# cheatfc27.com: PrivateCheatz page offering FC 27 cheat tools | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/cheatfc27.com/
Machine-readable companion: https://phishdestroy.io/domain/cheatfc27.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: Last known active
- First observed by PhishDestroy: 2026-11-09 12:53:07 UTC
- Selected availability observation: 2026-11-10T00:38:21Z
- Stored record updated: 2026-11-10 05:00:12 UTC
- VirusTotal detections in the stored snapshot: 2/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 188.114.96.3
- Registrar in stored WHOIS data: Cloudflare, Inc.
- Last stored HTTP status: 200 (observed: 2026-11-10T00:38:21Z)
- Registration date in stored WHOIS data: 2026-09-19 06:36:18 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1c05d-8497-7142-aeb4-0272abe9fccd/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/cheatfc27.com
- Certificate Transparency search: https://crt.sh/?q=%25.cheatfc27.com
- Web Archive lookup: https://web.archive.org/web/*/https://cheatfc27.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy records cheatfc27.com as a page branded PrivateCheatz promoting FC 27 cheat tools, features, and access options for PC players.

On 2026-11-09, cheatfc27.com displayed a landing page branded "PrivateCheatz" with a dark stadium background and a large "CHEAT FC 27" headline. The page describes cheat tools for PC, listing NoLoss, Division and Champions tools, match controls, player sliders, Virtual Pro editing, PlayStyles, and Pro Clubs customization, alongside an "ONLINE" status indicator. Navigation links include PRICING, FAQ, and DEEP READ, with a "GET ACCESS" button in the header.

The stored VirusTotal domain result reports 2 detections out of 92 engines. LevelBlue reported "phishing"; alphaMountain.ai reported "spam".
Package revision: 0cff69c85192de9a18ceaa86d23d6b110950a53f84c938c27c09a9c382fc7e93
Text generated (not scan time): 2026-11-09 14:28:52
Reviewed evidence snapshot: {"domain":"cheatfc27.com","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"cheatfc27.com","final_host":"cheatfc27.com","redirects":[],"captured_at":"2026-11-09T12:52:03.364000Z","uuid":"01a1c05d-8497-7142-aeb4-0272abe9fccd","report_url":"https://urlscan.io/result/01a1c05d-8497-7142-aeb4-0272abe9fccd/","sha256":"87dc94a167029c203488b7285fddb85e5a46fea2dfdcbfb7e7588066c41580a2","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","initial_ai_description":"The website offers 'cheats' and 'hacks' for a video game, which are typically unauthorized modifications that can lead to account compromise or other malicious activities. The site explicitly mentions 'EA SPORTS FC 27' and 'EA FC 27 Cheats & Hacks', impersonating the game and potentially the brand.","initial_ai_description_kind":"unverified previous AI opinion","virustotal":{"scope":"domain","detections":2,"engines":92,"malicious":1,"suspicious":1,"analysis_date":"2026-09-29","retrieved_date":"2026-11-09","vendor_labels":{"LevelBlue":"phishing","alphaMountain.ai":"spam"},"flagging_vendors":["LevelBlue","alphaMountain.ai"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 2 detections out of 92 engines. LevelBlue reported \"phishing\"; alphaMountain.ai reported \"spam\".","page_paragraph_target_characters":538}
Source facts (timestamps as stored): {"record_id":1878834,"first_recorded_at":"2026-11-09 13:53:07","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":2,"denominator":92,"malicious":1,"suspicious":1,"vendors":{"LevelBlue":"phishing","alphaMountain.ai":"spam"},"observed_at":"2026-09-29T06:34:33Z","checked_at":null,"fetched_at":"2026-11-09T13:26:08Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":2,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","LevelBlue"],"observed_at":"2026-09-29 06:34:33","checked_at":"2026-11-09 14:26:08","fetched_at":"2026-11-09 13:26:08","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"LevelBlue":"phishing","alphaMountain.ai":"spam"},"vendor_names":["LevelBlue","alphaMountain.ai"],"stats":{"timeout":0,"harmless":52,"malicious":1,"suspicious":1,"undetected":38}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-09 14:26:12"},"spamhaus":{"source":"Spamhaus","verdict":"DBL_SPAM","checked_at":"2026-11-09 16:30:52"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1878834,"scope":"checked_url","observed_at":"2026-11-10T00:38:21Z","http_status":200,"http_observed_at":"2026-11-10T00:38:21Z","stored_http_code":200,"stored_http_observed_at":"2026-11-10T00:38:21Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}}

