdk/pup-sc.js?7 IP 190.115.31.64 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2024-07-28 06:19 Last Seen2025-06-07 10:52 Times Seen65 Hash 902e1763f206c7e9e5045f95cdc1b46b 5e026ee5c4cbca0b3e1d1f4bd49c3934396f4d33 e4f260d7a3ebab839380dec73bc6e74065722d2ca2d174e709c497dd9f28f022 Loading...

	simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849	ScriptElement	5.1 kB	2025-05-11	2025-05-11
Pretty URL simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849 IP 186.2.163.153 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2025-05-11 09:45 Last Seen2025-05-11 09:45 Times Seen1 Hash 0bfa2999b38ecfc68e3224832f4d38f3 24511c851020c55a17b9e75b48917d4e79326128 21f69ff382ee55cb14663ff07a4dd03f7b7899aef26178a7de609d27d12fdb7e Loading...

	simpcity.su/js/xf/core-compiled.js?_v=dc874496	ScriptElement	176 kB	2025-02-23	2025-06-07
Pretty URL simpcity.su/js/xf/core-compiled.js?_v=dc874496 IP 186.2.163.153 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2025-02-23 15:50 Last Seen2025-06-07 10:52 Times Seen42 Hash 936d69c857bf741dbd1d702df323fba5 9255e072115f04ef4cb390dad9cf03e0adceeaca 2d9890cc3a597a292386bec00f54601bdfabda703b4396d96c6a738fe7580957 Loading...

	simpcity.su/js/xf/form.min.js?_v=dc874496_mt=undefined	ScriptElement	31 kB	2024-08-13	2025-06-07
Pretty URL simpcity.su/js/xf/form.min.js?_v=dc874496_mt=undefined IP 186.2.163.153 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-13 00:28 Last Seen2025-06-07 10:52 Times Seen86 Hash 268d24f506fd40d36ce2c86601638e9e ea654041ea28a394195bd8b38dc6f2a1827af9b8 a6e1f2a669bf6f12b5b754ad2814b9d449328ef7bbef4bec39838ac847148d3e Loading...

	simpcity.su/js/xf/preamble.min.js?_v=dc874496	ScriptElement	3.9 kB	2025-02-08	2025-06-07
Pretty URL simpcity.su/js/xf/preamble.min.js?_v=dc874496 IP 186.2.163.153 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2025-02-08 18:52 Last Seen2025-06-07 10:52 Times Seen46 Hash 5311fffb5759ce42c8794ad3d0ed1154 402a0fdb087e193ce34eb16815940009d62123b6 b436fcb2277e73f40246e07ee2ae54db8581d67a0ef83e37c85593167116c477 Loading...

HTTP Transactions (34)

URL IP Response Size

fonts.googleapis.com/css2?family=Kanit:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Titan+One&display=swap

142.250.178.42

200 OK

28 kB

URL GET
fonts.googleapis.com/css2?family=Kanit:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Titan+One&display=swap
IP
142.250.178.42:443
ASN
#15169 GOOGLE

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint7A:29:E6:A8:BE:59:2C:AE:82:2D:CA:8E:15:89:41:BE:EC:D2:0D:EA
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT

File type
ASCII text
Size
28 kB (28120 bytes)
Hash
636337e825df46f21f42f877a1b3aa83
3f30d0cb1111844369d0b27c4a784b860e722ccf
6444b5e487d20d9365b0fed8e6c1902e63b3c6979a8d51af134c399ec588238a

HTTP Headers

GET /css2?family=Kanit:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Titan+One&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 11 May 2025 09:45:09 GMT
date: Sun, 11 May 2025 09:45:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

simpcity.su/js/vendor/vendor-compiled.js?_v=dc874496

186.2.163.153

200 OK

15 kB

URL GET
simpcity.su/js/vendor/vendor-compiled.js?_v=dc874496
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
JavaScript source, ASCII text, with very long lines (11789)
Size
15 kB (14681 bytes)
Hash
8c1b842a3777eb2b50ca92bd1f39a09a
757304e881079ebdae0c3d87a5e7144b8f5c89d0
40370aee49c7a9cde80f64b5d8373f1bfe3c3de64f855cec1e8ef1afb3767f24

HTTP Headers

GET /js/vendor/vendor-compiled.js?_v=dc874496 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=j9gdyUTx7kN0Aimj; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=Ju9sPr5O4uVc06Hx; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Fri, 09 May 2025 00:06:30 GMT
content-type: application/javascript
last-modified: Fri, 11 Apr 2025 19:39:37 GMT
vary: Accept-Encoding
etag: W/"67f96ff9-3959"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: MISS
age: 207519
content-length: 4358
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/data/assets/logo_default/simpcityMainLogo.png

186.2.163.153

200 OK

191 kB

URL GET
simpcity.su/data/assets/logo_default/simpcityMainLogo.png
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
PNG image data, 1000 x 224, 8-bit/color RGBA, non-interlaced
Size
191 kB (191295 bytes)
Hash
38daafa00f19ad6f98713d70fff3fa1a
ebda87a84e163ea676cf4526a591c878d2105988
1b1c04e6df1686a56c7f84785500a43ff6b03bd03db8b475e2de0699e360ff28

