{"report_id":"9ec069d9-49d0-4435-b91d-d915f2a671cd","version":0,"status":"done","tags":[],"date":"2026-10-09T16:27:57Z","url":{"schema":"http","addr":"unisport-phantom.app/","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"unisport-phantom.app/","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"title":"Phantom – Avslør koden din | Unisport","dom":{"size":16788,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5329)","md5":"cf580e69b59cf4f7d89b5365ad65634b","sha1":"1b33d72573d84fe073ea8e742d5dd3d00aad67e9","sha256":"dd68721dce2d0939b3a94d37c64d4f904f3b50f7087e3c6b544182c64bf5d4eb","sha512":"ed192fcd66bac6aa3bc8483719541efee3ce6f89889512f6bb395241cdc9b17abacd5bfa5ed0e8ed28eeec5f87a811164d1b4e717bce4e1b51af6dbf549a9a2c","ssdeep":"384:uoaSiTHWplLYQh57Tpcjou00Q2NjaNmFtnc:plLYQh5Ppcjou00QkaNmFe","tlshash":"20721b92d318663f5323c2fcbed9b1c852ad90b7e5468de5f99e023512d6ed8e013e90","dom_hash":"domhashf491ceb9c221c270c804da643f3d6d3c","first_seen":"2026-10-09T16:28:17.603776Z","last_seen":"2026-10-09T16:28:17.603776Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"unisport-phantom.app/","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T16:27:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"unisport-phantom.app","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":14,"received_data":2997953,"sent_data":11444,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":7434,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"unisport-phantom.app/assets/index-H-pHHSEV.js","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"358dcae23f24fccf5ed5026d587bd534","sha1":"c5d369232a76e9c597c2dbcdceea594cd22ff0d3","sha256":"168cc07aa3a014ca1e288f0ee229e3f78c0b3c24143a07f0d60ebbcc61b3abf4","sha512":"ada5224c0187199462535803a1fc2720eec06bd77f205316ba2f23a9d1284d1200a17b299478e5236e4cf8fb10ecf5bba26a94d6a6bbd752d513c22583f118a8","ssdeep":"6144:wHviFypGaXLeDF3eo/42UNT/8soT3w7WIJJZCnNuY+E0BC9MKDO6ysynTwSfZonR:wKFFJ4V/8fnQE0s9R7GhPyL","tlshash":"ccc46dd873a2b02247d691b2807f1502f33968566c0d0428b274eddf79b5949e6fbfb8","size":559057,"data":"","first_seen":"2026-10-09T16:28:17.629867Z","last_seen":"2026-10-09T16:28:17.629867Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/assets/routes-BDIPkFAR.js","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc0353047c6fc00c2545a960bc767e15","sha1":"81b0fb31be5d315110aa5b97a06590f9ddeac893","sha256":"9f85bd200f74250972e9ef8b555250c6df8d8634f7dec1a359bb49214134a198","sha512":"69532d7227f01581a8e04b3211ea985abd929e55be5dbf994abf5e1ef50877585faf09d476373b4a7bbad3e244701a49829d4c0674c54a8bf1e201b533839195","ssdeep":"384:4aGttd1lDT5WrS4lv69+33pSYgpFWXqVc+rYz8BpfP+m3WSS/WTHq:4aCrvKH5r+rdBpfPlWSSqK","tlshash":"c262e94672e276eea71b04b9206ee10cf59ec314d81f8a64f6b5703b24d58d0dba3bc4","size":15247,"data":"","first_seen":"2026-10-09T16:28:17.642823Z","last_seen":"2026-10-09T16:28:17.642823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/~flock.js","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-10-09T19:54:34.214477Z","times_seen":18270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/__l5e/events.1718a1eacac7ff3a.js","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ff59b5a0c70987bcab9e10695666256","sha1":"2054e233555422ebb516b18797498a650b089b16","sha256":"c6aeda0a1a77a012ab8af4636ea7954ba93b485a1a675c9519c7d23a702ea1d1","sha512":"095459b6937b10438847bcf9b3a02fdd102269f1e78bf4e44d11d0fc9d1f3e4c49fc1c605f03312c4fb67e049cc96e803614480b8dfc160bbe68449c076f4682","ssdeep":"768:50COTDu1TyIxLpV0iDBb3EZItbqwCpeAoTqtbg21joTVmZgJhO7FI2MDFtsKeEX0:aWUUbldRJTe2mtFhU/9H3k","tlshash":"20b2099271c4b03397f28ae920554007b17c9ea7348d81f0e6ec8d2a49e7a56e0bbf5d","size":24997,"data":"","first_seen":"2026-10-09T12:50:36.960444Z","last_seen":"2026-10-09T19:54:34.233328Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"unisport-phantom.app/~flock.js","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unisport-phantom.app/","date":"2026-10-09T16:21:46.504Z","timestamp":1791562906504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisport-phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 06:31:59 GMT","end":"Sun, 03 Jan 2027 07:31:55 GMT"},"fingerprint":{"sha1":"55:E8:F6:92:74:8E:AC:F2:71:97:2D:09:0A:90:54:B3:77:08:5D:A4","sha256":"CE:90:DE:16:C2:35:CF:D1:99:F1:60:36:7F:95:80:73:4E:0C:4D:C4:74:E6:BE:BD:D5:C8:59:EA:A6:24:35:D4"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: unisport-phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unisport-phantom.