{"report_id":"d5ca87e3-4222-4010-ba88-5d726d5ea01d","version":0,"status":"done","tags":[],"date":"2026-08-24T05:24:22Z","url":{"schema":"http","addr":"sabesp-agenciavirtual.com/","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"172.67.221.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"title":"Sabesp - Pagamento de faturas","dom":{"size":159849,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41797)","md5":"e02f557107a7969c8a78f3fbace20452","sha1":"07e56b96542ecdcb9a7dab5b57d5e2815b1e4a4a","sha256":"c6bda3c29797fbe6c0e32e2f808c706356c752392168f5f7209e49b3bd041dff","sha512":"8e469b64188dcdf710e7aba0754686d2b0eb049c99e00eaf37515d2a6530e68dd8cf1f8c3db2665e67e6f857178c2499d31da8df09a8d4a8bb4efc104c74e7fe","ssdeep":"1536:DD7FQYnpWziclco3BRjA8HKz9JAkbuYvarIZWGDvs5Y8+cuPM:DSq7varIZ1vk7","tlshash":"9af31c5b39a0a71aeae38b19a6627d9574109c6ffd339cedf10d93780b8c3f24d5050a","dom_hash":"domhash031cd011239a6376fd8043e3c67efe74","first_seen":"2026-08-24T05:11:06.740074Z","last_seen":"2026-08-24T05:24:28.371624Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sabesp-agenciavirtual.com/","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"172.67.221.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-28T05:24:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sabesp-agenciavirtual.com","ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-18","domain_rank":0,"first_seen":"2026-08-24T05:11:01.362146Z","last_seen":"2026-08-24T05:11:01.362146Z","alert_count":43,"request_count":43,"received_data":3282012,"sent_data":22497,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/3ttg3owg2uc3t.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c09a36cf05e0894f84dfe75c3def9c22","sha1":"7a6c0c0a4c5cc97f9c7ee23590003d73f29086d1","sha256":"d7a3f723ba987c11609b018a2323fc06e4d11826440fca0f9e73afacc47dd8f0","sha512":"4f0c358aaeee2d352ac195a84582d5abb2d8bd2008a9be75ab7177ef5e9f4e05b7fa99d897e9faba531c7226eba204094ee4573762b375d320f77489800dfa9d","ssdeep":"192:nnSQCLgCGLXc2xROT4RREBBSLl2RqcmNV99kpa3rghbZMNQ:nSxH2jOTG4Bc2RoTTrUbr","tlshash":"102206403241f1782b6e458ee46f840eb2ae6f7d951e1424f2fc94b51fa1885b2b3fd9","size":10021,"data":"","first_seen":"2026-08-24T05:11:06.827118Z","last_seen":"2026-08-24T05:24:28.389583Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/05y5y689_5ncw.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78459d942c213538d4f9a6d8c70173b2","sha1":"c5c0dd31165ded25eaee0f7e14e2f59fcb263cfa","sha256":"cb1b14d4c0423febfa35cb25167e3243231fe412a6959d5c6a133fded9d09c9d","sha512":"3e8332187847d8259786743541dcbeca7deadf72af2e74105c6d826ed6cdfb3831965910ec08ebaa4a37dd0ad00cc30da2d0fcfb3e7b7d0c8c0a4ced20b91bb7","ssdeep":"1536:+GhwbR04Zv30jif++4obT0iON9g2cehxOxR/wiqcX:hhwm4ZsA++4nN9g2cLxR/p","tlshash":"e043c5e973d27532079b0225903e4107f3ba9d94104b5928fb68c9de2eb444ab2f6f7d","size":55170,"data":"","first_seen":"2026-08-24T05:11:06.80069Z","last_seen":"2026-08-24T05:24:28.380257Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/offline.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60fea8b2f7bbbf611d8c5baa9794792a","sha1":"f2456086414fb9b4c0a2d4234ee0cb6a3b6280dd","sha256":"a3c0868fbade36fdc6b66360f857a49c339fef433bba84d17dea4ef9ef1eca2b","sha512":"75ad7372ba2779f32d41e801d0376eda43c924ed069882fea6f9fc7b7cbdc2c7478f85b002d33a1b7f87671b8e8ff0d41b8b56ffdb219a915d15cc8b509b3931","ssdeep":"384:FoOfqd43knzCUs/lE7K55o+ZREY1FULCzBkPhrlsbsPW1OA0vM46xGXkjsuTTnOf:FlmnOUs4MJFqCzPsPMZn5BYxHOpu5","tlshash":"f00374491cf320228513f1695f6ba10bf13aa453698adc517a9c83653f4863d87befec","size":40612,"data":"","first_seen":"2026-08-24T05:11:06.754626Z","last_seen":"2026-08-24T05:24:28.391715Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"745ef9da8f2d36ae7ca3509fcf57dc4d","sha1":"2a8f0d6413c71c2edba4a2a5103534c8f8ffc8bc","sha256":"b2e333bc0d1f6f8d7263cef709ea668f626b6539aa6bf480e0871de75237f13d","sha512":"42e173d8029712369e051dfe3d96f449868a9b8b803e04697cb0ca936a39f7d8aa9198cada4e254fc11761cfad15bcf87ae8a52a7b8bb9a0a08fe6e49e297fed","ssdeep":"","tlshash":"65f059393cb1e678d58712836035e259356134263902d44d09c9c87c1455fde4d21e9c","size":499,"data":"","first_seen":"2026-08-24T05:11:06.846817Z","last_seen":"2026-08-24T05:24:28.399532Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-24T11:38:10.569687Z","times_seen":237180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b61e126846fcb426beb458fcb4a0f04","sha1":"2d5a49ba4f94a45df823ba0a38a4f23f0d8b5d4a","sha256":"d05dde56ea9a90c301432ec593a2221f48600eb059080ef285d05898e24ea8e2","sha512":"536db18f3c49e8a20d64486a070f0ba4be76eb179c095dd79b5043d57430d37dbab0b4abc0ffe55672bd8779f3c65cddef341ee7668eaec3ba671c9cf292994c","ssdeep":"","tlshash":"1141e71be98fed006c70deae126b1f379ad0dab7803454a9b34dc8ec412567b43dc889","size":2438,"data":"","first_seen":"2026-08-24T05:11:06.84976Z","last_seen":"2026-08-24T05:24:28.400582Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8137c3942a475494598fcc97c64ac271","sha1":"c6b9abe32937ee963b6637142783d1ecae6c423c","sha256":"78819ad6a97d5a9d3bca20592ae826b626c27ac207a9e089961f69f1d1572385","sha512":"eae1246d411ea2b5581661a413c537adb78f4176b4d7a0807464061b8d2f408891cb9211642da142ba77c573a9bb5e9feae73450ad1131caf724e90ce1cb2238","ssdeep":"","tlshash":"f4019e1bea4ff8416c30dd9e103a1f7689d0de7680746468f78ec8da016157703ddc86","size":835,"data":"","first_seen":"2026-08-24T05:11:06.851638Z","last_seen":"2026-08-24T05:24:28.401165Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"54cccc9b1b36e3d47d0e8c2c89992b48","sha1":"dbac7f42f555f242fb09894cc8320df6d2305822","sha256":"19807b5b56c8d8f139a7d345ba3de09e1082ef6a0cb20b307303a357d9b1441d","sha512":"ae8579e92c5b414bc183a895dfa202972bad41087007d3847b6ed0511f375817446fa9fd792845eed3258f6bea52dae05acfb64e319811a310f0768826978630","ssdeep":"96:LFVNmY01DLZ7cg1xqzc/xmWG2LWGFOfLWu2LWjvWtz:sY01CgnqzcpmYywEM","tlshash":"fbc16e2f2c05da57ec3e3c69023e9d3a10cc897b4791dab8c6ddce181a465b91be9d81","size":5765,"data":"","first_seen":"2026-08-24T05:11:06.853641Z","last_seen":"2026-08-24T05:24:28.401732Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"07e04fa7a31eebb306bd31e80228c21b","sha1":"f3e55db16bf74997dd2d428f99ceb4188b59dc13","sha256":"9d6a72f5d13d4c3d9dbb1e30eee5f5ef13be57f517f53803c6ac505766d6f917","sha512":"d0bb1f630c624e304690b248f0817d5b6331197239ab4c5b8d145e15955adf49a51a52c7e26af5ccb42b7dbb8fcd31fefbccb6154c3e0bce2b366b51bfbedfea","ssdeep":