Anti Exploit Advice For Projectiles

I’m trying to make a projectile script that is client sided, meaning that the hit box detection is on the client. In order to do sanity checks I was thinking of this idea. Since my projectiles will be moving via tweening and I know where the projectiles are gonna exactly end up. So my plan was to create a variable that keeps track of the time the projectile was first launched. Then when the fire ball hits somebody I know the time it hit that person and I can use lerp and using the location of the origin and the location of where the projectile would end if nothing collided with it and the time it was hit divided by the time the maximum time the projectile would go for and theoretically I will know where the projectile was suppose to be. If the the location of the client telling the server is no where close to to my predicted location, this is obviously an exploiter. The client can tell the server the correct location of where the projectile is suppose to be and name any player and say they hit them, but now I need to check if the player they said they hit is in the area of said hit location. My question is should I use region 3 at that location to confirm if the player is there or should I use magnitude and see if the location of the approximated hit location and the player are relatively close.