HTTP Headers

GET /data/assets/logo_default/simpcityMainLogo.png HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=j9gdyUTx7kN0Aimj; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=jSSEn3f9Fkf9n9Yi; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Fri, 03 Jan 2025 10:49:22 GMT
content-type: image/png
content-length: 191295
x-backend: b1
last-modified: Tue, 19 Nov 2024 18:42:43 GMT
etag: "673cdc23-2eb3f"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: MISS
accept-ranges: bytes
age: 11055347
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/custom/sgames2.png

186.2.163.153

200 OK

3.1 kB

URL GET
simpcity.su/custom/sgames2.png
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Size
3.1 kB (3126 bytes)
Hash
343038f88e0aa88149ae382be42424eb
f7dac7494db69ce88aa334dd31432b39af46ede9
4b5e55f0e2ae716aac99a47dd52ff1c4d5cdfe9af82220f69b89583e57302781

HTTP Headers

GET /custom/sgames2.png HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/css.php?css=public%3Anotices.less%2Cpublic%3Aextra.less&s=1&l=1&d=1746891286&k=102e8fc666cd39452d8ad01a258b38ddbeb0b95f
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=nPdkMqXL9LGEXPx1; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 25 Mar 2025 09:31:54 GMT
content-type: image/png
content-length: 3126
last-modified: Tue, 16 Jul 2024 09:59:56 GMT
etag: "6696449c-c36"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: MISS
accept-ranges: bytes
age: 4061595
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849

186.2.163.153

403 Forbidden

32 kB

URL User Request GET
simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1062)
Size
32 kB (32387 bytes)
Hash
a8cf292a825317319bad5e83f950e07d
40f9d956ff8ee2f05f1c30d1a806516a930e6f7c
d3d3834d6a4fe7c68e2a5caa075fea2bf36e98d275d9fd7eb301a666cc1cc602

Detections

NIDS	Severity	Alert
suricata	medium	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related

HTTP Headers

GET /threads/hellomoonli-hellolimoon-elo.268259/post-15336849 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=Y6mQGruMDOqWarkL; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
server: ddos-guard
set-cookie: __ddg8_=j9gdyUTx7kN0Aimj; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ; path=/; secure
content-security-policy: upgrade-insecure-requests;
date: Sun, 11 May 2025 09:45:09 GMT
content-type: text/html; charset=utf-8
content-length: 11018
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sun, 11 May 2025 09:44:53 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: private, no-cache, max-age=0
content-encoding: gzip
vary: Accept-Encoding
referrer-policy: strict-origin-when-cross-origin
x-cache-type: Dynamic
X-Firefox-Spdy: h2

simpcity.su/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Avariations.less%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=1&l=1&d=1746891286&k=5727eb3062d50de713763fa282a3babace673481

186.2.163.153

200 OK

389 kB

URL GET
simpcity.su/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Avariations.less%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=1&l=1&d=1746891286&k=5727eb3062d50de713763fa282a3babace673481
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
ASCII text, with very long lines (44876)
Size
389 kB (388802 bytes)
Hash
3dabff05236a4c630a4a3d91a1ddd0b6
72f2ef059ba7d8b2cd40dea407868d2d15ec2eb1
55d83670a502c0bb4c781edd301e18e4005480238710c3ddfa0cfdfc97861663

HTTP Headers

GET /css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Avariations.less%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=1&l=1&d=1746891286&k=5727eb3062d50de713763fa282a3babace673481 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=j9gdyUTx7kN0Aimj; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=URmkQJnjvojNTjhC; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Sat, 10 May 2025 15:34:47 GMT
content-type: text/css; charset=utf-8
content-length: 65129
x-frame-options: SAMEORIGIN
expires: Sun, 10 May 2026 15:34:47 GMT
last-modified: Sat, 10 May 2025 15:34:46 GMT
cache-control: public, max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
simp-cached: BYPASS
x-cache-type: Dynamic
age: 65422
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/css.php?css=public%3Anotices.less%2Cpublic%3Aextra.less&s=1&l=1&d=1746891286&k=102e8fc666cd39452d8ad01a258b38ddbeb0b95f

186.2.163.153

200 OK

95 kB

URL GET
simpcity.su/css.php?css=public%3Anotices.less%2Cpublic%3Aextra.less&s=1&l=1&d=1746891286&k=102e8fc666cd39452d8ad01a258b38ddbeb0b95f
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
Unicode text, UTF-8 text, with very long lines (61186)
Size
95 kB (95306 bytes)
Hash
c96c2bd9006e29aee9a079e0f66554fb
3c94141288133def9092339d4cd3751ed86fb634
bc41c35184d3568783949fcdc8220875efd7f8ac3a4ef942ee9e458668cbacc0