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; __cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM"},{"name":"__cf_bm","value":"fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 16:21:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a47eb865aa090b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-10-09T19:54:34.214477Z","times_seen":18270,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/__l5e/assets-v1/6809fe26-4064-468f-b47f-256818227d23/phantom-background-official.jpg","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unisport-phantom.app/","date":"2026-10-09T16:21:46.510Z","timestamp":1791562906510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisport-phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 06:31:59 GMT","end":"Sun, 03 Jan 2027 07:31:55 GMT"},"fingerprint":{"sha1":"55:E8:F6:92:74:8E:AC:F2:71:97:2D:09:0A:90:54:B3:77:08:5D:A4","sha256":"CE:90:DE:16:C2:35:CF:D1:99:F1:60:36:7F:95:80:73:4E:0C:4D:C4:74:E6:BE:BD:D5:C8:59:EA:A6:24:35:D4"}}},"request":{"raw":"GET /__l5e/assets-v1/6809fe26-4064-468f-b47f-256818227d23/phantom-background-official.jpg HTTP/1.1\r\nHost: unisport-phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unisport-phantom.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; __cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM"},{"name":"__cf_bm","value":"fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 16:21:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 666304\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"787eeb245d4c0bcebc4750b8c0996f5f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a47eb865aa0f0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":666304,"size_decoded":666871,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1800x1800, components 3","md5":"787eeb245d4c0bcebc4750b8c0996f5f","sha1":"8c0c957a57175ff1b0f5014b108e5627e8799a27","sha256":"ed1b815a67a8200a7e33a69ea087f255a861cec79e82f1bfe172e655ed433aee","sha512":"5e1387fb970fdb5819303ecdd35bf34cb7b71aeadb9bb638b7bc99ee07e4d7003fdba62728f0c60083a9266f59aa9e8e1cacd09c6e21c467533e4f6c2cad009b","ssdeep":"12288:/oUxieS9k3P3oX+dCtxXYk1EtaFCZVscfEejSWPqwbv9ioXeuZQiW:/txJ3PoaUEtRlqwXuu/W","tlshash":"24e433e1a350b8ff961c9864b3208a4cf90c4f64ce95dd09fb5689f56ca2fc50ec962d","first_seen":"2026-10-09T16:28:17.610485Z","last_seen":"2026-10-09T16:28:17.610485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/favicon.png","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unisport-phantom.app/","date":"2026-10-09T16:21:46.954Z","timestamp":1791562906954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisport-phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 06:31:59 GMT","end":"Sun, 03 Jan 2027 07:31:55 GMT"},"fingerprint":{"sha1":"55:E8:F6:92:74:8E:AC:F2:71:97:2D:09:0A:90:54:B3:77:08:5D:A4","sha256":"CE:90:DE:16:C2:35:CF:D1:99:F1:60:36:7F:95:80:73:4E:0C:4D:C4:74:E6:BE:BD:D5:C8:59:EA:A6:24:35:D4"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: unisport-phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unisport-phantom.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; __cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM"},{"name":"__cf_bm","value":"fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 16:21:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 1662\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167706._mCnJwuExDN78KidmuAOa1zD-HF9tGLyt5X2hRUBHg0\r\nserver: cloudflare\r\ncf-ray: a47eb8687b830b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1662,"size_decoded":2115,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"3bd3012c991945cca54350fd010cda34","sha1":"0940edce9be464eabd268a24d174a76ca9efd39e","sha256":"2bc9567b8175f3ac4d5184ae00dbafe54fc4c6413f0a2c44c837d215484461a4","sha512":"29d3888f776d44b3ae1c0dd3a68959519499f6d0a177181c848792b8125234b6d6847a7b455ac75126e0add54f7787ee4c2e3093089ae6e5acfc9a76e4a72d2b","ssdeep":"","tlshash":"05317181f631cd88b007433aea092d05cb6aa0fb23f28e427ff1d218066735c4f1a680","first_seen":"2026-10-09T16:28:17.612868Z","last_seen":"2026-10-09T16:28:17.612868Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/__l5e/assets-v1/ac0056e4-67b8-4692-adb9-076a4efb3bd3/phantom-boot-official.png","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unisport-phantom.app/","date":"2026-10-09T16:21:46.513Z","timestamp":1791562906513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisport-phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 