"","tlshash":"79517e1fec0eee01ac39ecae013f9f7654c8dd738134d9b9a28ecd9915256b613d9881","size":3020,"data":"","first_seen":"2026-08-24T05:11:06.855722Z","last_seen":"2026-08-24T05:24:28.402241Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3e6f817d8bee7eb4d55167310ccf339","sha1":"12f9c376e2a9d9cd10afa275b3fbceee470de18f","sha256":"f6268ad93c06f75c9234906187c853b1108d6c9212df31206de6ac31f8a4572f","sha512":"d41be715e5208b150322737d95163fc45fc6e310b94ef79647b798ac42807d618d2cec3d7b728ca3c9bd094018b42823775c758779ba559819c0559eff63c40a","ssdeep":"","tlshash":"e3b09b5d9444cd17843a2c6613354d335cd4cd3fc71407e0564ecb4d155947217d985e","size":128,"data":"","first_seen":"2026-08-24T05:11:06.857611Z","last_seen":"2026-08-24T05:24:28.402829Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f021b490d3d85caa80c4c711dc5b3e42","sha1":"15b34d1efa741d9204873613d5912152ffc4314d","sha256":"b1e9831e05e8e016d217925a498dc45616b294251ee8482892a65b471b34eb09","sha512":"74fc5eaa5da7df92e50854082d3e04c2e58477af96f79d27cf485024eab79990055c8f5a3f7a9dbbe6ce7dcfbdc16feff9ee1cd096d417fa3fe582c1253ff05b","ssdeep":"","tlshash":"12c080a1dc42cc1dc6674f261c3a1c3521dcc574074555479dd5d9291985b3105b5d8a","size":178,"data":"","first_seen":"2025-09-30T10:59:21.66596Z","last_seen":"2026-08-24T10:31:15.231245Z","times_seen":620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd6450c6421fbb0d46b65b8e9ce4ef9a","sha1":"f134f7ac8083162db0e7fcf373eacb673fc6cbae","sha256":"98971820677066517ea89ba8ed7a92c0316bf980adce8cfaa65c40069bac408a","sha512":"3205e743c36d42cf8d2340c047fb6d7e0002ac9157ef410eedb6c47a797b73233822dd761c74359530b7943105737d84aed9954f5ef82768f32988028927e34f","ssdeep":"","tlshash":"fdd05e1bd98fec00a830ce9e002a2f278ad0d93780344868b34cc8d8402166a038cc89","size":273,"data":"","first_seen":"2026-08-24T05:11:06.860419Z","last_seen":"2026-08-24T05:24:28.403953Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a715070a1e4c08e8ea06f523ee9971b","sha1":"d51d1793bfdf3728396cbe55ed0994a3dffa9892","sha256":"f0633499bcd15148ff7636e4063cabb205375d7e951993d48cc4f2dc27f0bf16","sha512":"6e36145d93bcf264b4f73237e902e6dd65fbaacceced4cbec4b53be32d98f0abd9b57e7757e8804ae466ab8a8314bd05ec9788053dee56ba6548a8f92b94785a","ssdeep":"","tlshash":"50314aa1ed15ed05c7c69e082d3f3c7854cdc3a6826d919bb2e8ee294087d3495f1e12","size":1768,"data":"","first_seen":"2026-08-24T05:11:06.862128Z","last_seen":"2026-08-24T05:24:28.404535Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/3v-1i7cowb9ri.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3387a28ce86be844718611036f46c7b2","sha1":"21853569063a1acbd6372b1ef16bb710ab9c556b","sha256":"6a13809481c9d3dceac1f6b048bb89659724b39ec11ae5c3814d76cb0fd4b2e2","sha512":"d4977058bd75cf35868bfae1dbb9cadb5c0884262853ec30c99c705e5f0eba0aa719d7cf7163ddf1f6264321ef79d5c0802a09477c94e1a175a711b6704d366d","ssdeep":"192:nnSMidqZ7SIGufc/eiXkqi3Ukd2LWcj+d0oTnXy9Jync2Nr0cMFhOj:nSMiUZ7lGufc2iXkJRxf2whHNgcMFhM","tlshash":"7f42856bb101661baed280d2481d1226966c5929a416903cbdfc6fe3f156ccef4bff34","size":13065,"data":"","first_seen":"2026-08-24T05:11:06.771576Z","last_seen":"2026-08-24T05:24:28.388598Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/2gonsos2wvcvv.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18f82b8f6e871ccca7e96fbc3aa54d0d","sha1":"5807eec296a3ca37b8968bf1650194d1dafd7cb8","sha256":"89a5e964f657d4a830ba1c13a07c85bccd63840bc2bd9c6f788b0933c68664ad","sha512":"af01c350d235f872c3a2c85b53814b3850e22375208922050687d6e5e77b99f4224d0a9456038b0fa2acc12500aab53094b7267925c261200f862c1cba389645","ssdeep":"1536:FSek7eu+Uc3bmyCDwcy3DOm5I+dQodEfdUzlvVQmPGM:FqKp3bEDwPFwU7PGM","tlshash":"c7530954b085afecaa7704d9d49fc00cb01d3e5cce0ed865faf96c252a948c07a97bd9","size":65023,"data":"","first_seen":"2026-08-24T05:11:06.762103Z","last_seen":"2026-08-24T05:24:28.381714Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/25lbqmvty8kvr.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d1a227b46d2b12e5f391cbe561f0778","sha1":"09115d75ffe63f12a199fcc6c2babaf0092ff8a0","sha256":"ad9a9de72a856a7afe9c1cfb998608ece600203d45f785625ad1f523ae0f8157","sha512":"8a61517c787152e8e713dcec23e90ff1c0bba3238b7b1bb7918a39e6c4d9963c829ed221828adb60eceb160b47edc0ca7df984ef20d87a2e07059916909ec6c3","ssdeep":"1536:gOyF/eRhVEZ68Hz68HHQJBZFqkW2QXCMtHuVF/LKcQOK1ULj:gOyF/8hVEZ68Hz68HHQJFqkW2QXCMtH8","tlshash":"ef531bc57752f02243eb61d9446b1406f37cda29a84c0868f351e8f728b598a96fffb4","size":66560,"data":"","first_seen":"2026-08-24T05:11:06.793665Z","last_seen":"2026-08-24T05:24:28.395689Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/1wnf3ejne19dv.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ff02cda97f472af2c38357043961288","sha1":"de40709fb33dcb7e06c895dcbd10d84ee44fa341","sha256":"e97e55ef02321bc1369516348a9ee930ecf5d59f97905d368c141554280fad4d","sha512":"79731c06ca0c03a9425c20eed228b78a1e6b652b11ab747bcec3f1e3ec64a15982c684d1e3ba1ceb5c9b3a87e03600f8c60a22b533e81c42c39b824f0178697a","ssdeep":"3072:BDdXpvpJHPTYgr+KV3LEvz1DKR3DL5qWEDDBh:td5vfHPTYgjZLmsR3DFmDVh","tlshash":"a6e34af977827073639b212a507b0101b3794989640e042cf7bae59a2df654e93f3fb9","size":148855,"data":"","first_seen":"2026-08-24T05:11:06.757233Z","last_seen":"2026-08-24T05:24:28.373884Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/1oeffhlqtener.js?dpl=dpl_Gf9V9WrzVhkFhdFNnpykhCo8wJmr","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abd1cbaaf68e579bb94baac480a14992","sha1":"b606065fb0398cb328de9799fa22ad174eecaf57","sha256":"8e231fa45d75d9367c7f7367cc9403c09d6ec10d72d1d5fda69511161bf303a3","sha512":"fa91fb5ca36854c33f47367ef283f01f6f2cfbf2412f9023f2af78da3a9c9e1393803f8c5b2e85198dc7f00f6ed9471572ef4d7657536fa549e451bdce06b864","ssdeep":"384:nSVNDMN3O03Ar2XvfU+78g1WmRT2bCYYwzbIdcqSMBStc22DgayrZP+65ksfd1VI:nSVNDMN3O0lM+78uWmhOX0y19usl1Kz","tlshash":"e1d2c7a63202b26277ea8185c83b4119f77a6a18200e412cb5b95df76872dc6f0f7f75","size":28298,"data":"","first_seen":"2026-08-24T05:11:06.74792Z","last_seen":"2026-08-24T05:24:28.385215Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/turbopack-129altcwekcck.