HTTP Headers

GET /css.php?css=public%3Anotices.less%2Cpublic%3Aextra.less&s=1&l=1&d=1746891286&k=102e8fc666cd39452d8ad01a258b38ddbeb0b95f HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=j9gdyUTx7kN0Aimj; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=PkwqEJBxN7dXH1hN; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Sat, 10 May 2025 15:34:51 GMT
content-type: text/css; charset=utf-8
content-length: 14041
x-frame-options: SAMEORIGIN
expires: Sun, 10 May 2026 15:34:51 GMT
last-modified: Sat, 10 May 2025 15:34:46 GMT
cache-control: public, max-age=31536000
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
simp-cached: BYPASS
x-cache-type: Dynamic
age: 65418
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/js/xf/preamble.min.js?_v=dc874496

186.2.163.153

200 OK

3.9 kB

URL GET
simpcity.su/js/xf/preamble.min.js?_v=dc874496
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
JavaScript source, ASCII text, with very long lines (515)
Size
3.9 kB (3936 bytes)
Hash
5311fffb5759ce42c8794ad3d0ed1154
402a0fdb087e193ce34eb16815940009d62123b6
b436fcb2277e73f40246e07ee2ae54db8581d67a0ef83e37c85593167116c477

HTTP Headers

GET /js/xf/preamble.min.js?_v=dc874496 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=j9gdyUTx7kN0Aimj; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=MaDKzmsBMoNsXwNt; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 21 Apr 2025 11:43:19 GMT
content-type: application/javascript
last-modified: Fri, 11 Apr 2025 19:39:42 GMT
vary: Accept-Encoding
etag: W/"67f96ffe-f60"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: MISS
age: 1720910
content-length: 1865
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/styles/fa/regular/times-circle.svg?v=5.15.3

186.2.163.153

200 OK

685 B

URL GET
simpcity.su/styles/fa/regular/times-circle.svg?v=5.15.3
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
SVG Scalable Vector Graphics image
Size
685 B (685 bytes)
Hash
909f71701ddf46e1303141b5eaefd176
3be00edbf6adabb4bbbbce1e3a31375bda86d24e
59d0cc7186806b720203b21cd2944603674c7555b0fbc8581e3e2f441da22373

HTTP Headers

GET /styles/fa/regular/times-circle.svg?v=5.15.3 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Avariations.less%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=1&l=1&d=1746891286&k=5727eb3062d50de713763fa282a3babace673481
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=50IwKzJd7FMSYCZN; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Thu, 08 May 2025 21:26:58 GMT
content-type: image/svg+xml
last-modified: Fri, 11 Apr 2025 19:46:05 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cache-type: Dynamic
etag: "67f9717d-2ad"
age: 217092
content-length: 338
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/js/xf/login_signup.min.js?_v=dc874496

186.2.163.153

200 OK

3.1 kB

URL GET
simpcity.su/js/xf/login_signup.min.js?_v=dc874496
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
ASCII text, with very long lines (517)
Size
3.1 kB (3076 bytes)
Hash
c19651c62d0d59306217bd0c162ad65d
2a9cb31c3bbdb58f078d315c8429404122a0b9ad
2aa3128304f960b2f5b5bd4eb08c833a12508e3da398ecc3faaf27e072e64267

HTTP Headers

GET /js/xf/login_signup.min.js?_v=dc874496 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=j9gdyUTx7kN0Aimj; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=IjnFe1XyBjQ9sncJ; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Fri, 09 May 2025 17:38:40 GMT
content-type: application/javascript
last-modified: Fri, 11 Apr 2025 19:39:42 GMT
vary: Accept-Encoding
etag: W/"67f96ffe-c04"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: MISS
age: 144389
content-length: 1304
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/styles/fa/regular/times.svg?v=5.15.3

186.2.163.153

200 OK

605 B

URL GET
simpcity.su/styles/fa/regular/times.svg?v=5.15.3
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
SVG Scalable Vector Graphics image
Size
605 B (605 bytes)
Hash
666cec67f9d21f40cec8ca85e01a3ee2
e5285ec0a3cea0e6b677548b60b7d5790f045910
f8cf602f98d74745260783562d1dfd35bf65c30fc776b833ee995e25ddbdad2a

HTTP Headers

GET /styles/fa/regular/times.svg?v=5.15.3 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/css.php?css=public%3Anotices.less%2Cpublic%3Aextra.less&s=1&l=1&d=1746891286&k=102e8fc666cd39452d8ad01a258b38ddbeb0b95f
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=JyFZj4YdhanGyqD0; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Fri, 09 May 2025 11:52:32 GMT
content-type: image/svg+xml
last-modified: Fri, 11 Apr 2025 19:46:05 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cache-type: Dynamic
etag: "67f9717d-25d"
age: 165157
content-length: 300
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/js/xf/form.min.js?_v=dc874496_mt=undefined

186.2.163.153

200 OK

31 kB

URL GET
simpcity.su/js/xf/form.min.js?_v=dc874496_mt=undefined
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
Algol 68 source, ASCII text, with very long lines (552)
Size
31 kB (30918 bytes)
Hash
268d24f506fd40d36ce2c86601638e9e
ea654041ea28a394195bd8b38dc6f2a1827af9b8
a6e1f2a669bf6f12b5b754ad2814b9d449328ef7bbef4bec39838ac847148d3e