06:31:59 GMT","end":"Sun, 03 Jan 2027 07:31:55 GMT"},"fingerprint":{"sha1":"55:E8:F6:92:74:8E:AC:F2:71:97:2D:09:0A:90:54:B3:77:08:5D:A4","sha256":"CE:90:DE:16:C2:35:CF:D1:99:F1:60:36:7F:95:80:73:4E:0C:4D:C4:74:E6:BE:BD:D5:C8:59:EA:A6:24:35:D4"}}},"request":{"raw":"GET /__l5e/assets-v1/ac0056e4-67b8-4692-adb9-076a4efb3bd3/phantom-boot-official.png HTTP/1.1\r\nHost: unisport-phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unisport-phantom.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; __cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM"},{"name":"__cf_bm","value":"fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 16:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 1517011\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"1e12a4fbf1ff62475460b114e86d43c0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a47eb865ba130b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1517011,"size_decoded":1517578,"mime_type":"image/png","magic":"PNG image data, 1800 x 765, 8-bit/color RGBA, non-interlaced","md5":"aa394574dd86fb1aa6a9184872cc3d20","sha1":"705c76b22800569e59e85a389e4a24cfb88cb70e","sha256":"dd99178f7acca8cfd80026cc59d13e61a82c1ae11ea0e3c8f4526663741370ab","sha512":"60859f573db095d2341eba534eef6ec750f1a58bd1779f0c47a73c82547a8867bfddce098c90ebbcffc5c944f73d7a7a0cf4fcc2bd8fc89cd0292f2110485e05","ssdeep":"24576:s4984PTR0CoQa15vULdCqJl2WViDEe+U439oD6rMIJCFkw3:sR4PNTkvvCljViAjXqn3","tlshash":"af2533ac8abddc46bc4aee7cd33b792ab035d341c2f4403956c7a559443cfcaa4d4a62","first_seen":"2026-10-09T16:28:17.614885Z","last_seen":"2026-10-09T16:28:17.614885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/__l5e/assets-v1/a549fded-90f4-4057-be65-5734b3a25525/UniversLTStd-BoldEx.otf","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://unisport-phantom.app/","date":"2026-10-09T16:21:46.797Z","timestamp":1791562906797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisport-phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 06:31:59 GMT","end":"Sun, 03 Jan 2027 07:31:55 GMT"},"fingerprint":{"sha1":"55:E8:F6:92:74:8E:AC:F2:71:97:2D:09:0A:90:54:B3:77:08:5D:A4","sha256":"CE:90:DE:16:C2:35:CF:D1:99:F1:60:36:7F:95:80:73:4E:0C:4D:C4:74:E6:BE:BD:D5:C8:59:EA:A6:24:35:D4"}}},"request":{"raw":"GET /__l5e/assets-v1/a549fded-90f4-4057-be65-5734b3a25525/UniversLTStd-BoldEx.otf HTTP/1.1\r\nHost: unisport-phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unisport-phantom.app/assets/styles-DtZ4TuT7.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; __cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM"},{"name":"__cf_bm","value":"fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 16:21:46 GMT\r\ncontent-type: font/otf\r\netag: W/\"207c76606b0fb8fcadc1f9c48cf46e2a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a47eb8677aff0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32880,"size_decoded":22955,"mime_type":"font/otf","magic":"OpenType font data","md5":"207c76606b0fb8fcadc1f9c48cf46e2a","sha1":"7accaf22fca3a93702f1fd798386e2305470b35b","sha256":"1a13d5b9a7b580522fd6d6fcb0e1d371d6c2466c35124144d64de457a327c21f","sha512":"fd498055d079e788d9a39bcff8525eed3eab27ead446e109945dbb183a865897406f3186e9e4215c382f91391145f3298d5a3aac808f3993e3fd2340aa3dbcb2","ssdeep":"768:UCUhyllk1uZDXkz/uk/MIzDBz9aujn9HuiL3JbXBq:UCUhyllk1uZC/ubub9HuilXA","tlshash":"37e28d87bb084651fd928f7584f9e7d26b33ba540d65d18eb4a8c0985cd2bb40b22b0e","first_seen":"2026-10-09T16:28:17.617939Z","last_seen":"2026-10-09T16:28:17.617939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/__l5e/trackevents","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unisport-phantom.app/","date":"2026-10-09T16:21:47.084Z","timestamp":1791562907084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisport-phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 06:31:59 GMT","end":"Sun, 03 Jan 2027 07:31:55 GMT"},"fingerprint":{"sha1":"55:E8:F6:92:74:8E:AC:F2:71:97:2D:09:0A:90:54:B3:77:08:5D:A4","sha256":"CE:90:DE:16:C2:35:CF:D1:99:F1:60:36:7F:95:80:73:4E:0C:4D:C4:74:E6:BE:BD:D5:C8:59:EA:A6:24:35:D4"}}},"request":{"raw":"POST /__l5e/trackevents HTTP/1.1\r\nHost: unisport-phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nReferer: https://unisport-phantom.app/\r\nContent-Length: 2678\r\nOrigin: https://unisport-phantom.