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a84f5c8828261857f28832b733f12b","sha1":"174a2e9ee5793b51aaef0e48c91332586d34112e","sha256":"bc44c1cda9e3b8b1653eb3c3627fe6baf7e582f2441b0c0c4ccc5fc20622b415","sha512":"3fbaca9fde0dfa518a5d3803d6fb88d8556a62d52da3c919c7b97155e0c63bf34b1e0e255bda0e66c9068b8bc0ef9ae9f58f9faa3e2bcaeea45c5c6d2c01b56d","ssdeep":"192:nnSzmGr4gM6B68gEsg6d2hE7oGElpETND+S3sBT4fCT3cXX6hfHiryLxX:nSHr4gM6VLsElWyssqCTMbyLxX","tlshash":"a532c6da33a6f07343af90ead07f4004f1794469145d542cd36ca8fa2c399aa85e7f76","size":11454,"data":"","first_seen":"2026-08-24T05:11:06.779958Z","last_seen":"2026-08-24T05:24:28.380869Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/3r9rd5xaex8_e.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97e9cfdf410ebefeb0e94e335bd0f5a9","sha1":"6d5d59891d8934c701b85b61bd25765860201c75","sha256":"bb4ac53db6e939f6a2e921dd8c2e1fa3b8ad2949d8bb9ca468a5efd5b7386ead","sha512":"a9dea8ecfc5501cd457b52df756ddf5dd1a2dfeb0a4c7b100f909974953fba3bd0ef06945907d883bd1e63f32e950ad5cba9e29614778a20af049aae7f854b86","ssdeep":"6144:WtTpfp3fYt0RIRFIZkXVv59TGV/LJGiZJN:pFIaXVv59TGVbN","tlshash":"c8345c9573ffba1a07d621ab10d94101eafe0da45cbd5c95d29c422eb5d8ce4a0b3b3c","size":252953,"data":"","first_seen":"2026-08-24T05:11:06.791346Z","last_seen":"2026-08-24T05:24:28.390087Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"066f9051e1cda723bbcd4e05b30649fa","sha1":"aa555bcdc6b4fe4ad43f40b0f0813d270e84d0ee","sha256":"103cc367767359641df245e58e1d840ba5e52aaa3d6574e91cf209ccec929c16","sha512":"8a164647abae36e80dd4399e9fc8c53f9621a8ac77ad24ff1d4d9baf44329382ee0126e13da0ea5919f9c2b651d066d05b14de9d8e5eb6fac65da84e426a3bf1","ssdeep":"","tlshash":"e0e0681d7cb1e1798aaa6a976435f76c251274253805e80c0dc8cc7e2954fde1d31d18","size":403,"data":"","first_seen":"2026-08-24T05:11:06.86732Z","last_seen":"2026-08-24T05:24:28.405094Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-24T11:31:26.738321Z","times_seen":388814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/1cwem19sdy4qv.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dab93f235236e8f63f77bc532d0ea6e9","sha1":"0ba39c364b6ca97c51c9378dea406dcbe9f19d52","sha256":"b99762588553e12063802a2c04d7b23fb8b729ecfbb09ea0e6340852ba0ff360","sha512":"fe20220b4f074454bce0a74bb33bebb4d257fb3dc5ce4f1a6ea8112758e7ca1750594057e028a5195f69b31daa19a223a88b83bc1567b9c89c8c21ed34c75b65","ssdeep":"384:nS0YaeWwthQQVlR4oUuzMpjq51j9Gw2My9feTBq87v4FThuB1waYSVRo8Wv:nSg7wD5GoLMtqP2xqr8kBNYSM","tlshash":"6bb2f8d57651f4a113e781ee843f1001f33a193a500ea478f7a9ddfa2a71e8f60a6f25","size":24284,"data":"","first_seen":"2026-08-24T05:11:06.788887Z","last_seen":"2026-08-24T05:24:28.384707Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/1oeffhlqtener.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abd1cbaaf68e579bb94baac480a14992","sha1":"b606065fb0398cb328de9799fa22ad174eecaf57","sha256":"8e231fa45d75d9367c7f7367cc9403c09d6ec10d72d1d5fda69511161bf303a3","sha512":"fa91fb5ca36854c33f47367ef283f01f6f2cfbf2412f9023f2af78da3a9c9e1393803f8c5b2e85198dc7f00f6ed9471572ef4d7657536fa549e451bdce06b864","ssdeep":"384:nSVNDMN3O03Ar2XvfU+78g1WmRT2bCYYwzbIdcqSMBStc22DgayrZP+65ksfd1VI:nSVNDMN3O0lM+78uWmhOX0y19usl1Kz","tlshash":"e1d2c7a63202b26277ea8185c83b4119f77a6a18200e412cb5b95df76872dc6f0f7f75","size":28298,"data":"","first_seen":"2026-08-24T05:11:06.74792Z","last_seen":"2026-08-24T05:24:28.385215Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/2r0w_omfut6sg.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"347528ce0fedd8569b1fcb61fc29f272","sha1":"2197bb37027111b60533e776db52f7c88f56eb62","sha256":"3e6579f18bcf24ea034ee80835cd42a971b9ec725cddf958347724d33866f2a4","sha512":"068dfbc9daba1a690711e17d77be895685390cb3185514cc4360dbc47373ce7da799624ba83c6ed89e36500f843654f083a32930b9adddc1bc6207a90493c3ce","ssdeep":"768:nSYVnAvYYG3NLOM/Qcjzy+ClOGht+BoIMbHGtMb91Oxzg8RbD+y9WUxbYTY14FNr:1VnAvR4LOiQwG+yD+BoIMbHKMb+x88RQ","tlshash":"bce2f8c372b0f06a8f7d10df201e4009b7967e1d682b9495f7a46c9b361d989a4cff68","size":31584,"data":"","first_seen":"2026-08-24T05:11:06.806752Z","last_seen":"2026-08-24T05:24:28.398002Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/11h3zh51v513l.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e3e1b422eb02d9681370c961a47cc09","sha1":"9f1bd30efbaa4cae5f866b1e8ba0c63fb17a3fd4","sha256":"5919f70b613482612768cc905e7d5b80d157543ce42f552d052600120e0ad503","sha512":"572f77fb8b90ac6c8f26078b89f9161c9a3b851e753e7374160e78039cd653aed5aee7b51c567a64046b0292d12439a5eeceb98184101f901de2d34425579650","ssdeep":"768:nS+NrgkL1C3y330gL1st+xR9YRQNzzXZM6:vrgkL1C3E0gL1st6SQBzXZ/","tlshash":"fcc2950b5a8ae9718a9504c4268f4908c4ef0d3806ece8a5d64f49fd7a70dd0597bbfb","size":28238,"data":"","first_seen":"2026-08-24T05:11:06.843971Z","last_seen":"2026-08-24T05:24:28.395126Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/3n5cn5z1c1l4i.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6089b1184c9241576ba2e7e902034da5","sha1":"f861daecb3275288983e20f725ca653d31570e4e","sha256":"b2aa1a0bbdb59f79e89989b704d92ee8029e4fe87d7e5ff188dfb6636ec23a9d","sha512":"b58404cbcfe470162c0ed52b6a85b25a1157df488e64dd258134d8f857e0f9ed83a3493c05090a244b13bb63564643843807cb3689c3c0f94ddc48ffbcbdd2bd","ssdeep":"384:nSxrB83kzzJ8oRhr6zzvM/C7lAGna7D3o4m98JU6tgG4KH/WCKcudL/e2FdkTd9y:nSxrB834z56zI/CRpno44u3bEVQx","tlshash":"1be2f6e971d5f472479354b5903f000bf23d0db2285d58b0a3a5ecfab9a898c9133fa9","size":31842,"data":"","first_seen":"2026-08-24T05:11:06.785484Z","last_seen":"2026-08-24T05:24:28.383418Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/1q33ud1wn_esw.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bda98ca0055f5797dc8b0cef6a34fc8a","sha1":"55d981c9d5a177705034f87c9aa656eadca3d867","sha256":"13d4bfdc3c9fe3ec78953805f8bf4bf73390a7b4de7398910f3dcecc60db0ce0","sha512":"a3fe00b1e20aeaab228ff5e52bc6696009f8a37bb299c018eb7cc4bd4ea21a2dda5eb85926b2fdf6e6649771613954ec7233d9a33385aafa56c1ed3097f5af45","ssdeep":"384:nSKHbhYj31W2q+GWhJKHXtRIq0Vzaeo15yjZU9P3PPFiGkmyZdgwRIPOyOX3v35i:nSKw3g2q+nJhqFSDZYuX/plmkzNBsYg","tlshash":"3af295a571d6fcd202974094843b1007f36e0db624ad74e4e7f6c8eab960a4dd0b6fa9","size":35540,"data":"","first_seen":"2026-08-24T05:11:06.803401Z","last_seen":"2026-08-24T05:24:28.37745Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/3jm796h_31c0l.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccbe64c7aae63f468e27bd14f08382d5","sha1":"1ea4a1ec9e296563068c7bd67d4a133f9995eca2","sha256":"0a3e756d0e6766ef1d05739e83f5cfc41bde4acb96da54f4ecfb99ec7e4fb6ab","sha512":"49104e3bd3fef89969fd5594fe5190bcbfeed0a0237b5a7cb9974095bbc4ef7ba058cf9a82c69088aa62fc140effb60ee5ba477dd774bec6272fa161580cffea","ssdeep":"768:nStnZJU6K9OrmEsWUIgoNtbN9MffjQRcquxW4:ynbXUYFduY4","tlshash":"4f33d6b53291fab702db91d9d0370012f2780c7120ad64b4b394dcaf799dd8992faf69","size":52595,"data":"","first_seen":"2026-03-24T20:01:41.647593Z","last_seen":"2026-08-24T05:24:28.389106Z","times_seen":409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/01xrwq0h0w-bu.