HTTP Headers

GET /js/xf/form.min.js?_v=dc874496_mt=undefined HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=z2VhVuRJ9VrlomnH; __ddg10_=1746956710; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=mnXU8Etrc9wIPooS; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:10 GMT
__ddg10_=1746956710; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:10 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:10 GMT
content-security-policy: upgrade-insecure-requests;
date: Thu, 01 May 2025 18:39:25 GMT
content-type: application/javascript
last-modified: Fri, 11 Apr 2025 19:39:42 GMT
vary: Accept-Encoding
etag: W/"67f96ffe-78c6"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: MISS
age: 831945
content-length: 9112
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/js/xf/webauthn.min.js?_v=dc874496

186.2.163.153

200 OK

5.3 kB

URL GET
simpcity.su/js/xf/webauthn.min.js?_v=dc874496
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
JavaScript source, ASCII text, with very long lines (535)
Size
5.3 kB (5336 bytes)
Hash
eceb1265ace3ee069f75c84e12e0f0cc
f5b978eef615e5f50d38c096dabe39abdb94cf6d
d6a4f8f9c670fe24e83f49f805487eaacd43a26e81158c233dbd8a7da3d56275

HTTP Headers

GET /js/xf/webauthn.min.js?_v=dc874496 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=j9gdyUTx7kN0Aimj; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=3QEpxY0W5u89AnoM; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Thu, 08 May 2025 18:36:53 GMT
content-type: application/javascript
last-modified: Fri, 11 Apr 2025 19:39:42 GMT
vary: Accept-Encoding
etag: W/"67f96ffe-14d8"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: MISS
age: 227296
content-length: 1644
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/data/local/icons/brands.svg?v=1746891693

186.2.163.153

200 OK

7.9 kB

URL GET
simpcity.su/data/local/icons/brands.svg?v=1746891693
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
SVG Scalable Vector Graphics image
Size
7.9 kB (7947 bytes)
Hash
ddcd26ef816a6fea16293863c94d6181
e6439dfb05f9279d42394314a33bca58eaad346e
90c77c3274bee07060a7f2fce57547359a4d834cd0803b465f44ac673b5357f5

HTTP Headers

GET /data/local/icons/brands.svg?v=1746891693 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=luzVAEj0LBYtzeKD; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Sun, 11 May 2025 09:35:13 GMT
content-type: image/svg+xml
last-modified: Sat, 10 May 2025 15:04:44 GMT
vary: Accept-Encoding
etag: W/"681f6b0c-1f0b"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cache-type: Dynamic
age: 596
content-length: 3615
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/styles/fa/regular/eye-slash.svg?v=5.15.3

186.2.163.153

200 OK

1.0 kB

URL GET
simpcity.su/styles/fa/regular/eye-slash.svg?v=5.15.3
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
SVG Scalable Vector Graphics image
Size
1.0 kB (1001 bytes)
Hash
9136adac45ec602544ba88d8268c64ad
8ea539d8aaf9487a13e35c4ba1675c1af1e0f1a9
c19b51dee3458b2da62d2b7b110dfa52ef6a5d0e44ae5e1422093debc2efa5e1

HTTP Headers

GET /styles/fa/regular/eye-slash.svg?v=5.15.3 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Avariations.less%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=1&l=1&d=1746891286&k=5727eb3062d50de713763fa282a3babace673481
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=0KOkLj1qkJeNKU4g; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Fri, 09 May 2025 05:05:36 GMT
content-type: image/svg+xml
last-modified: Fri, 11 Apr 2025 19:45:41 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cache-type: Dynamic
etag: "67f97165-3e9"
age: 189573
content-length: 548
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/styles/fa/regular/check-square.svg?v=5.15.3

186.2.163.153

200 OK

637 B

URL GET
simpcity.su/styles/fa/regular/check-square.svg?v=5.15.3
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
SVG Scalable Vector Graphics image
Size
637 B (637 bytes)
Hash
ae28c16cb766d3a63c61adc06b6229e4
c94f7f6924155bb7e906144f5a51baa322ff3968
ecb8233e112e726b847dbdc2a483740dc0775938ccb7099c9fd890385ee8de9f

HTTP Headers

GET /styles/fa/regular/check-square.svg?v=5.15.3 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Avariations.less%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=1&l=1&d=1746891286&k=5727eb3062d50de713763fa282a3babace673481
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=9h1UrmRcyLnrPtJI; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Sat, 10 May 2025 05:19:11 GMT
content-type: image/svg+xml
last-modified: Fri, 11 Apr 2025 19:45:34 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cache-type: Dynamic
etag: "67f9715e-27d"
age: 102358
content-length: 372
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849

186.2.163.153

403 Forbidden

32 kB

URL User Request GET
simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1062)
Size
32 kB (32387 bytes)
Hash
a8cf292a825317319bad5e83f950e07d
40f9d956ff8ee2f05f1c30d1a806516a930e6f7c
d3d3834d6a4fe7c68e2a5caa075fea2bf36e98d275d9fd7eb301a666cc1cc602

Detections

NIDS	Severity	Alert
suricata	medium	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related

