URLScan
Malicious · engine verdict · score 97
SHA-256 42d1948d8b6e5f90dfbd99b070364814a172dac9a5971886322b7909c341b6a2
URLScanOriginal source recordObserved: 21 fields
Observed: · Retrieved:
Report ID
01a1c05f-1572-752f-bc10-0bf19fc11e73Final URL
https://fc27cheat.net/HTTP response
200IP address
172.67.177.34Contacted domains
- emd-engine.pages.dev
- static.cloudflareinsights.com
Contacted IP addresses
- 104.16.79.73
- 172.66.47.6
- 172.67.177.34
Autonomous systems (ASN)
- 13335
Linked domains
- discord.gg
Social media links
- https://discord.gg/CcjUuNBtPQ
Document hash
2f96f69e3fa6a5b3211c3e678f80ff4b9cb69258ef8149f82565c24cec15a0b5Script hashes
- 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8
JavaScript globals
- __cfBeacon
Cookies
- hax_cur
TLS session and certificate
- Subject alternative names
- fc27cheat.net
- Cipher
- AES_128_GCM
- Issuer
- WE1
- Subject
- fc27cheat.net
- Protocol
- QUIC
- Valid until
- Valid from
Domain age, days
37Registered domain age, days
37Certificate age, days
37Certificate validity, days
90Page requests
27Provider verdicts
- Engine verdict
- Tags
- urlscan-ml
- urlscan-ml-2aab354
- Score
- 97
- Malicious
- Yes
- Overall verdict
- Score
- 0
- Malicious
- No
HTTP headers
- Server
- cloudflare
- Content-type
- text/html; charset=utf-8
- X-content-type-options
- nosniff
- Referrer-policy
- strict-origin-when-cross-origin
- Priority
- u=0,i
Original source fields · JSON
| Uuid | 01a1c05f-1572-752f-bc10-0bf19fc11e73 |
|---|---|
| Final url | https://fc27cheat.net/ |
| Status | 200 |
| Ip | 172.67.177.34 |
| Contacted domains | [
"emd-engine.pages.dev",
"static.cloudflareinsights.com"
] |
| Contacted IP addresses | [
"104.16.79.73",
"172.66.47.6",
"172.67.177.34"
] |
| Asns | [
"13335"
] |
| Linked domains | [
"discord.gg"
] |
| Social | [
"https://discord.gg/CcjUuNBtPQ"
] |
| Document hash | 2f96f69e3fa6a5b3211c3e678f80ff4b9cb69258ef8149f82565c24cec15a0b5 |
| Script hashes | [
"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8"
] |
| Globals | [
"__cfBeacon"
] |
| Cookies | [
"hax_cur"
] |
| Tls | {
"san": [
"fc27cheat.net"
],
"cipher": "AES_128_GCM",
"issuer": "WE1",
"subject": "fc27cheat.net",
"protocol": "QUIC",
"valid_to": "2026-12-31T15:24:48Z",
"valid_from": "2026-10-02T14:24:50Z"
} |
| Domain age days | 37 |
| Apex age days | 37 |
| Tls age days | 37 |
| Tls valid days | 90 |
| Requests | 27 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-2aab354"
],
"score": 97,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"server": "cloudflare",
"content-type": "text/html; charset=utf-8",
"x-content-type-options": "nosniff",
"referrer-policy": "strict-origin-when-cross-origin",
"priority": "u=0,i"
} |
Separate monitor record · 2026-11-10 04:30 UTC
Separate stored monitor snapshot; does not replace the primary report record or establish current availability.
- record_source
- domain_monitor.urlscan
- uuid
- 01a1c05f-1572-752f-bc10-0bf19fc11e73
- score
- 0
- malicious
- false
- result_at
- 2026-11-10T04:30:17Z
- enriched_at
- null
- source_timestamps
- {"urlscan_result_at":"2026-11-10 05:30:17","urlscan_enriched_at":null}
- timestamp_basis
- Europe/Berlin, as used by the existing report; source timestamps are retained verbatim