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dd4a4da1812a33ad6694b8700b18319","sha1":"5be94cf2bf5344bb7da27b7c649a8f1dc3cc6fbe","sha256":"2b574c5b46d0dbb9f28c2f0c60c1c97a0845a53fd9bfcf5797288a52bc53ca04","sha512":"2a21c070b957e8a7a0c2dd412a329d9a3337778eb31266e28e0ede733b16c0ee9f8a36115e8e80959631664e85b7ee4232d96a6cc361dcd95babffe382942bec","ssdeep":"768:nS0BpGIfmgpsfas9SpBEWNS3gywc3VuvzXf5I2kz+C:/nGIOgFrfCPH","tlshash":"57232be135d3a0796bd12841e13b0765a6755521780a009cf3b98cea3c68ecbf17bb7e","size":46728,"data":"","first_seen":"2026-08-24T05:11:06.839732Z","last_seen":"2026-08-24T05:24:28.394629Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/3ac-_ulijio8s.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7de6125a40e0ee2f4240778e9b86799e","sha1":"9be16d1ac584790d99132d29b01c70730a90fd05","sha256":"9e40bd8983b80c02df83da86d89ff11582c4f5988ab73bb5e1a56354bcadd5fa","sha512":"0ea118b98f2510a815614bb18835241f5d31a0baa23b39e039effff72644ff9e6c6ce13cab67371d13221eba1f89934c0954e679694e727a0025d7c3a2f87eb6","ssdeep":"768:nSUv9gaKEjBvrxgWsgR08nKFkd71OWRwdGxgVKE:Bvyan95f7oBGxgVKE","tlshash":"e8032936750258fe16efc3c7e02eaa49da385a13d059864cf3974f319b04be86197b1e","size":40792,"data":"","first_seen":"2026-08-24T05:11:06.841903Z","last_seen":"2026-08-24T05:24:28.375981Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/304l471rpmtvw.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83c2bc94a62b0ffdb3f5a00201e1a01b","sha1":"0fe2386c9b72b2570e2a1acacfd4771927815690","sha256":"06e289fe928b578dc8ca96b6c9f4999b910f2382c432ea89bc39902285babb0a","sha512":"7d1d6aaeefe28c4a12f903cf00f5683eb10071ad5613add7aeff52b476ef2eaba526e56d72e32b5cf7a083ea24f289814fc71c56e22699b635765e17dc0ee33c","ssdeep":"1536:mEgAtvj3EpzFiIwYGdZnPbGbaOYd4K7ud7xHpsKcaK3upkr/jCIpWoT6XjGqr:mCqzF2YgZKaOYd4KugakvCcWy6Sqr","tlshash":"5dc3e5f936d5f442076b50aac07f0002f22c4d77189e6860e3e5edda752465de2e3faa","size":124019,"data":"","first_seen":"2026-08-24T05:11:06.776924Z","last_seen":"2026-08-24T05:24:28.392414Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/0ca667o19vf7e.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e89d754029667dbe14a9947a3eb1e11a","sha1":"042e7049379ec789e080b0096e3a87691b534fca","sha256":"bb050568b3a27963e6d0c7dcdb27ba56240734964a5be020d37235820d39aab1","sha512":"21256c2ee53e92248225c3c562b0671bec273046c02ea67a869d4bcfaa79a3cf2bb1c9af74205bfdd97972f18c14eda25a9dd1333668ce3a48aa4490e8b4d937","ssdeep":"3072:KJMerUMkaHPfk3bTCPeKO/yzfKCjsv4jJjfHOri1s8wtpTYpmmR:KJMKLkaHPfk3bTUexC9jsvL2s8wtlYpd","tlshash":"a3042bfa3396b47343db4358903a0001e2798da5305e4829f3a9deda296594fd1f6f3e","size":179479,"data":"","first_seen":"2026-08-24T05:11:06.814518Z","last_seen":"2026-08-24T05:24:28.384143Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/2lzf2zrl10wre.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffb7eabe937cdd99da8189e25dd48d18","sha1":"0d8e0d865b4dddb285824c0efe5da896c02121f6","sha256":"88e8567674ec825e9bbe388925d13d552776d254a94cb636c17a262e87fa9fce","sha512":"26aa6e77dee3bd1903ec01cb0b24ee7dc2b6c8aa1618acdd97c6df3a4ed8186078067c46824c29daff53cada7394c4b8fa7d5edfae436850677591526a92fa04","ssdeep":"96:nv/Say16k94mMI1bMpcLBeIZ7Yv23qK3ytLJ/RSGm5bEcaEppKwuv2YDxSylqR5y:nnSayk6MqLBRD3qK3ErEppPYFRqW7","tlshash":"a202d8b532e4f4e1669e4181c43b401af2551c3e616d60b8b7f98cf92a8048ef567ffa","size":8425,"data":"","first_seen":"2026-08-24T05:11:06.829305Z","last_seen":"2026-08-24T05:24:28.398504Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/1mf_mngr4ebt_.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77e51a068be0d577fb6c8ef5280dae69","sha1":"5301b6925726d13a0768508d312a01b7d34ed32e","sha256":"069facca352fabd077a3e07b1327830e061224f420c00ab6734c8ef14f304f1b","sha512":"73c9830e71c7b0063164c0b6b1eda175062c42ce6732266f0bf3302e28583bc6d76f18ad616aaf74adae2ebd67d935cada84019880c68f13603827fa7049962d","ssdeep":"1536:v0vBL4rllPfu070BrkQesoOilu+DP9BYtOdBcEJ:mBL4rlRmMqrkQesvilu+wtiJ","tlshash":"515363ac43f86b8de70d89a1dfb3a84e69af2b9c768744a0f58c0124d89d5c17603fd5","size":65094,"data":"","first_seen":"2026-08-24T05:11:06.834244Z","last_seen":"2026-08-24T05:24:28.386971Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/20_bwa23al6f1.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"980cb4c7c29de00d61009b6a97b42b1b","sha1":"cbb44dc52e5864b7d8b5094efe4c7993a97408f2","sha256":"6ad2c5046f4e0b87d3228559a6542e58185fcf1b57f0afdcd9d3c9c0140aa567","sha512":"e0c595cd1d86b03f83c85bcf1d1f7edd542b9f746d00478c87515a1bf29bdc278d0c84a3bd1d1554b0c62ac254eb71c67393da7d613f4941d959b5b14f1b3ae8","ssdeep":"6144:0LFRpCQst177P0AzThLSgME4eoZwc/pBbIUEi/ORlLxbxLDdh6Di748Ly:hQc1PcA/JME4eotpRIRRlLnDdO","tlshash":"13645eca154bbb938b0002d6983f3e549e1c5ff5904e9c24fa85e596b878c7d43b63b8","size":311787,"data":"","first_seen":"2026-08-24T05:11:06.817443Z","last_seen":"2026-08-24T05:24:28.387501Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/027lh60b93edg.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1f8ec6e4f1db26f81c60a74d78c282b","sha1":"ead96c5c51fe546dd2618fa502e58d646ccc8c12","sha256":"327107b2807215adf8c429e3ad015c1fa5985a4ca6cd73726720ebf19168e4ec","sha512":"1c28bb5bd8fcd28f68e1e76ac1caf87097ae6ec73ec95d1146b3d77772efce42ba178bc294a3d0081e3c7976b5c3c44c083bc5c56982e15ea367c2218e751984","ssdeep":"768:nSzdCHqLdi8eV1myP5ZAE5t56UFTzDsTqRnyNIC:Podi8eV1mOwsYx","tlshash":"8703e77573d4fa93129781e0843f2016f27c4c7521ad7070a3e88c9b794898da7faf9a","size":38136,"data":"","first_seen":"2026-08-24T05:11:06.825036Z","last_seen":"2026-08-24T05:24:28.372894Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7658288dc307b90910a7dd5da69fe40f","sha1":"ab3b1e490a75198fe80217f3ed7274522bb8bd38","sha256":"816c4a5738c23271ea454e10791b06ed846c369ecd7d8174a6ff0257739f5e3c","sha512":"84bb6e1c7adf5ce6dd4fa4951a42d1f738554a88098d3b4d670e6ed0d052dfb2a6eb3e5334d8095045bc4552bced5c2674d2acb62a430bfe42ebb0e7a74c1288","ssdeep":"","tlshash":"9bd012ec210b2ea889a616219bab620ce00a2212989a41207e1e7385af20a4bd200858","size":201,"data":"","first_seen":"2026-05-06T02:31:03.941942Z","last_seen":"2026-08-24T05:24:28.406109Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/third_party/cookielaw/scripttemplates/otSDKStub.