HTTP Headers

GET /threads/hellomoonli-hellolimoon-elo.268259/post-15336849 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
server: ddos-guard
set-cookie: __ddg8_=SC7HT5tJPRDnu5xg; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:08 GMT
__ddg10_=1746956708; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:08 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:08 GMT
__ddg1_=C2pv3p0DDMZdHj55dgcu; Domain=.simpcity.su; HttpOnly; Path=/; Expires=Mon, 11-May-2026 09:45:08 GMT
cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; Path=/
cucksed=b1; Path=/
ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ; path=/; secure
content-security-policy: upgrade-insecure-requests;
date: Sun, 11 May 2025 09:45:08 GMT
content-type: text/html; charset=utf-8
content-length: 11018
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sun, 11 May 2025 09:44:53 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: private, no-cache, max-age=0
content-encoding: gzip
vary: Accept-Encoding
referrer-policy: strict-origin-when-cross-origin
x-cache-type: Dynamic
X-Firefox-Spdy: h2

simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849

186.2.163.153

301 Moved Permanently

32 kB

URL User Request GET
simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
IP
186.2.163.153:80
ASN
#59692 IQWeb FZ-LLC

File type

Size
32 kB (32387 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

NIDS	Severity	Alert
suricata	medium	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related

HTTP Headers

GET /threads/hellomoonli-hellolimoon-elo.268259/post-15336849 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=SC7HT5tJPRDnu5xg; __ddg10_=1746956708; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: ddos-guard
Date: Sun, 11 May 2025 09:45:09 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: __ddg8_=Y6mQGruMDOqWarkL; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
Location: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Content-Type: text/html; charset=utf-8
Content-Length: 568

simpcity.su/styles/fa/regular/comments.svg?v=5.15.3

186.2.163.153

200 OK

1.1 kB

URL GET
simpcity.su/styles/fa/regular/comments.svg?v=5.15.3
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
SVG Scalable Vector Graphics image
Size
1.1 kB (1108 bytes)
Hash
915eceb4a9ce403e3544a202aa059443
e580943382be9e5aabcacaa6076927ab8bdcc189
ddef7b5ed29fffd2018c99e010f8f6831a91c8b6aec8c19c8132ac5e08d2e6d0

HTTP Headers

GET /styles/fa/regular/comments.svg?v=5.15.3 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/css.php?css=public%3Anotices.less%2Cpublic%3Aextra.less&s=1&l=1&d=1746891286&k=102e8fc666cd39452d8ad01a258b38ddbeb0b95f
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=KuNtXgEtSTje5ZYy; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Sat, 10 May 2025 05:52:41 GMT
content-type: image/svg+xml
last-modified: Fri, 11 Apr 2025 19:45:37 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cache-type: Dynamic
etag: "67f97161-454"
age: 100348
content-length: 635
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/styles/fa/regular/eye.svg?v=5.15.3

186.2.163.153

200 OK

646 B

URL GET
simpcity.su/styles/fa/regular/eye.svg?v=5.15.3
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
SVG Scalable Vector Graphics image
Size
646 B (646 bytes)
Hash
2850f259c2794d154875d5c0a2d7e0c4
405bfc60243ea9e2ec56af9eac928231f8ab79b2
42da725ca1e29f3e48f3ccebe41947695a3bcdf419dc249e371a2e5827780890

HTTP Headers

GET /styles/fa/regular/eye.svg?v=5.15.3 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Avariations.less%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=1&l=1&d=1746891286&k=5727eb3062d50de713763fa282a3babace673481
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=4ZwjtVxpraBAn6pF; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Fri, 09 May 2025 05:05:36 GMT
content-type: image/svg+xml
last-modified: Fri, 11 Apr 2025 19:45:41 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cache-type: Dynamic
etag: "67f97165-286"
age: 189573
content-length: 386
ddg-cache-status: HIT
X-Firefox-Spdy: h2

cdn.7tv.app/emote/01F6ME9FRG0005TFYTWP1H8R42/4x.avif

37.27.171.106

200 OK

214 kB

URL GET
cdn.7tv.app/emote/01F6ME9FRG0005TFYTWP1H8R42/4x.avif
IP
37.27.171.106:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subject*.eu.cdn.7tv.app
Fingerprint99:AD:66:7A:19:8B:CC:89:48:C2:F2:5F:99:56:7E:C9:C6:4D:52:1E
ValidityFri, 11 Apr 2025 11:39:14 GMT - Thu, 10 Jul 2025 11:39:13 GMT

File type
ISO Media, AVIF Image Sequence
Size
214 kB (214455 bytes)
Hash
a972b1778ec051cf26e4385bd3c303e0
90db276ca3ceed286185f4fda5d92dc99f76a199
745bad1f4d03f34aea410c3fbadfcd79aa7329388fcc55cc19bb7aa49d282cb0