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; __cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM"},{"name":"__cf_bm","value":"fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7"}],"method":"POST","post_data":{"size":2678,"data":"{\"envelope_schema_version\":1,\"batch_id\":\"986f06cd-f9da-4a36-94f7-0bd5fa619d6d\",\"sent_at\":\"2026-10-09T16:21:47.081Z\",\"sdk\":{\"name\":\"lovable-user-app-events\",\"version\":\"0.3.0-automated-flag\"},\"automated\":false,\"artifact\":{\"kind\":\"dwl_content_hash\",\"id\":\"48d6106cae9b3e97aad7aa7dbb30f0aaec2655d7187fc529b3b7b0c3d7a6ac5c\",\"commit_sha\":\"5435294c52a7e472d9b2af0a704c0d2979512f73\",\"context_token\":\"v1.eyJwcm9qZWN0X2lkIjoibG92cF82bTYzYTYxdnN6OGduYTRod24zcjB6amQ2eiIsImFydGlmYWN0X2tpbmQiOiJkd2xfY29udGVudF9oYXNoIiwiYXJ0aWZhY3RfaWQiOiI0OGQ2MTA2Y2FlOWIzZTk3YWFkN2FhN2RiYjMwZjBhYWVjMjY1NWQ3MTg3ZmM1MjliM2I3YjBjM2Q3YTZhYzVjIiwiY29tbWl0X3NoYSI6IjU0MzUyOTRjNTJhN2U0NzJkOWIyYWYwYTcwNGMwZDI5Nzk1MTJmNzMiLCJleHAiOjE3OTQxNTQ5MDZ9.-ZErvZf09OkEatz9xPU2OggCJUi8m0GbRkwHmX2-S08\"},\"events\":[{\"event_id\":\"81a7b157-82d2-41b4-9e94-a1d899f642ed\",\"event_name\":\"lovable.web_vital\",\"event_schema_version\":1,\"event_time\":\"2026-10-09T16:21:46.831Z\",\"session_id\":\"7cd6ce70-6895-402b-83aa-6a7fdbbf6292\",\"page_view_id\":\"c3220274-4989-464a-b083-8ad9b8a95765\",\"trace_id\":\"18fce9a3fb73be66049056dc9b41d681\",\"span_id\":\"67fa26c0365c73d3\",\"parent_span_id\":\"dcd20a4d497f59b7\",\"properties\":{\"url_path\":\"/\",\"metric\":\"TTFB\",\"value\":687,\"unit\":\"millisecond\",\"delta\":687,\"rating\":\"good\",\"id\":\"ad53a48d-81f9-4c13-aceb-84fe36608720\",\"navigation_type\":\"initial_load\"}},{\"event_id\":\"724d4367-075d-4164-a163-42ea8466e7af\",\"event_name\":\"lovable.session_started\",\"event_schema_version\":1,\"event_time\":\"2026-10-09T16:21:46.831Z\",\"session_id\":\"7cd6ce70-6895-402b-83aa-6a7fdbbf6292\",\"page_view_id\":\"c3220274-4989-464a-b083-8ad9b8a95765\",\"trace_id\":\"18fce9a3fb73be66049056dc9b41d681\",\"span_id\":\"e5750456c751abcf\",\"parent_span_id\":\"dcd20a4d497f59b7\",\"properties\":{\"reason\":\"new_session\"}},{\"event_id\":\"9d3fd58c-92e9-471f-b8a1-2e0f05a28b86\",\"event_name\":\"lovable.page_viewed\",\"event_schema_version\":1,\"event_time\":\"2026-10-09T16:21:46.831Z\",\"session_id\":\"7cd6ce70-6895-402b-83aa-6a7fdbbf6292\",\"page_view_id\":\"c3220274-4989-464a-b083-8ad9b8a95765\",\"trace_id\":\"18fce9a3fb73be66049056dc9b41d681\",\"span_id\":\"dcd20a4d497f59b7\",\"properties\":{\"url_path\":\"/\",\"navigation_type\":\"initial_load\"}},{\"event_id\":\"9f203147-560e-4138-b647-3be55524cc60\",\"event_name\":\"lovable.web_vital\",\"event_schema_version\":1,\"event_time\":\"2026-10-09T16:21:46.846Z\",\"session_id\":\"7cd6ce70-6895-402b-83aa-6a7fdbbf6292\",\"page_view_id\":\"c3220274-4989-464a-b083-8ad9b8a95765\",\"trace_id\":\"18fce9a3fb73be66049056dc9b41d681\",\"span_id\":\"14d1abd61dcd560d\",\"parent_span_id\":\"dcd20a4d497f59b7\",\"properties\":{\"url_path\":\"/\",\"metric\":\"FCP\",\"value\":1530,\"unit\":\"millisecond\",\"delta\":1530,\"rating\":\"good\",\"id\":\"953aae41-ff11-480e-ac31-137f30fc065a\",\"navigation_type\":\"initial_load\"}}]}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Fri, 09 Oct 2026 16:21:47 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a47eb8694c020b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-10-09T19:54:34.235049Z","times_seen":3978,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/~api/analytics","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://unisport-phantom.app/","date":"2026-10-09T16:21:47.132Z","timestamp":1791562907132,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisport-phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 06:31:59 GMT","end":"Sun, 03 Jan 2027 07:31:55 GMT"},"fingerprint":{"sha1":"55:E8:F6:92:74:8E:AC:F2:71:97:2D:09:0A:90:54:B3:77:08:5D:A4","sha256":"CE:90:DE:16:C2:35:CF:D1:99:F1:60:36:7F:95:80:73:4E:0C:4D:C4:74:E6:BE:BD:D5:C8:59:EA:A6:24:35:D4"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: unisport-phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unisport-phantom.app/\r\nContent-Type: application/json\r\nContent-Length: 341\r\nOrigin: https://unisport-phantom.