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00e18ce007272081f06532f6f2ee5115","sha1":"0f4a6444348f9bd8ad20742ba6935d2d33245d6a","sha256":"512791a3a47f4481c170b3d8d8f8eb2646f83ce065b521e2659b73d3ab7f2c13","sha512":"81aece6ad1f6b9a3ad89aeeeeab84f3ccc0ffb97c7d0d2e07666ca5bda74b09df2aec3a7ca2d913b73d2fa139ab538cc8fab1a444199cc3d58f3aa71443f1be3","ssdeep":"384:r8k7hIX3xzMABwXeU9LH6rlIgknE8eEaRgCyu8Lc3LKvTJ9x4AaHKJx686S:rzIxAABwXb9wvknECPCJ87J9ugwS","tlshash":"a5c20989b040fe3447d251dc993be25a723a746d3486c168f858dce0647dc4b6633bba","size":26840,"data":"","first_seen":"2026-08-10T05:13:17.560131Z","last_seen":"2026-08-24T11:32:57.381737Z","times_seen":4103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/1ifh7lx8zj5ig.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bfec3b85f220d5e7ec8f481f103a8f8","sha1":"1e73360226b68464f6a9d7097394b6c57c27e55f","sha256":"5413ceb0a466a4d031dfe5fa89c20a3353eef627eb0617f347282453f2292d31","sha512":"dd1665bd97c197b371bca43605f3dd9b5539c6f74710fb34379ea2fc0690abc418bc68d02afbaea8eed47e5ed23aeef318db45b2faa98a06197374de3bf0d5de","ssdeep":"3072:ULqAZO8hlCs9N0tZltOUNYuJ1qcmqfn61HD8hvOsN5sTIt5d:cqAQ8hlCsnOllfiHDMFN5sTIt5d","tlshash":"17340be83995f562aab302a710af18037338252b280d4d60b351fd9db57845eb17bfde","size":234578,"data":"","first_seen":"2026-08-24T05:11:06.822875Z","last_seen":"2026-08-24T05:24:28.388051Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/third_party/cookielaw/scripttemplates/202604.2.0/otBannerSdk.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3da42a6132fc415f2298f58a13c66e3","sha1":"cc8ee82f3229867d024391e6457e0338f5a0a72e","sha256":"54ea9e57fe5a72f2654b859fe2fa7883e7bbc2208ad317333a59d2a438ed829e","sha512":"1fe38d1da57313f4f50713a398a769ca3f280cf4bd0e6bdad4c43f3dab682b0d0deff5ed2f6b9b5ee974e07361249ab41ae6f28e639f83f3c33e9fc7d12216d1","ssdeep":"6144:IaGXAs51k3m1pvx3gcNC75GD3WLBLcJ4aHo8MD4dCRfQuxZtnVi1dr8o:Ia451k3m1pOBKo8dCWuxZtITF","tlshash":"57c43a4d7590753547e762b9c02b510ab63574acac8580acf41cc4f90bf9f862aa3fbb","size":568333,"data":"","first_seen":"2026-06-25T20:21:55.485529Z","last_seen":"2026-08-24T08:59:52.21427Z","times_seen":908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[SABESP-OFFLINE]camada de mock API ativa. Rede bloqueada para /api/* e geolocation.","filename":"https://sabesp-agenciavirtual.com/offline.js","line_number":17,"column_number":33},{"level":"log","text":"[SABESP-OFFLINE]MODO ONLINE (débitos via API real, via /live-proxy) — acesse com ?mock=1 para forçar mock.","filename":"https://sabesp-agenciavirtual.com/offline.js","line_number":17,"column_number":33},{"level":"log","text":"[SABESP-OFFLINE] reCAPTCHA mockado (widget 'Não sou um robô' local).","filename":"https://sabesp-agenciavirtual.com/offline.js","line_number":1054,"column_number":11},{"level":"log","text":"[SABESP-OFFLINE] preload externo bloqueado (setAttribute): https://www.googletagmanager.com/gtag/js?id=G-85FBZZH8MY","filename":"https://sabesp-agenciavirtual.com/_next/static/chunks/1wnf3ejne19dv.js","line_number":5,"column_number":103939},{"level":"log","text":"[SABESP-OFFLINE] script externo bloqueado (tudo local): https://www.googletagmanager.com/gtag/js?id=G-85FBZZH8MY","filename":"https://sabesp-agenciavirtual.com/_next/static/chunks/1wnf3ejne19dv.js","line_number":5,"column_number":103939},{"level":"log","text":"[SABESP-OFFLINE] script externo bloqueado (setAttribute): https://www.googletagmanager.com/gtag/js?id=G-85FBZZH8MY","filename":"https://sabesp-agenciavirtual.com/_next/static/chunks/1wnf3ejne19dv.js","line_number":5,"column_number":103939}]},"http":[{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/027lh60b93edg.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.572Z","timestamp":1787549029572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/027lh60b93edg.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XR4NxUks4qGlDZpMQozLZ5pfjUNFTcmJPFbRZ0GUxim0GPBRfwZs8VetYk0gGOfoHs%2FuaKyNLy9UosZXXgoz%2F2Qihn52ioXUakyLPnUHOpaogSpS1xS%2FmCjEMMNj7xcaO%2FGjwWyNikF5%2FP2J\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5acd6f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38136,"size_decoded":9608,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17768)","md5":"a1f8ec6e4f1db26f81c60a74d78c282b","sha1":"ead96c5c51fe546dd2618fa502e58d646ccc8c12","sha256":"327107b2807215adf8c429e3ad015c1fa5985a4ca6cd73726720ebf19168e4ec","sha512":"1c28bb5bd8fcd28f68e1e76ac1caf87097ae6ec73ec95d1146b3d77772efce42ba178bc294a3d0081e3c7976b5c3c44c083bc5c56982e15ea367c2218e751984","ssdeep":"768:nSzdCHqLdi8eV1myP5ZAE5t56UFTzDsTqRnyNIC:Podi8eV1mOwsYx","tlshash":"8703e77573d4fa93129781e0843f2016f27c4c7521ad7070a3e88c9b794898da7faf9a","first_seen":"2026-08-24T05:11:06.825036Z","last_seen":"2026-08-24T05:24:28.372894Z","times_seen":2,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/1wnf3ejne19dv.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.579Z","timestamp":1787549029579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/1wnf3ejne19dv.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xIRHeHxIoUv8fFoNz8bEOEQpm4totTxvONIGzCgWrtDQ%2FXYKmnjkcrSZKQ4T%2FlzhhHKbyqZDvorg2S3OhR1h4ei7se2Id7%2BQBqEHwLBaZxzet6Df4k7QayZQ%2FuFnyhSdGb5r0LwwPm2ItBGc\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5add748deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148855,"size_decoded":53909,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42228)","md5":"0ff02cda97f472af2c38357043961288","sha1":"de40709fb33dcb7e06c895dcbd10d84ee44fa341","sha256":"e97e55ef02321bc1369516348a9ee930ecf5d59f97905d368c141554280fad4d","sha512":"79731c06ca0c03a9425c20eed228b78a1e6b652b11ab747bcec3f1e3ec64a15982c684d1e3ba1ceb5c9b3a87e03600f8c60a22b533e81c42c39b824f0178697a","ssdeep":"3072:BDdXpvpJHPTYgr+KV3LEvz1DKR3DL5qWEDDBh:td5vfHPTYgjZLmsR3DFmDVh","tlshash":"a6e34af977827073639b212a507b0101b3794989640e042cf7bae59a2df654e93f3fb9","first_seen":"2026-08-24T05:11:06.757233Z","last_seen":"2026-08-24T05:24:28.373884Z","times_seen":2,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/3ac-_ulijio8s.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.583Z","timestamp":1787549029583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/3ac-_ulijio8s.