HTTP Headers

GET /emote/01F6ME9FRG0005TFYTWP1H8R42/4x.avif HTTP/1.1
Host: cdn.7tv.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/avif
content-length: 214455
x-7tv-cache-hits: 7093553
x-7tv-cache: hit
age: 766305
cache-control: public, max-age=1814400, s-maxage=86400, immutable
alt-svc: h3=":443"; ma=2592000
x-7tv-cdn-pod: cdn-xbbjm
x-7tv-cdn-node: cdn-9
server: SevenTV
vary: origin, access-control-request-method, access-control-request-headers
access-control-allow-origin: *
access-control-expose-headers: *
date: Sun, 11 May 2025 09:45:09 GMT
X-Firefox-Spdy: h2

simpcity.su/custom/cam23.png

186.2.163.153

200 OK

2.2 kB

URL GET
simpcity.su/custom/cam23.png
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
2.2 kB (2225 bytes)
Hash
09befd17f2d3085f7087a8324a26098d
11148b520201ac8a17ca22d604849f7e099cfee6
e6126d81ba72a26348ef613f067eaf27556390d121eb528925ab58c1f7ca7d59

HTTP Headers

GET /custom/cam23.png HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/css.php?css=public%3Anotices.less%2Cpublic%3Aextra.less&s=1&l=1&d=1746891286&k=102e8fc666cd39452d8ad01a258b38ddbeb0b95f
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=XhjGjb2TJPW6Y0M7; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 19 Nov 2024 22:06:55 GMT
content-type: image/png
content-length: 2225
last-modified: Thu, 01 Aug 2024 15:26:12 GMT
etag: "66aba914-8b1"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: HIT
accept-ranges: bytes
age: 14902694
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/styles/fa/solid/caret-down.svg?v=5.15.3

186.2.163.153

200 OK

336 B

URL GET
simpcity.su/styles/fa/solid/caret-down.svg?v=5.15.3
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
SVG Scalable Vector Graphics image
Size
336 B (336 bytes)
Hash
8e371739ead5be10038e8e68dfd7ee71
e8c76453a3657b9a5e03b08f7664927e6e564ae4
c646a34e33db483f472aaa93b45a1c8a572233816bedabd17b01dc94b48ec457

HTTP Headers

GET /styles/fa/solid/caret-down.svg?v=5.15.3 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Avariations.less%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=1&l=1&d=1746891286&k=5727eb3062d50de713763fa282a3babace673481
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=hhrbJPDrdsQKbXjD; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Fri, 09 May 2025 06:16:09 GMT
content-type: image/svg+xml
last-modified: Fri, 11 Apr 2025 19:46:17 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cache-type: Dynamic
etag: "67f97189-150"
age: 185340
content-length: 244
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/styles/fa/brands/passkey.svg?v=5.15.3

186.2.163.153

200 OK

361 B

URL GET
simpcity.su/styles/fa/brands/passkey.svg?v=5.15.3
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
SVG Scalable Vector Graphics image
Size
361 B (361 bytes)
Hash
657927454e334d65ab42153484edf309
0d6290ec435acddcf2aba27b2c8f7625fe6adfd2
ab64eeb96645edb7285bc8b2d3a377a48706dfaebf7eb1d8c348f0e8161ae610

HTTP Headers

GET /styles/fa/brands/passkey.svg?v=5.15.3 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Avariations.less%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=1&l=1&d=1746891286&k=5727eb3062d50de713763fa282a3babace673481
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=J2DDgaJ5dBuFFrLx; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Fri, 09 May 2025 05:09:14 GMT
content-type: image/svg+xml
last-modified: Fri, 11 Apr 2025 19:43:49 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cache-type: Dynamic
etag: "67f970f5-169"
age: 189355
content-length: 241
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/data/assets/logo/favicon.png

186.2.163.153

200 OK

2.8 kB

URL GET
simpcity.su/data/assets/logo/favicon.png
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
PNG image data, 50 x 62, 8-bit/color RGBA, non-interlaced
Size
2.8 kB (2813 bytes)
Hash
a261b80d414f67cb5dafc4e0746f5996
52ced3cfe296b209a834860e0de2f74d8b70b894
1c9bf743b9122faac5af33a9f86b46d24258bde0a79db3d1eacff4386521c808

HTTP Headers

GET /data/assets/logo/favicon.png HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=J2DDgaJ5dBuFFrLx; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=yg1kHkxeehdUFAJ6; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:10 GMT
__ddg10_=1746956710; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:10 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:10 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 25 Mar 2025 09:45:39 GMT
content-type: image/png
content-length: 2813
last-modified: Tue, 19 Nov 2024 18:42:43 GMT
etag: "673cdc23-afd"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: MISS
accept-ranges: bytes
age: 4060771
ddg-cache-status: HIT
X-Firefox-Spdy: h2

jpg5.su/sdk/pup-sc.js?7

190.115.31.64

200 OK

24 kB

URL GET
jpg5.su/sdk/pup-sc.js?7
IP
190.115.31.64:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectjpg5.su
FingerprintE9:3D:D1:9B:2D:86:13:B7:07:40:B4:98:DB:66:34:E0:A3:0E:BE:72
ValidityTue, 29 Apr 2025 10:44:18 GMT - Mon, 28 Jul 2025 10:44:17 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (24191), with no line terminators
Size
24 kB (24277 bytes)
Hash
902e1763f206c7e9e5045f95cdc1b46b
5e026ee5c4cbca0b3e1d1f4bd49c3934396f4d33
e4f260d7a3ebab839380dec73bc6e74065722d2ca2d174e709c497dd9f28f022