## Stored page captures

- Stored capture: https://i.ibb.co/k22zJxxB/e5b592cc11a6.png
- URLScan · 2026-11-09: https://screenshots.phishdestroy.io/us/01a1c05d-8497-7142-aeb4-0272abe9fccd.png
  Captured: 2026-11-09 12:52:03 UTC
  Source report: https://urlscan.io/result/01a1c05d-8497-7142-aeb4-0272abe9fccd/
  SHA-256: 87dc94a167029c203488b7285fddb85e5a46fea2dfdcbfb7e7588066c41580a2
- URLScan · 2026-09-27: https://screenshots.phishdestroy.io/us/01a0e3fd-5d1c-7630-8342-4f761a9d4503.png
  Captured: 2026-09-27 17:50:39 UTC
  Source report: https://urlscan.io/result/01a0e3fd-5d1c-7630-8342-4f761a9d4503/
  SHA-256: 8ff6625510fb97778b068f83b214f93536f5701a2366dd3eb7f8c96bc02d33b8
- URLScan · 2026-11-09: https://screenshots.phishdestroy.io/us/01a1c062-19ed-7318-b485-8eb655ae9b51.png
  Captured: 2026-11-09 12:57:05 UTC
  Source report: https://urlscan.io/result/01a1c062-19ed-7318-b485-8eb655ae9b51/
  SHA-256: 9b4c6f62043b35bc68f7e75094de7a15ddbc9bbe22efd8cc187212afc0c546a2