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; __cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7; session-id=485df242-463b-415e-84d2-3da68057430a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM"},{"name":"__cf_bm","value":"fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7"},{"name":"session-id","value":"485df242-463b-415e-84d2-3da68057430a"}],"method":"POST","post_data":{"size":341,"data":"{\"timestamp\":\"2026-10-09T16:21:47.131Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"485df242-463b-415e-84d2-3da68057430a\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://unisport-phantom.app/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Fri, 09 Oct 2026 16:21:47 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a47eb8698c360b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-10-09T19:54:34.201777Z","times_seen":8075,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Archivo:wght@500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://unisport-phantom.app/","date":"2026-10-09T16:21:46.497Z","timestamp":1791562906497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Archivo:wght@500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unisport-phantom.app/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 09 Oct 2026 16:21:46 GMT\r\ndate: Fri, 09 Oct 2026 16:21:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6750,"size_decoded":1248,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"96fb8a476cf336367a8e70050906645a","sha1":"6ada389871d9f5eecf66944f7be7c98cdaf318fa","sha256":"8ebf39272c2fe9c522f978d22e7f14debfbcbb345659d29e6f4ce9b0a2961aa4","sha512":"a7e0bf74a755f3fc3d06013ab09112c175e57bd771dbb8c7930d2baa7552217778e8728a7bd8de9000dbf5876e8a903d3959dd28d76fe31c2f74ebe0b2aad940","ssdeep":"96:cJOXbanOXbaJJc+qFOXbaKNDJOxMbanOxMbaJJc+qFOxMbaKNDJOpbanOpbaJJca:chHp6WMWprW79p8WWMptW97pGV","tlshash":"35d1eea6146f9580ea475cd337ef7e36ae4fb180644084bd6ffd14889c9ac22236630d","first_seen":"2026-10-09T16:28:17.627788Z","last_seen":"2026-10-09T16:28:17.627788Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":32,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/assets/index-H-pHHSEV.js","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unisport-phantom.app/","date":"2026-10-09T16:21:46.501Z","timestamp":1791562906501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisport-phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 06:31:59 GMT","end":"Sun, 03 Jan 2027 07:31:55 GMT"},"fingerprint":{"sha1":"55:E8:F6:92:74:8E:AC:F2:71:97:2D:09:0A:90:54:B3:77:08:5D:A4","sha256":"CE:90:DE:16:C2:35:CF:D1:99:F1:60:36:7F:95:80:73:4E:0C:4D:C4:74:E6:BE:BD:D5:C8:59:EA:A6:24:35:D4"}}},"request":{"raw":"GET /assets/index-H-pHHSEV.js HTTP/1.1\r\nHost: unisport-phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unisport-phantom.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; __cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM"},{"name":"__cf_bm","value":"fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 16:21:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167706._mCnJwuExDN78KidmuAOa1zD-HF9tGLyt5X2hRUBHg0\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a47eb8659a050b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":559057,"size_decoded":163427,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44055)","md5":"358dcae23f24fccf5ed5026d587bd534","sha1":"c5d369232a76e9c597c2dbcdceea594cd22ff0d3","sha256":"168cc07aa3a014ca1e288f0ee229e3f78c0b3c24143a07f0d60ebbcc61b3abf4","sha512":"ada5224c0187199462535803a1fc2720eec06bd77f205316ba2f23a9d1284d1200a17b299478e5236e4cf8fb10ecf5bba26a94d6a6bbd752d513c22583f118a8","ssdeep":"6144:wHviFypGaXLeDF3eo/42UNT/8soT3w7WIJJZCnNuY+E0BC9MKDO6ysynTwSfZonR:wKFFJ4V/8fnQE0s9R7GhPyL","tlshash":"ccc46dd873a2b02247d691b2807f1502f33968566c0d0428b274eddf79b5949e6fbfb8","first_seen":"2026-10-09T16:28:17.629867Z","last_seen":"2026-10-09T16:28:17.629867Z","times_seen":1,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/__l5e/trackevents","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unisport-phantom.app/","date":"2026-10-09T16:21:57.241Z","timestamp":1791562917241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisport-phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 