HTTP Headers

GET /sdk/pup-sc.js?7 HTTP/1.1
Host: jpg5.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=7MJYBsnzZb8M07JO; Domain=.jpg5.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.jpg5.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.jpg5.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg1_=F04nV21CkuuvG2v4li0H; Domain=.jpg5.su; HttpOnly; Path=/; Expires=Mon, 11-May-2026 09:45:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 05 May 2025 10:54:56 GMT
content-type: application/javascript; charset=utf-8
content-length: 24277
last-modified: Tue, 16 Jul 2024 12:10:55 GMT
vary: Accept-Encoding
x-powered-by: nginx
access-control-allow-origin: *
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ddg-cache-status: HIT,HIT
etag: "6696634f-5ed5"
age: 514213
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Material+Icons|Material+Icons+Outlined|Material+Icons+Two+Tone|Material+Icons+Round|Material+Icons+Sharp

142.250.178.42

200 OK

3.0 kB

URL GET
fonts.googleapis.com/css?family=Material+Icons|Material+Icons+Outlined|Material+Icons+Two+Tone|Material+Icons+Round|Material+Icons+Sharp
IP
142.250.178.42:443
ASN
#15169 GOOGLE

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint7A:29:E6:A8:BE:59:2C:AE:82:2D:CA:8E:15:89:41:BE:EC:D2:0D:EA
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT

File type
ASCII text
Size
3.0 kB (3038 bytes)
Hash
afd2e53f822fb6ba1152d7ad3d4f1f8a
586bf9084526d39d6943caaef01f042b63aba26a
445a019c703fdfba8b7e23b2e707583742f311cdaf8dc81d82827e5e8a31065f

HTTP Headers

GET /css?family=Material+Icons|Material+Icons+Outlined|Material+Icons+Two+Tone|Material+Icons+Round|Material+Icons+Sharp HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 11 May 2025 09:45:09 GMT
date: Sun, 11 May 2025 09:45:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

simpcity.su/js/xf/core-compiled.js?_v=dc874496

186.2.163.153

200 OK

176 kB

URL GET
simpcity.su/js/xf/core-compiled.js?_v=dc874496
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
JavaScript source, ASCII text, with very long lines (591)
Size
176 kB (176369 bytes)
Hash
936d69c857bf741dbd1d702df323fba5
9255e072115f04ef4cb390dad9cf03e0adceeaca
2d9890cc3a597a292386bec00f54601bdfabda703b4396d96c6a738fe7580957

HTTP Headers

GET /js/xf/core-compiled.js?_v=dc874496 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=j9gdyUTx7kN0Aimj; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=RlZ4vOQyzY6iWoxB; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Thu, 08 May 2025 16:41:46 GMT
content-type: application/javascript
last-modified: Fri, 11 Apr 2025 19:39:42 GMT
vary: Accept-Encoding
etag: W/"67f96ffe-2b0f1"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: MISS
age: 234203
content-length: 53703
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/custom/fire-24.png

186.2.163.153

200 OK

2.8 kB

URL GET
simpcity.su/custom/fire-24.png
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Size
2.8 kB (2808 bytes)
Hash
9e3463d85a9c1a47103d9df79e9f6d1a
29795a5c4aa995070eae8cb2ed02a450bd4e7957
6b824ee2ad293138773bf8ff984a4eb5236b1bfca11f4e8e5b26febc89be53b1

HTTP Headers

GET /custom/fire-24.png HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/css.php?css=public%3Anotices.less%2Cpublic%3Aextra.less&s=1&l=1&d=1746891286&k=102e8fc666cd39452d8ad01a258b38ddbeb0b95f
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=qWP6bpNUXW8yAIWY; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 19 Nov 2024 22:06:55 GMT
content-type: image/png
content-length: 2808
last-modified: Fri, 25 Oct 2024 12:26:56 GMT
etag: "671b8e90-af8"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: MISS
accept-ranges: bytes
age: 14902694
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/data/local/icons/regular.svg?v=1746891693

186.2.163.153

200 OK

127 kB

URL GET
simpcity.su/data/local/icons/regular.svg?v=1746891693
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
SVG Scalable Vector Graphics image
Size
127 kB (126919 bytes)
Hash
55d75143c8e83a1835c5cc6790db4afc
acf7e7937ceff2f6db39be6ed90d16ab8deae34b
6a29df3db414073148cbf765740fbe7fd7ae4e5dd1defa8b6bfbd35a9464867d

HTTP Headers

GET /data/local/icons/regular.svg?v=1746891693 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=vGqbPOVDOsRo2nu2; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Sun, 11 May 2025 05:10:34 GMT
content-type: image/svg+xml
last-modified: Fri, 18 Apr 2025 22:35:50 GMT
vary: Accept-Encoding
etag: W/"6802d3c6-1efc7"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cache-type: Dynamic
age: 16475
content-length: 42045
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/data/local/icons/solid.svg?v=1746891693

