entertainment media

adult content

corporate

English

_dd_s

_ga_EKN0VKJGMQ

euconsent

consent

cookieconsent_status

skip-shadow-reg

nyt-gdpr

iter_id

gdpr_consent

ath_anonymous_user_id

ath_content_edition

checkout_entry_point

nyt-purr

nyt-a

_gcl_au

html/e4/c9/e4c9876e-99b8-4bc3-971d-2b566a503d9f.html.gz

upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https: nytresource:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: nytresource:; style-src data: 'unsafe-inline' https: nytresource:; img-src data: https: blob: android-webview-video-poster: nytresource:; font-src data: https: nytresource:; connect-src data: https: wss: blob: nytresource:; media-src data: https: blob: nytresource:; object-src https:; child-src https: data: blob: nytresource:; form-action https:; report-uri https://csp.nytimes.com/report;

appId=cid-v1:5c986aee-9723-4541-b38e-d4ac73c46937

3a402ccb19ac8888b526abdf6d8e503cf4eae7a1e8c800994e3d475d91e5bfe8

783de3719a543cfa3dbe87b73de4e9643d2b0eea3d4b0e3f0e208cb3a483f306

da3e3e7f2f58acb478dda63c39a29363e31c000c3c369c9115bd1e86a791d7b9

7b21bbb8ef971401ae80a3877b20405f18623e70111a65f0503458ea623255ce

9b1c68218c55b0ea3780899550196ab68e7d9de1025a2a6c12c19dd0695302fe

268baca2c7ab8fe3024271290e09d664d5125acb938a9439b5c15bfcf516d9bd

e43de60b1cb9e3fb55529dc2d5e2cbcbf2092f789d0447fbf1dda044134bd755

969f842a2837204315d009304215c7222326c46925c16ffd2b001f22964140c0

361e56042368c0c493779489875eb279f519a1aa45cdd80202121d48770bce60

f4a05984c9c886bea2e95b67ffe9bbb012e65a19d27eab82f816147d866cdb51

eba63417e8efedf46c459747faae43da867aa1146501d78be9669a2ab36582c9

e8ea75de168db5579778228e5b88ab973f799d5b9cac44c484e222db118f0438

d787bd17081e98a6bc09ea6bbed04a4cd9ae1897a0d9130123d3c34f3216da79

a33e375e188a518d7b51f2cd19de1138f1243b831af5e073cdcaa70bc08b27d0

505dc1370a1b45398b4b66b84cc70fac4202ee80116105cc46c260f04fa26a87

3d6f9faceb189707e3888772b4b64489cf55a54ac1d7d3e3b9241f85c4070971

a14325a1ff27381abf62f52e822802fb2d9bb1da3ec105b5ba89665ceda59ed0

1ebe57a8847053ef3d5a5efee8af3d8f466950092ad31dda3ef42b4701d64400

c1f8285080c5569fb00e83c7fa6bdc079d16912ff236d86d748d8cbd8f5ef805

0cd24d78fab8ae6b15883b89d0101bb325db49e04425365660b6a56a86b64e29

5f91fbb5807ac5f23b7608cad9496fbe4dbbf2e7198b8c5cb496db54ce9dbcfe

fd10448fbd4bd61bd7c28d553972d3a2f66197143c3d0d724b84a68ea9d2fad7

1db38ee47152c33132b2ad2a0d3855ffa720ee098ee813ce3a92515bb4af300b

f723bbb819578edd37a817b688f48f23f3ab67c36ccbdbef2c7bf2c6f2b191f6

0b882e88ca7585bbdc5f3ab8eab43f0d8168688891c5b0e401c995923f74d3d2

1d4d83695dd4ed9bfab1765b956126bea49033e2e73027322183309ce73d1be9

02819df40d3a39d005baeb9ecd1fa38cfa43d42df3a951eb4981f654578be7c5

cf1245f3ff4129578e9aa416b1d601836a6900804ce579aa15c08e4a7229b3a4

ff3bd2ffb5c391488cf48db3722b6fc0ba25a35ae256c6a57cc40ca0700f222d

fa0629c3ba7598efc1158acd940af35473ef97a285751e1712a635bfe906ed3e

05959d154111e242521d5e8d499e5554706e87c6a7b13d05cf54d6ab5baa4a1a

81de3d9377815ccbe1ce0c4616734838cbd5c647f7bd9003f2f26b81445c4651

fb9ec601fb2a6c2eeb9e0356c3ebba8af1e72e9201f57e2cc6484b2d6bacc10b

71d3702c5247f2dccd0dbcdbec73c06011d182d98eb8bb2287a8876d5d64be8a

5bbe462a14b9db602db6cf81f8e946e1057622cb350135ef11b910b4467b2456

ff324391dadd9368323fc2bbd7d5e235bd12f864f35e0310f586538ca119d4ab

3a04fc008338e4ee4cd3f9ece3795ab80bf9f9112714a30cc045336ad569f3a7

1ff8847a664c067fb8853e449c4575982b998debf7ad63de73b565f099c742dd

96af6b4fb63c1875f7f423727333330ed1b0728959dcf9e950d9177300e8ec9a

66bc5c71dd856cc6b3d550327276d7e9f9346e8810bf5f8c3793084af0bbb7a2

https://www.nytimes.com/athletic/static/img/athletic-icon-192x192.png

msapplication-TileImage

viewport

twitter:card

https://www.nytimes.com/athletic/football/game/bayer-leverkusen-vs-union-berlin/d3owSDeprehst9uN/

nyt_uri

twitter:site

twitter:creator

Bayer Leverkusen vs Union Berlin Box Score - October 04, 2025 - The Athletic

twitter:title

Get real-time Bundesliga coverage and scores as Bayer Leverkusen take on Union Berlin at 2:30pm GMT+1 on October 04, 2025. The Athletic brings you the latest stats, scores, and analysis of your favorite teams.