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-11-09T12:53:25Z",
        "uuid": "01a1c05d-8497-7142-aeb4-0272abe9fccd",
        "scanned_at": "2026-11-09T12:52:03Z",
        "final_url": "https://cheatfc27.com/",
        "status": 200,
        "ip": "188.114.96.3",
        "domains": [
            "emd-engine.pages.dev"
        ],
        "ips": [
            "188.114.96.3"
        ],
        "asns": [
            "13335"
        ],
        "link_domains": [
            "discord.gg"
        ],
        "social": [
            "https://discord.gg/CcjUuNBtPQ"
        ],
        "doc_hash": "e97ab81925fb9d460434898d7ba2b37f078119f92db69c08cc34a9c444a8cbd1",
        "script_hashes": [
            "2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8"
        ],
        "cookies": [
            "hax_cur"
        ],
        "tls": {
            "san": [
                "cheatfc27.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "cheatfc27.com",
            "protocol": "QUIC",
            "valid_to": "2026-12-22T08:24:08Z",
            "valid_from": "2026-09-23T07:24:12Z"
        },
        "domain_age_days": 51,
        "apex_age_days": 51,
        "tls_age_days": 47,
        "tls_valid_days": 90,
        "requests": 24,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-2aab354"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin",
            "priority": "u=0,i"
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-11-09T13:26:08Z",
        "analysis_at": "2026-09-29T06:34:33Z",
        "stats": {
            "timeout": 0,
            "harmless": 52,
            "malicious": 1,
            "suspicious": 1,
            "undetected": 38
        },
        "detections": {
            "LevelBlue": "phishing",
            "alphaMountain.ai": "spam"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "categories": {
            "alphaMountain.ai": "Spam (alphaMountain.ai)"
        },
        "registrar": "Cloudflare, Inc.",
        "created": "2026-09-19T08:36:18Z",
        "expires": "2027-09-19T08:36:18Z",
        "updated": "2026-09-19T08:36:23Z",
        "first_seen": "2026-09-19T08:59:04Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "ishaan.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "v=spf1 a mx include:_spf.elasticemail.com ~all"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::6815:1670"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ishaan.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.22.112"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "v=spf1 include:_spf.mx.cloudflare.net ~all"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "route3.mx.cloudflare.net",
                "priority": 80
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "route2.mx.cloudflare.net",
                "priority": 94
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "route1.mx.cloudflare.net",
                "priority": 18
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "karsyn.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.204.141"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3030::ac43:cc8d"
            }
        ],
        "dns_at": "2026-09-29T06:34:46Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "cheatfc27.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "583bc545c713de700e8d359c12d50068",
            "sha256": "d722f6407a3f7f668093c5ac507696c5a48a3462f30048e421f8cb1d2b773891",
            "subject": "cheatfc27.com",
            "valid_to": "2026-12-22T08:24:08Z",
            "valid_from": "2026-09-23T07:24:12Z"
        },
        "whois": {
            "registrar": "Cloudflare, Inc.",
            "registrar_iana_id": "1910",
            "registrar_url": "http://www.cloudflare.com",
            "created": "2026-09-19T08:36:18Z",
            "updated": "2026-09-19T08:36:19Z",
            "expires": "2027-09-19T08:36:18Z",
            "status": [
                "addperiod",
                "clientTransferProhibited",
                "clienttransferprohibited"
            ],
            "nameservers": [
                "ishaan.ns.cloudflare.com",
                "karsyn.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-09-19T08:36:18Z",
                "last changed": "2026-09-25T08:37:06Z",
                "registration": "2026-09-19T08:36:18Z",
                "last update of RDAP database": "2026-09-25T08:37:06Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-11-09T13:28:19Z",
        "mail_config": {
            "mx": [
                "route1.mx.cloudflare.net",
                "route3.mx.cloudflare.net",
                "route2.mx.cloudflare.net"
            ],
            "spf": "v=spf1 a mx include:_spf.elasticemail.com ~all",
            "dane": true,
            "dmarc": true,
            "spf_lookups": 0
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-11-09T12:56:15Z",
            "first": "2026-11-09T12:56:15Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 29538
        },
        "robots_txt": {
            "agents": [
                "*",
                "GPTBot",
                "ClaudeBot",
                "anthropic-ai",
                "CCBot"
            ],
            "present": true,
            "llms_txt": true,
            "sitemaps": [
                "https://cheatfc27.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "security_txt": {
            "present": true,
            "found_in": "/.well-known/security.txt"
        },
        "social_tags": {
            "ogUrl": "https://cheatfc27.com/",
            "title": "Cheat FC 27 | EA FC 27 Cheats & Hacks for PC",
            "ogType": "website",
            "robots": "index, follow, max-image-preview:large",
            "ogImage": "https://cheatfc27.com/assets/og/chatgpt-image-sep-24--2026--10_51_25-am.png",
            "ogTitle": "Cheat FC 27 | EA FC 27 Cheats & Hacks for PC",
            "ogSiteName": "Cheat fc 27",
            "themeColor": "#0D0F13",
            "description": "Cheat FC 27 on PC with NoLoss, Division Spoofer, Champions tools, sliders, Pro Clubs editing, PlayStyles and more for EA SPORTS FC 27.",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://cheatfc27.com/",
            "ogDescription": "Cheat FC 27 on PC with NoLoss, Division Spoofer, Champions tools, sliders, Pro Clubs editing, PlayStyles and more for EA SPORTS FC 27."
        },
        "trackers": {
            "requests": 16,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 13
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 55,
                "tls": 65,
                "wait": 236,
                "connect": 20,
                "download": 61
            },
            "response_ms": 437
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 125716,
            "co2_grams": 0.0046,
            "cleaner_than": 17
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.195.213",
                    "host": "ishaan.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.38.194",
                    "host": "karsyn.ns.cloudflare.com"
                }
            ],
            "zone": "cheatfc27.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "hax_cur",
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "cheatfc27.com"
        },
        "dns": {
            "A": [
                "188.114.96.3",
                "188.114.97.3"
            ],
            "MX": [
                "{\"exchange\": \"route1.mx.cloudflare.net\", \"priority\": 18}",
                "{\"exchange\": \"route2.mx.cloudflare.net\", \"priority\": 94}",
                "{\"exchange\": \"route3.mx.cloudflare.net\", \"priority\": 80}"
            ],
            "NS": [
                "ishaan.ns.cloudflare.com",
                "karsyn.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"ishaan.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415815204, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "v=spf1 a mx include:_spf.elasticemail.com ~all",
                "v=spf1 include:_spf.mx.cloudflare.net ~all"
            ],
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://cheatfc27.com"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "mailer.cheatfc27.com"
            ]
        },
        "linked_pages": {
            "external": [
                "https://discord.gg/CcjUuNBtPQ"
            ],
            "external_count": 1,
            "internal_count": 18
        },
        "whois": {
            "registrar": "Cloudflare, Inc.",
            "created": "2026-09-19T08:36:18Z",
            "updated": "2026-09-19T08:36:19Z",
            "expires": "2027-09-19T08:36:18Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ishaan.ns.cloudflare.com",
                "karsyn.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin"
            }
        }
    }
}
```
Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/01a1c05d-8497-7142-aeb4-0272abe9fccd.png","source":"URLScan","report_url":"https://urlscan.io/result/01a1c05d-8497-7142-aeb4-0272abe9fccd/","captured_at":"2026-11-09T12:52:03Z","sha256":"87dc94a167029c203488b7285fddb85e5a46fea2dfdcbfb7e7588066c41580a2","model_image_sha256":"03f09ef151ef7a69de9b8e26590452b6bde02fa72b800981edc8e2dc1203d9d7","available":true,"content_status":null}

## Complete dated records
Availability observations: https://phishdestroy.io/domain/cheatfc27.com/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/cheatfc27.com/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/cheatfc27.com/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/cheatfc27.com/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/cheatfc27.com/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/cheatfc27.com/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/cheatfc27.com/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/cheatfc27.com/records.json?source=content&format=json

## Dated availability observation
Latest stored reachability observation
```json
{
    "state": "alive",
    "label_key": "availability.active",
    "detail_key": "detail.latest_reachability",
    "params": [],
    "source": "current_http_probe",
    "record_id": 1878834,
    "scope": "checked_url",
    "observed_at": "2026-11-10T00:38:21Z",
    "http_status": 200,
    "http_observed_at": "2026-11-10T00:38:21Z",
    "stored_http_code": 200,
    "stored_http_observed_at": "2026-11-10T00:38:21Z",
    "legacy_site_status": "alive",
    "supports_outcome_badge": false,
    "content_classification": "unknown",
    "content_classification_at": null,
    "registration_state": "unknown",
    "policy": "20261102-dated-availability-v2"
}
```