06:31:59 GMT","end":"Sun, 03 Jan 2027 07:31:55 GMT"},"fingerprint":{"sha1":"55:E8:F6:92:74:8E:AC:F2:71:97:2D:09:0A:90:54:B3:77:08:5D:A4","sha256":"CE:90:DE:16:C2:35:CF:D1:99:F1:60:36:7F:95:80:73:4E:0C:4D:C4:74:E6:BE:BD:D5:C8:59:EA:A6:24:35:D4"}}},"request":{"raw":"POST /__l5e/trackevents HTTP/1.1\r\nHost: unisport-phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nReferer: https://unisport-phantom.app/\r\nContent-Length: 1204\r\nOrigin: https://unisport-phantom.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; __cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7; session-id=485df242-463b-415e-84d2-3da68057430a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM"},{"name":"__cf_bm","value":"fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7"},{"name":"session-id","value":"485df242-463b-415e-84d2-3da68057430a"}],"method":"POST","post_data":{"size":1204,"data":"{\"envelope_schema_version\":1,\"batch_id\":\"d4807fc8-6afe-4b67-983a-e1e6766ec240\",\"sent_at\":\"2026-10-09T16:21:57.237Z\",\"sdk\":{\"name\":\"lovable-user-app-events\",\"version\":\"0.3.0-automated-flag\"},\"automated\":false,\"artifact\":{\"kind\":\"dwl_content_hash\",\"id\":\"48d6106cae9b3e97aad7aa7dbb30f0aaec2655d7187fc529b3b7b0c3d7a6ac5c\",\"commit_sha\":\"5435294c52a7e472d9b2af0a704c0d2979512f73\",\"context_token\":\"v1.eyJwcm9qZWN0X2lkIjoibG92cF82bTYzYTYxdnN6OGduYTRod24zcjB6amQ2eiIsImFydGlmYWN0X2tpbmQiOiJkd2xfY29udGVudF9oYXNoIiwiYXJ0aWZhY3RfaWQiOiI0OGQ2MTA2Y2FlOWIzZTk3YWFkN2FhN2RiYjMwZjBhYWVjMjY1NWQ3MTg3ZmM1MjliM2I3YjBjM2Q3YTZhYzVjIiwiY29tbWl0X3NoYSI6IjU0MzUyOTRjNTJhN2U0NzJkOWIyYWYwYTcwNGMwZDI5Nzk1MTJmNzMiLCJleHAiOjE3OTQxNTQ5MDZ9.-ZErvZf09OkEatz9xPU2OggCJUi8m0GbRkwHmX2-S08\"},\"events\":[{\"event_id\":\"41ca31e5-2a46-4a43-99ca-557fa899bc69\",\"event_name\":\"lovable.page_engagement\",\"event_schema_version\":1,\"event_time\":\"2026-10-09T16:21:56.987Z\",\"session_id\":\"7cd6ce70-6895-402b-83aa-6a7fdbbf6292\",\"page_view_id\":\"c3220274-4989-464a-b083-8ad9b8a95765\",\"trace_id\":\"18fce9a3fb73be66049056dc9b41d681\",\"span_id\":\"5b68f57e7371cad6\",\"parent_span_id\":\"dcd20a4d497f59b7\",\"properties\":{\"reason\":\"threshold\",\"engagement_time_ms\":10156}}]}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Fri, 09 Oct 2026 16:21:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a47eb8a8bbcd0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-10-09T19:54:34.235049Z","times_seen":3978,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/assets/routes-BDIPkFAR.js","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unisport-phantom.app/","date":"2026-10-09T16:21:46.502Z","timestamp":1791562906502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisport-phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 06:31:59 GMT","end":"Sun, 03 Jan 2027 07:31:55 GMT"},"fingerprint":{"sha1":"55:E8:F6:92:74:8E:AC:F2:71:97:2D:09:0A:90:54:B3:77:08:5D:A4","sha256":"CE:90:DE:16:C2:35:CF:D1:99:F1:60:36:7F:95:80:73:4E:0C:4D:C4:74:E6:BE:BD:D5:C8:59:EA:A6:24:35:D4"}}},"request":{"raw":"GET /assets/routes-BDIPkFAR.js HTTP/1.1\r\nHost: unisport-phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unisport-phantom.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; __cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM"},{"name":"__cf_bm","value":"fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 16:21:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167706._mCnJwuExDN78KidmuAOa1zD-HF9tGLyt5X2hRUBHg0\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a47eb8659a060b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15247,"size_decoded":6355,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15225), with no line