186.2.163.153

200 OK

1.4 kB

URL GET
simpcity.su/data/local/icons/solid.svg?v=1746891693
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
SVG Scalable Vector Graphics image
Size
1.4 kB (1437 bytes)
Hash
1f67f83e3c9347c68fe01b94ac710d30
0bf775831776f3b3e1de5f3758861947c19a85f9
8c6a2cd92b352845011f45b5b99b432c9bce570797eb11a39bd50a287498fa95

HTTP Headers

GET /data/local/icons/solid.svg?v=1746891693 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=n8txvl2IMzUD8VIq; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Sat, 10 May 2025 20:13:57 GMT
content-type: image/svg+xml
last-modified: Fri, 18 Apr 2025 22:35:50 GMT
vary: Accept-Encoding
etag: W/"6802d3c6-59d"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cache-type: Dynamic
age: 48672
content-length: 688
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/custom/tpd-b-24px.png

186.2.163.153

200 OK

2.4 kB

URL GET
simpcity.su/custom/tpd-b-24px.png
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Size
2.4 kB (2363 bytes)
Hash
abbfc76d055cdcc328045f3aa74e8a6e
6fc57c476e8b524aa244a57cfdea32b45401b43a
da12d3951fbbeaae494541313ccf71787d64d36656f39b80d7d85573494f565c

HTTP Headers

GET /custom/tpd-b-24px.png HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/css.php?css=public%3Anotices.less%2Cpublic%3Aextra.less&s=1&l=1&d=1746891286&k=102e8fc666cd39452d8ad01a258b38ddbeb0b95f
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=x7JWAsy206GT1cSA; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 19 Nov 2024 22:06:55 GMT
content-type: image/png
content-length: 2363
last-modified: Mon, 08 Jul 2024 04:21:23 GMT
etag: "668b6943-93b"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: MISS
accept-ranges: bytes
age: 14902694
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/styles/fa/regular/square.svg?v=5.15.3

186.2.163.153

200 OK

409 B

URL GET
simpcity.su/styles/fa/regular/square.svg?v=5.15.3
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
SVG Scalable Vector Graphics image
Size
409 B (409 bytes)
Hash
0b76b44c705658990b487ef63ebb7c68
2ba3df432ae3467caa1c573fed57a93223997d36
f2fc134718bf061566e6364315715d55d7337f7e94eb91fc9e99fb48c15d7926

HTTP Headers

GET /styles/fa/regular/square.svg?v=5.15.3 HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Avariations.less%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=1&l=1&d=1746891286&k=5727eb3062d50de713763fa282a3babace673481
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=3QEpxY0W5u89AnoM; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=q6l1Z6kXP4gMYgMd; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg10_=1746956709; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:09 GMT
content-security-policy: upgrade-insecure-requests;
date: Fri, 09 May 2025 16:58:44 GMT
content-type: image/svg+xml
last-modified: Fri, 11 Apr 2025 19:46:02 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cache-type: Dynamic
etag: "67f9717a-199"
age: 146785
content-length: 277
ddg-cache-status: HIT
X-Firefox-Spdy: h2

simpcity.su/data/assets/logo/favicon.png

186.2.163.153

200 OK

2.8 kB

URL GET
simpcity.su/data/assets/logo/favicon.png
IP
186.2.163.153:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
Certificate
IssuerLet's Encrypt
Subjectsimpcity.su
Fingerprint42:DB:FD:B9:C1:90:C9:41:A7:D6:F9:05:66:F1:0C:10:AF:8F:59:0E
ValidityTue, 29 Apr 2025 13:21:41 GMT - Mon, 28 Jul 2025 13:21:40 GMT

File type
PNG image data, 50 x 62, 8-bit/color RGBA, non-interlaced
Size
2.8 kB (2813 bytes)
Hash
a261b80d414f67cb5dafc4e0746f5996
52ced3cfe296b209a834860e0de2f74d8b70b894
1c9bf743b9122faac5af33a9f86b46d24258bde0a79db3d1eacff4386521c808

HTTP Headers

GET /data/assets/logo/favicon.png HTTP/1.1
Host: simpcity.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://simpcity.su/threads/hellomoonli-hellolimoon-elo.268259/post-15336849
DNT: 1
Connection: keep-alive
Cookie: __ddg8_=J2DDgaJ5dBuFFrLx; __ddg10_=1746956709; __ddg9_=91.90.42.154; __ddg1_=C2pv3p0DDMZdHj55dgcu; cucksid=2407b9ff0d734268c605a6875c39b11dbb234ca96f1dccfc716bd8d0d112aa38; cucksed=b1; ogaddgmetaprof_csrf=Brq-oVOez8MCvTVQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=z2VhVuRJ9VrlomnH; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:10 GMT
__ddg10_=1746956710; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:10 GMT
__ddg9_=91.90.42.154; Domain=.simpcity.su; Path=/; Expires=Sun, 11-May-2025 10:05:10 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 25 Mar 2025 09:45:39 GMT
content-type: image/png
content-length: 2813
last-modified: Tue, 19 Nov 2024 18:42:43 GMT
etag: "673cdc23-afd"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: MISS
accept-ranges: bytes
age: 4060771
ddg-cache-status: HIT
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (34)

URL GET

IP

ASN

Requested by