twitter:description

description

author

next-head-count

AlK2UR5SkAlj8jjdEc9p3F3xuFYlF6LYjAML3EOqw1g26eCwWPjdmecULvBH5MVPoqKYrOfPhYVL71xAXI1IBQoAAAB8eyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiV2ViVmlld1hSZXF1ZXN0ZWRXaXRoRGVwcmVjYXRpb24iLCJleHBpcnkiOjE3NTgwNjcxOTksImlzU3ViZG9tYWluIjp0cnVlfQ==

Amm8/NmvvQfhwCib6I7ZsmUxiSCfOxWxHayJwyU1r3gRIItzr7bNQid6O8ZYaE1GSQTa69WwhPC9flq/oYkRBwsAAACCeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXN5bmRpY2F0aW9uLmNvbTo0NDMiLCJmZWF0dXJlIjoiV2ViVmlld1hSZXF1ZXN0ZWRXaXRoRGVwcmVjYXRpb24iLCJleHBpcnkiOjE3NTgwNjcxOTksImlzU3ViZG9tYWluIjp0cnVlfQ==

A9nrunKdU5m96PSN1XsSGr3qOP0lvPFUB2AiAylCDlN5DTl17uDFkpQuHj1AFtgWLxpLaiBZuhrtb2WOu7ofHwEAAACKeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

A93bovR+QVXNx2/38qDbmeYYf1wdte9EO37K9eMq3r+541qo0byhYU899BhPB7Cv9QqD7wIbR1B6OAc9kEfYCA4AAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXN5bmRpY2F0aW9uLmNvbTo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

A1S5fojrAunSDrFbD8OfGmFHdRFZymSM/1ss3G+NEttCLfHkXvlcF6LGLH8Mo5PakLO1sCASXU1/gQf6XGuTBgwAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXRhZ3NlcnZpY2VzLmNvbTo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

MarkMonitor Inc.

NYTIMES.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Data Services Northern Virginia

Amazon EC2 Network Operations

AMAZON-IAD


                
!function(a){var s,c,p,_,d,l,u=[],f={pv_id:"",ctx_id:"",intra:!1,force_xhr:!1,store_last_response:!1
},g="object"==typeof a.navigator&&"string"==typeof a.navigator.userAgent&&/iP(ad|

[{"@context":"http://www.schema.org","@type":"SportsEvent","competitor":[{"@type":"SportsTeam","name":"Union Berlin"},{"@type":"SportsTeam","name":"Leverkusen"}],"description":"Matchup between Union B


      (function(h,o,u,n,d) {
        h=h[d]=h[d]||{q:[],onReady:function(c){h.q.push(c)}}
        d=o.createElement(u);d.async=1;d.src=n
        n=o.getElementsByTagName(u)[0];n.parentNode.insertBefo

(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
            new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
            j=d.createElement(s),dl=l!='dataLayer'?'&l=

    window.dataLayer = window.dataLayer || [];
            function gtag() {dataLayer.push(arguments);}
            gtag('js', new Date());
            gtag('config', 'G-EKN0VKJGMQ');

{"props":{"initialI18nStore":{"en":{"translation":{"Comment_one":"Comment","Comment_other":"Comments","Full Groups":"Full Standings","Full Table":"Full Standings","Like_one":"Like","Like_other":"Likes

(function(){var d=window.nytAnalytics=window.nytAnalytics||{},h=function(a){return a<10?"0"+a:a},n="Sunday Monday Tuesday Wednesday Thursday Friday Saturday".split(" "),p="January February March April

(function(){var a=window._sf_async_config=window._sf_async_config||{};a.uid=66151;a.domain="theathletic.com";a.sections=(Array.isArray(window.sections)?window.sections.concat(window.page_type).join(",

var _comscore=_comscore||[];_comscore.push({c1:"2",c2:"36100123",options:{enableFirstPartyCookie:!0}});(function(){var a=document.createElement("script"),b=document.getElementsByTagName("script")[0];a

window.iterateSettings={apiKey:"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNTQ0MTI5MzQxfQ.UI13nEXGs0udbZxhjyFLruAEed42XwFO4fZlCqOgY1o"};
(func

var event=google_tag_manager["rm"]["181415655"](53);event.subject="ab_expose";event.gtm=google_tag_manager["rm"]["181415655"](54);(function(){nyt_et("soon",event)})();dataLayer.push({abtest:null});

Script

Open-Graph-Protocol

HSTS

Fastly

Envoy

Google Analytics

React

Iterate

Google Tag Manager

Google Publisher Tag

Chartbeat

Google

Comscore

Datadog Real User Monitoring and Application Performance Monitoring

Datadog

First-Party Tracking

⚠️ High Risk - https://www.nytimes.com/athletic/football/game/bayer-leverkusen-vs-union-berlin/d3owSDeprehst9uN/

Requests	IP Address	Location	AS Autonomous System
38	3.233.158.24	Ashburn, Virginia, United States	AS14618AMAZON-AES
2	18.244.18.27	United States	AS16509AMAZON-02
2	34.120.195.249	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
2	104.26.7.229	United States	AS13335CLOUDFLARENET
2	216.239.34.36	United States	AS15169GOOGLE
2	52.203.246.132	Ashburn, Virginia, United States	AS14618AMAZON-AES
2	104.26.1.90	United States	AS13335CLOUDFLARENET
2	172.64.147.18	United States	AS13335CLOUDFLARENET
2	142.251.168.157	United States	AS15169GOOGLE
2	104.18.40.238	United States	AS13335CLOUDFLARENET
194	79	-	-

Security Scan Report: www.nytimes.com

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History