terminators","md5":"dc0353047c6fc00c2545a960bc767e15","sha1":"81b0fb31be5d315110aa5b97a06590f9ddeac893","sha256":"9f85bd200f74250972e9ef8b555250c6df8d8634f7dec1a359bb49214134a198","sha512":"69532d7227f01581a8e04b3211ea985abd929e55be5dbf994abf5e1ef50877585faf09d476373b4a7bbad3e244701a49829d4c0674c54a8bf1e201b533839195","ssdeep":"384:4aGttd1lDT5WrS4lv69+33pSYgpFWXqVc+rYz8BpfP+m3WSS/WTHq:4aCrvKH5r+rdBpfPlWSSqK","tlshash":"c262e94672e276eea71b04b9206ee10cf59ec314d81f8a64f6b5703b24d58d0dba3bc4","first_seen":"2026-10-09T16:28:17.642823Z","last_seen":"2026-10-09T16:28:17.642823Z","times_seen":1,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/__l5e/events.1718a1eacac7ff3a.js","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unisport-phantom.app/","date":"2026-10-09T16:21:46.505Z","timestamp":1791562906505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisport-phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 06:31:59 GMT","end":"Sun, 03 Jan 2027 07:31:55 GMT"},"fingerprint":{"sha1":"55:E8:F6:92:74:8E:AC:F2:71:97:2D:09:0A:90:54:B3:77:08:5D:A4","sha256":"CE:90:DE:16:C2:35:CF:D1:99:F1:60:36:7F:95:80:73:4E:0C:4D:C4:74:E6:BE:BD:D5:C8:59:EA:A6:24:35:D4"}}},"request":{"raw":"GET /__l5e/events.1718a1eacac7ff3a.js HTTP/1.1\r\nHost: unisport-phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unisport-phantom.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; __cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM"},{"name":"__cf_bm","value":"fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 16:21:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a47eb865aa0a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24997,"size_decoded":10542,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24997), with no line terminators","md5":"1ff59b5a0c70987bcab9e10695666256","sha1":"2054e233555422ebb516b18797498a650b089b16","sha256":"c6aeda0a1a77a012ab8af4636ea7954ba93b485a1a675c9519c7d23a702ea1d1","sha512":"095459b6937b10438847bcf9b3a02fdd102269f1e78bf4e44d11d0fc9d1f3e4c49fc1c605f03312c4fb67e049cc96e803614480b8dfc160bbe68449c076f4682","ssdeep":"768:50COTDu1TyIxLpV0iDBb3EZItbqwCpeAoTqtbg21joTVmZgJhO7FI2MDFtsKeEX0:aWUUbldRJTe2mtFhU/9H3k","tlshash":"20b2099271c4b03397f28ae920554007b17c9ea7348d81f0e6ec8d2a49e7a56e0bbf5d","first_seen":"2026-10-09T12:50:36.960444Z","last_seen":"2026-10-09T19:54:34.233328Z","times_seen":34,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/__l5e/assets-v1/8d18af2a-b31a-426a-86d2-2dc8670dc53b/unisport-logo.png","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unisport-phantom.app/","date":"2026-10-09T16:21:46.514Z","timestamp":1791562906514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisport-phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 06:31:59 GMT","end":"Sun, 03 Jan 2027 07:31:55 GMT"},"fingerprint":{"sha1":"55:E8:F6:92:74:8E:AC:F2:71:97:2D:09:0A:90:54:B3:77:08:5D:A4","sha256":"CE:90:DE:16:C2:35:CF:D1:99:F1:60:36:7F:95:80:73:4E:0C:4D:C4:74:E6:BE:BD:D5:C8:59:EA:A6:24:35:D4"}}},"request":{"raw":"GET /__l5e/assets-v1/8d18af2a-b31a-426a-86d2-2dc8670dc53b/unisport-logo.png HTTP/1.1\r\nHost: unisport-phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unisport-phantom.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; __cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM"},{"name":"__cf_bm","value":"fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 16:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 57531\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"5c8f313be04fd7b0348cd5d85def5013\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a47eb865ba140b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57531,"size_decoded":58096,"mime_type":"image/png","magic":"PNG image data, 4363 x 897, 8-bit/color RGBA, non-interlaced","md5":"5c8f313be04fd7b0348cd5d85def5013","sha1":"98ccd357ae3ee81e03db9205d3739f5ec5f1f388","sha256":"295b4c971e6406d137009e18a7aa2c74163750990b2117af341ac9ed12f8eb1a","sha512":"df0478453dbd372a7659400d0b5e7d1a810cdd781c8ee9c2aff1bd24216645cdf501fd8632de922b321b31c5d8828f38d7198d74b2a419b65c3f2bab293e51f0","ssdeep":"768:6P2IjeWfSWRGtIYRUtl3cfqhz86JD0ABhbOaG8TN1tlJ+G3GoHp2DElJadrHzxdT:SRaWRGtXWtZpQYBdOaxPFEdrzTHb+Ta","tlshash":"a743d0b1d49f9ed7d87c08b6c10c2f783b61029c9522673347b29bf5fd8b42a91a1355","first_seen":"2026-10-09T16:28:17.6526Z","last_seen":"2026-10-09T16:28:17.6526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T16:21:45.338Z","timestamp":1791562905338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisport-phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 06:31:59 GMT","end":"Sun, 03 Jan 2027 07:31:55 GMT"},"fingerprint":{"sha1":"55:E8:F6:92:74:8E:AC:F2:71:97:2D:09:0A:90:54:B3:77:08:5D:A4","sha256":"CE:90:DE:16:C2:35:CF:D1:99:F1:60:36:7F:95:80:73:4E:0C:4D:C4:74:E6:BE:BD:D5:C8:59:EA:A6:24:35:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: unisport-phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 16:21:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7; HttpOnly; SameSite=None; Secure; Path=/; Domain=unisport-phantom.app; Expires=Fri, 09 Oct 2026 16:51:46 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a47eb85ebd7e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM","quoted":false,"path":"/","max_age":86400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"__dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; Path=/; Max-Age=86400; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7","quoted":false,"path":"/","domain":"unisport-phantom.app","expires":"2026-10-09T16:51:46Z","raw_expires":"Fri, 09 Oct 2026 16:51:46 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7; HttpOnly; SameSite=None; Secure; Path=/; Domain=unisport-phantom.app; Expires=Fri, 09 Oct 2026 16:51:46 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18339,"size_decoded":8305,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"43a0287925962bcb143248c3f1f74ef8","sha1":"8d881a7d2eab8894a6d15e7600b52e76f01d783b","sha256":"397207ebce8beae75ef58411aee5bcce5c235f0de26ecd5aee763c294c39c019","sha512":"d3104354162f0a4130d78daac352e6491f378e83cbd5cc9000be59e1d668f41fa01c8f8e03be7c68442d078e77d9888dcc1ddf7b9622fd4e0e40fb5d5c3ba97c","ssdeep":"384:AaSsTHZplLYQhc7Tpcjou0jjMu4Os2NjaNHInc:XlLYQhcPpcjou0jjMu4rkaNHD","tlshash":"14822a92d318663f1363c2fcbee9b1c8226d90b2f5468de9f59e453512c6ed8e013e90","first_seen":"2026-10-09T16:28:17.65546Z","last_seen":"2026-10-09T16:28:17.65546Z","times_seen":1,"resource_available":true,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":39,"connect":1,"send":0,"wait":688,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unisport-phantom.app/assets/styles-DtZ4TuT7.css","fqdn":"unisport-phantom.app","domain":"unisport-phantom.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://unisport-phantom.app/","date":"2026-10-09T16:21:46.500Z","timestamp":1791562906500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisport-phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 06:31:59 GMT","end":"Sun, 03 Jan 2027 07:31:55 GMT"},"fingerprint":{"sha1":"55:E8:F6:92:74:8E:AC:F2:71:97:2D:09:0A:90:54:B3:77:08:5D:A4","sha256":"CE:90:DE:16:C2:35:CF:D1:99:F1:60:36:7F:95:80:73:4E:0C:4D:C4:74:E6:BE:BD:D5:C8:59:EA:A6:24:35:D4"}}},"request":{"raw":"GET /assets/styles-DtZ4TuT7.css HTTP/1.1\r\nHost: unisport-phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unisport-phantom.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM; __cf_bm=fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167705.ZIsgOuoF50W7QrxZXjuzhz7a48aMzq6ihJBNDfyaAlM"},{"name":"__cf_bm","value":"fIzl_XsF5HBbinSisq8eFfNnfLW9qUg.u4jJOabS2Lc-1791562905.3939118-1.0.1.1-awtvg6jb4j37PkIG0u01zkldhusDNAEvt4z5hwrDOvpdm0zGnrLGgQoEaqEg2diksH5uHxrC2ZS_CLdeY4Ke3L09bG7b7ilkpo5zNV7wF6uERsNfEDCEqwaSsjbYE0J7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 16:21:46 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: psr2.adc12f36-e545-4a2f-8cd4-4c23264bdaea.1792167706._mCnJwuExDN78KidmuAOa1zD-HF9tGLyt5X2hRUBHg0\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a47eb8659a040b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76663,"size_decoded":13472,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65470)","md5":"a041f06752bbc69f3a58b1ed67c6a2de","sha1":"813eb653aec1c177d15527530b87180afb0f1e33","sha256":"c2ca884152c868490c741f17ba832c42a6dcdd569ba03e28ed16667c4932a559","sha512":"8c53360eaeeb0ebdf34f5e659e6b2f9782cfc9c776655a8e2d611bdeef99889f03f81e297d0abe6bb64b39d1b1116554844d0a977400a058ddb38a4ac1d2ad67","ssdeep":"1536:IBa9Nkh+U50yGXzw8zBUJsqmaNSsMq+WDhXX78uzX8DCf988R988q:Sa9Nkh+60yEw8zBU6qdMq+WDhYMXqCU","tlshash":"3473d694b22ad93f7c33a4f5a38cb88c911970c0dd7546e8ff46622256c3bf1ada7614","first_seen":"2026-10-09T16:28:17.661338Z","last_seen":"2026-10-09T16:28:17.661338Z","times_seen":1,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"unisport-phantom.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}