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JuSZBX9NCYYbdlhaoBm90LcLP0Zkw7r4HiK8wyR4fhe0Bkks24YZAgw2F%2BmhbuDbqsfYuALNNvZxUSBwa7MtSJ%2FAOHVjpfj6ihQsW0VNt7JRariSpCgubkH3ZZZiOnOU4YGtXj3mNpTRAf6%2B\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5aed778deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40792,"size_decoded":14901,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32502)","md5":"7de6125a40e0ee2f4240778e9b86799e","sha1":"9be16d1ac584790d99132d29b01c70730a90fd05","sha256":"9e40bd8983b80c02df83da86d89ff11582c4f5988ab73bb5e1a56354bcadd5fa","sha512":"0ea118b98f2510a815614bb18835241f5d31a0baa23b39e039effff72644ff9e6c6ce13cab67371d13221eba1f89934c0954e679694e727a0025d7c3a2f87eb6","ssdeep":"768:nSUv9gaKEjBvrxgWsgR08nKFkd71OWRwdGxgVKE:Bvyan95f7oBGxgVKE","tlshash":"e8032936750258fe16efc3c7e02eaa49da385a13d059864cf3974f319b04be86197b1e","first_seen":"2026-08-24T05:11:06.841903Z","last_seen":"2026-08-24T05:24:28.375981Z","times_seen":2,"resource_available":true,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/third_party/cookielaw/scripttemplates/202604.2.0/assets/v2/otPcTab.json","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:52.358Z","timestamp":1787549032358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /third_party/cookielaw/scripttemplates/202604.2.0/assets/v2/otPcTab.json HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eziPoKxdi3LScrUzWOYOFbW4Hvy63K%2B13CLCYcT8mz%2B4VxiCYgBKZbwaA0REQ%2F06WE9czF3jaBoD0rNcJyj9mfe0eBxeJaFuv2f9FFkmeKKvhMCAs22HOut%2Fh0hNklEwiVixzMLN%2FZJMNrDu\"}]}\r\npriority: u=4,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed6c3ef58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69312,"size_decoded":16793,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"33a5b7f529dd1af60364d0d43a409036","sha1":"0aa9e7fd96da5fe40984f2fcc54e08fb7be5386b","sha256":"c482b24b3fa85ab02420d992dad271ee5687591954e51e39bea6c400f45413ae","sha512":"d046d47c4318eeb77d438a34fb996aaf0ebf46890650ed583c1f93b90bc08b3b19eb64c4010792f0b31d693841101161e284625b0352629844d3eb0d9af49ab3","ssdeep":"768:6pl23MgWAxTh7s+pZXKOq3wORCPcU85xv:N+ugQVe3PRvU8Hv","tlshash":"bf63d99b3aa1530afee3cb19eb926de97124c81fbc335dedf1024678868d3e18d51509","first_seen":"2026-05-06T11:06:33.593464Z","last_seen":"2026-08-24T05:24:28.376713Z","times_seen":1015,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/1q33ud1wn_esw.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.562Z","timestamp":1787549029562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/1q33ud1wn_esw.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fwIZv8RKzWVLc%2BiELAg7pJjpFHFO8bKYUpeiqEiIskb2yuoAuOzlzDrPn0dVKAE%2FCaHtkPzCeA0Jx2wNzmKgb3JK4N4TVZGYoq3sySxDP5Vwjp6BMHGic1q8SrkGczuSKEn6YOKGl6K2Bti\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5abd6b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35540,"size_decoded":11568,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35205)","md5":"bda98ca0055f5797dc8b0cef6a34fc8a","sha1":"55d981c9d5a177705034f87c9aa656eadca3d867","sha256":"13d4bfdc3c9fe3ec78953805f8bf4bf73390a7b4de7398910f3dcecc60db0ce0","sha512":"a3fe00b1e20aeaab228ff5e52bc6696009f8a37bb299c018eb7cc4bd4ea21a2dda5eb85926b2fdf6e6649771613954ec7233d9a33385aafa56c1ed3097f5af45","ssdeep":"384:nSKHbhYj31W2q+GWhJKHXtRIq0Vzaeo15yjZU9P3PPFiGkmyZdgwRIPOyOX3v35i:nSKw3g2q+nJhqFSDZYuX/plmkzNBsYg","tlshash":"3af295a571d6fcd202974094843b1007f36e0db624ad74e4e7f6c8eab960a4dd0b6fa9","first_seen":"2026-08-24T05:11:06.803401Z","last_seen":"2026-08-24T05:24:28.37745Z","times_seen":2,"resource_available":true,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/third_party/cookielaw/logos/0561f8b3-8909-4d9a-87a5-a1c4c0f7b3f4/019c2e03-1f6c-7851-8f33-e39718e7f9b0/65cd985a-e55c-4010-ab68-2c474d79f76e/logo-sabesp.png","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:52.946Z","timestamp":1787549032946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /third_party/cookielaw/logos/0561f8b3-8909-4d9a-87a5-a1c4c0f7b3f4/019c2e03-1f6c-7851-8f33-e39718e7f9b0/65cd985a-e55c-4010-ab68-2c474d79f76e/logo-sabesp.png HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jO%2BQ6fHSTZ7iMNwdvOTvu90Y6J3B5gKirne%2FK7yGf7Ox7%2FuZhttKXGtyrMrFgFuM5DwBFn7Bw0kebkLLnf62EJAMQPdLNiAYfwP3arTrYpKuNSlnQfUssGPfwhOz%2FPqA%2BoUoQgQwYy%2FamhCf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ffed6fef348deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4247\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4247,"size_decoded":4939,"mime_type":"image/png","magic":"PNG image data, 256 x 54, 8-bit/color RGBA, non-interlaced","md5":"850392ddc1549c75a700f8693cb1c9ab","sha1":"ee3faa9f34154be2cf67748de4f5be801e569131","sha256":"1122146440bb355bd66222f55810adeced0e9a60b51bca16aac8039959fc0a45","sha512":"827d2af89cf6d4355a273da9c43957673c8eb75d0b8e2f9e66587db74e449b19a7a6c9abc263830cecfd18b81658fb53ea28a108e0fe0dc809146c3e64f3f204","ssdeep":"96:jSRl+eezteMaQMk0QobPtVyU1KI736og0PDwPELjz:jSRl+eeRaQWtV83I736ogNELH","tlshash":"0c918eee931228d1de4614dbc05173b27dd7be16b1aa7113b40819e8bc12d3a97b4cd5","first_seen":"2026-08-24T05:11:06.798069Z","last_seen":"2026-08-24T05:24:28.378363Z","times_seen":2,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/third_party/cookielaw/logos/static/powered_by_logo.svg","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:52.948Z","timestamp":1787549032948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /third_party/cookielaw/logos/static/powered_by_logo.svg HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2BjoFtuHxHqIwpoNFF%2BEcVMbpZpSZHDYfRN5%2FzNp%2FkkOQEA0fWDHDNbTxtTGj28BT%2BkexqVYgWLMVMTBhr4o9LCcnE9NOULbnclJGKVfjMVuJ56lp66ItgW7wgem67mNSYd6tcO2o2QKsgI%2F\"}]}\r\npriority: u=5,i\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed6fef358deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5445,"size_decoded":3114,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8c7a294aa7aadeb834c6d5e3627df46","sha1":"5e2107ce68c4286a0b80648b19e7b5a7e7cad702","sha256":"cddd450a33be5e50d6f27aea78d2e278beae2762678b22fc2dcee8de29cbc0be","sha512":"881abe7bef6955139eab994ca4769c3d94568c27b51871a7b69e71db70110c4a80647803d661ba198ff9155de75b30c91f6ef2e7ed1a516c483ab2e5830cd337","ssdeep":"96:9ui6WcChyXQBHEOJ3a6XJD8ThcAbnNXGTvkWsoo:93/hEqDPXJwThcAb5Uvjq","tlshash":"26b174d67fb4a4f458859ffede1b59a9765b74f97b63c68c823c8f2906838c08548c04","first_seen":"2026-04-06T03:34:52.903175Z","last_seen":"2026-08-24T11:45:31.305021Z","times_seen":62900,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/public/services/bill-payment","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T05:23:48.967Z","timestamp":1787549028967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /public/services/bill-payment HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6tZ4tpcLQbpe1lHUBcrgmSi%2FsM%2FZjNtV2xge%2B1pSfNoyvQjzYSCSm0d9mvSv%2FGfFJAgxybs1wp%2BEzONzuFtQYEZo2zNmJelA1XyTT3zLxzvPR2zPfqivauRvi799%2BxWQ1gX11D%2BNk8qNEp71\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ffed570d338deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29126,"size_decoded":6675,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29109), with no line terminators","md5":"f69d59e89696fcc6e4e28136843a137d","sha1":"0b1768b06f7d3716d47ca80f9a79a33158f0248b","sha256":"c4eb8b2f049b8fd8e444df0177d1da0ef28eadacc0a939d24d00a05baaf71e72","sha512":"98c3348d210083e99506e77956bd628eed42fbe3b42265c7bb0ccb0ddcc8282c0893709b8dc1af550fb703dd81c47dc3f0a38fbbfd8f3cfb93b100bcd4519ec4","ssdeep":"768:E+NOZeBufdgJxoi+IGiwW8DD6RbCTFAQW:zBufdgJIZWGDC","tlshash":"03d2651bbc09ee059d379d6e113d7e3650c8d977c634c86db2cdce580582aba4be9c80","first_seen":"2026-08-24T05:11:06.773185Z","last_seen":"2026-08-24T05:24:28.379661Z","times_seen":2,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/05y5y689_5ncw.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.561Z","timestamp":1787549029561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/05y5y689_5ncw.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lmqwxVu6dYj4ZHstQWz%2BbQe6BoERnKZVUpZgH2f4VaC7MOOcq78u8aAbLa8CzOgAlOUUIfW2iltLdlMBeQaIPgIU2EpAjnLObi5VimlKgbhlrywOT0PNJEXp9k7pzOaAdWKCSdohVR4O2eh9\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5abd6a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55170,"size_decoded":21184,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36802)","md5":"78459d942c213538d4f9a6d8c70173b2","sha1":"c5c0dd31165ded25eaee0f7e14e2f59fcb263cfa","sha256":"cb1b14d4c0423febfa35cb25167e3243231fe412a6959d5c6a133fded9d09c9d","sha512":"3e8332187847d8259786743541dcbeca7deadf72af2e74105c6d826ed6cdfb3831965910ec08ebaa4a37dd0ad00cc30da2d0fcfb3e7b7d0c8c0a4ced20b91bb7","ssdeep":"1536:+GhwbR04Zv30jif++4obT0iON9g2cehxOxR/wiqcX:hhwm4ZsA++4nN9g2cLxR/p","tlshash":"e043c5e973d27532079b0225903e4107f3ba9d94104b5928fb68c9de2eb444ab2f6f7d","first_seen":"2026-08-24T05:11:06.80069Z","last_seen":"2026-08-24T05:24:28.380257Z","times_seen":2,"resource_available":true,"data":null}},"time_used":706,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/turbopack-129altcwekcck.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.574Z","timestamp":1787549029574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-129altcwekcck.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lEjvkPYA%2By5KxZXFLTEsWU3cM%2B7IG5ZwQAK0aC7Vrysq4blTj3RXRFNK2S2QApk8hKK0Qon0V7v5RWAMNmckkGUhI%2F3VzV9vPVXVSDkCX9In9cTBFEPIiZoXwGy44kwonJYTB26IxQLwpVqC\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5add708deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11454,"size_decoded":5485,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10680)","md5":"95a84f5c8828261857f28832b733f12b","sha1":"174a2e9ee5793b51aaef0e48c91332586d34112e","sha256":"bc44c1cda9e3b8b1653eb3c3627fe6baf7e582f2441b0c0c4ccc5fc20622b415","sha512":"3fbaca9fde0dfa518a5d3803d6fb88d8556a62d52da3c919c7b97155e0c63bf34b1e0e255bda0e66c9068b8bc0ef9ae9f58f9faa3e2bcaeea45c5c6d2c01b56d","ssdeep":"192:nnSzmGr4gM6B68gEsg6d2hE7oGElpETND+S3sBT4fCT3cXX6hfHiryLxX:nSHr4gM6VLsElWyssqCTMbyLxX","tlshash":"a532c6da33a6f07343af90ead07f4004f1794469145d542cd36ca8fa2c399aa85e7f76","first_seen":"2026-08-24T05:11:06.779958Z","last_seen":"2026-08-24T05:24:28.380869Z","times_seen":2,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/2gonsos2wvcvv.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.588Z","timestamp":1787549029588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/2gonsos2wvcvv.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pi3%2FCDcxHy%2F1Jit4djoEYRgh%2FpiFQgNxLn79xBQnycrDhRiBr3wLXLAd68WsEv24qeOJcrI5G7XZpfuKNA0o3CM7%2FYnIbaCz5P%2BvUltBQoRHz5AOt%2FSgWiygc8%2BVgQ4N%2FwEjQbq28OUxUbP\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5aed7b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65023,"size_decoded":19835,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64589)","md5":"18f82b8f6e871ccca7e96fbc3aa54d0d","sha1":"5807eec296a3ca37b8968bf1650194d1dafd7cb8","sha256":"89a5e964f657d4a830ba1c13a07c85bccd63840bc2bd9c6f788b0933c68664ad","sha512":"af01c350d235f872c3a2c85b53814b3850e22375208922050687d6e5e77b99f4224d0a9456038b0fa2acc12500aab53094b7267925c261200f862c1cba389645","ssdeep":"1536:FSek7eu+Uc3bmyCDwcy3DOm5I+dQodEfdUzlvVQmPGM:FqKp3bEDwPFwU7PGM","tlshash":"c7530954b085afecaa7704d9d49fc00cb01d3e5cce0ed865faf96c252a948c07a97bd9","first_seen":"2026-08-24T05:11:06.762103Z","last_seen":"2026-08-24T05:24:28.381714Z","times_seen":2,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/assets/images/Logo-Sabesp.svg","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:50.373Z","timestamp":1787549030373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /assets/images/Logo-Sabesp.svg HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=id7vhoxgkjXfJaQi7uKt9EsBd4b06epoOx5sbcyAaOkiz1H4mL6pOycQwC6OWG3Jbj8AJsRDgIF%2BMoxE%2B4mXr%2FpZgbaUJSJhRrEp0n2c%2FBLztWdB6is3kwDH%2BgblboBC%2BB189d%2BQjU6TkWEk\"}]}\r\npriority: u=5,i\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5fddc08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1258,"size_decoded":1391,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"279176e06fc9ed03f6986160abb7ea11","sha1":"981cf07261f9a5f8de1f150c38a0e93b6f9c34f4","sha256":"46e01acc26b5255c4cf4e76b971e06bf0e69f264920283d00c782229163b4d1e","sha512":"9db97c22ac398cc9728312800404fc9960c0e1cf972852286bebda6a675f8c54a1fdd0ddc36fbe3c4d5de4c3c8a9e8647646fd01b6a94294dffd934d95dd381e","ssdeep":"","tlshash":"fc2142fef392b285e84dc7e8866ad8b072bb34fa3e11878505d45514f25125dc805ccf","first_seen":"2026-05-06T02:31:03.914742Z","last_seen":"2026-08-24T05:24:28.382258Z","times_seen":3,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/third_party/cookielaw/scripttemplates/202604.2.0/assets/otFlat.json","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:52.355Z","timestamp":1787549032355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /third_party/cookielaw/scripttemplates/202604.2.0/assets/otFlat.json HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qk%2BvfL2fEYWV0QUcO5QT3vxgfRMBDjjQ2LRdM01%2Fy9ua0lqt4Vwj2df3L5IGrBFHoIamVTThlNxmB8bYXAcWheSJY2XeZ9T51yfI79123cVCAWOwkMCc6HmG05iwIHuQ19K3VrH%2BkGEH7JaE\"}]}\r\npriority: u=4,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed6c3ef38deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15298,"size_decoded":4186,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d77f5085c3cad1c4a3ab27c98cc6ef74","sha1":"07020d14261b2f097ddbea62e905acb2114c1e90","sha256":"924aab78a72b813e29392d76920c66dd3505702927a01754c1ab171eaab60197","sha512":"7521751870e8b0ba6587ef74bcebe5512b3b8abfb1565780b997b1ef30b163097863fcb0f439f21519c2d1ac729335ac0dcc7db95062ace3bd613c812af6a6d1","ssdeep":"384:KeD0cGDjbn42OhOT85csX1NFyNUV/OoH6iAHyPtJJAR:KeDic/i","tlshash":"e26276523e104b29e1ebcb991883b5d835327d8bfd33a8dd924da3b842ed2f50d26745","first_seen":"2025-12-01T00:30:25.314779Z","last_seen":"2026-08-24T11:28:14.775834Z","times_seen":11858,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/3n5cn5z1c1l4i.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.559Z","timestamp":1787549029559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/3n5cn5z1c1l4i.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGrlPmMfN8hjRoTDZuLSufG8Qo2o6wDk1KXPSYXeUBA9UhHhrQMKNxalVNZwQ%2B1NT4gFEHaptJSXQ0vNxDE8CFxHwcIKmNxPp9A4EnGJQcvsSNk%2BJ1XPx1GAMmGT8je7OJx6kUBNE%2FyHEhiW\"}]}\r\npriority: u=4,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5abd698deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31842,"size_decoded":10475,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31507)","md5":"6089b1184c9241576ba2e7e902034da5","sha1":"f861daecb3275288983e20f725ca653d31570e4e","sha256":"b2aa1a0bbdb59f79e89989b704d92ee8029e4fe87d7e5ff188dfb6636ec23a9d","sha512":"b58404cbcfe470162c0ed52b6a85b25a1157df488e64dd258134d8f857e0f9ed83a3493c05090a244b13bb63564643843807cb3689c3c0f94ddc48ffbcbdd2bd","ssdeep":"384:nSxrB83kzzJ8oRhr6zzvM/C7lAGna7D3o4m98JU6tgG4KH/WCKcudL/e2FdkTd9y:nSxrB834z56zI/CRpno44u3bEVQx","tlshash":"1be2f6e971d5f472479354b5903f000bf23d0db2285d58b0a3a5ecfab9a898c9133fa9","first_seen":"2026-08-24T05:11:06.785484Z","last_seen":"2026-08-24T05:24:28.383418Z","times_seen":2,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/0ca667o19vf7e.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.565Z","timestamp":1787549029565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/0ca667o19vf7e.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2BYwYdE3zZmxUIn9ej2kBs1MFbHICMAQrJaCPaQUeuW2yT7wFj1qj4DZlReO7lQl7t7G2yTngRsghF7RscZimi0Je6KZmi%2FShawj9Xxc9bs3dliumPfHEygjOZGxJOtZ%2Bn11V%2BAA5g36hnzv\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5acd6d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179479,"size_decoded":61411,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44286)","md5":"e89d754029667dbe14a9947a3eb1e11a","sha1":"042e7049379ec789e080b0096e3a87691b534fca","sha256":"bb050568b3a27963e6d0c7dcdb27ba56240734964a5be020d37235820d39aab1","sha512":"21256c2ee53e92248225c3c562b0671bec273046c02ea67a869d4bcfaa79a3cf2bb1c9af74205bfdd97972f18c14eda25a9dd1333668ce3a48aa4490e8b4d937","ssdeep":"3072:KJMerUMkaHPfk3bTCPeKO/yzfKCjsv4jJjfHOri1s8wtpTYpmmR:KJMKLkaHPfk3bTUexC9jsvL2s8wtlYpd","tlshash":"a3042bfa3396b47343db4358903a0001e2798da5305e4829f3a9deda296594fd1f6f3e","first_seen":"2026-08-24T05:11:06.814518Z","last_seen":"2026-08-24T05:24:28.384143Z","times_seen":2,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/1cwem19sdy4qv.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.577Z","timestamp":1787549029577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/1cwem19sdy4qv.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YOj%2FHdnhSQ9gGT07Pa2FVfbWrU1OJScvzr1a4G6J9wV3M1jZvCHCacJLOxbkIeeLpHSV%2B2pcWczgREvg8VgLuoNR80xIqJgq3uDV6sTfsfxYGw2ldfKLMmjheADWaIH9I3ODg6hpjqK49BVw\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5add728deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24284,"size_decoded":9429,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14664)","md5":"dab93f235236e8f63f77bc532d0ea6e9","sha1":"0ba39c364b6ca97c51c9378dea406dcbe9f19d52","sha256":"b99762588553e12063802a2c04d7b23fb8b729ecfbb09ea0e6340852ba0ff360","sha512":"fe20220b4f074454bce0a74bb33bebb4d257fb3dc5ce4f1a6ea8112758e7ca1750594057e028a5195f69b31daa19a223a88b83bc1567b9c89c8c21ed34c75b65","ssdeep":"384:nS0YaeWwthQQVlR4oUuzMpjq51j9Gw2My9feTBq87v4FThuB1waYSVRo8Wv:nSg7wD5GoLMtqP2xqr8kBNYSM","tlshash":"6bb2f8d57651f4a113e781ee843f1001f33a193a500ea478f7a9ddfa2a71e8f60a6f25","first_seen":"2026-08-24T05:11:06.788887Z","last_seen":"2026-08-24T05:24:28.384707Z","times_seen":2,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/1oeffhlqtener.js?dpl=dpl_Gf9V9WrzVhkFhdFNnpykhCo8wJmr","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:50.575Z","timestamp":1787549030575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/1oeffhlqtener.js?dpl=dpl_Gf9V9WrzVhkFhdFNnpykhCo8wJmr HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AO5m1fLvAc5KIWi9IN7UsPw%2BxppyP0rF8jvgydFD%2FACge%2FRnwAh4Kq%2BrBN28RC39EcWQ0ePxoFCHRIMmB7M0V0yF8SDu%2FqhL7Tw1RL4o0IhOdAw94OT4EIHuRzXnOg1zh4DJ8Nq8gjznJPhT\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed611dd28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28298,"size_decoded":10991,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27963)","md5":"abd1cbaaf68e579bb94baac480a14992","sha1":"b606065fb0398cb328de9799fa22ad174eecaf57","sha256":"8e231fa45d75d9367c7f7367cc9403c09d6ec10d72d1d5fda69511161bf303a3","sha512":"fa91fb5ca36854c33f47367ef283f01f6f2cfbf2412f9023f2af78da3a9c9e1393803f8c5b2e85198dc7f00f6ed9471572ef4d7657536fa549e451bdce06b864","ssdeep":"384:nSVNDMN3O03Ar2XvfU+78g1WmRT2bCYYwzbIdcqSMBStc22DgayrZP+65ksfd1VI:nSVNDMN3O0lM+78uWmhOX0y19usl1Kz","tlshash":"e1d2c7a63202b26277ea8185c83b4119f77a6a18200e412cb5b95df76872dc6f0f7f75","first_seen":"2026-08-24T05:11:06.74792Z","last_seen":"2026-08-24T05:24:28.385215Z","times_seen":2,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/third_party/cookielaw/consent/019d4508-d29f-7efc-983f-b3e5a974d7b2/019d4508-d29f-7efc-983f-b3e5a974d7b2.json","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:50.707Z","timestamp":1787549030707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /third_party/cookielaw/consent/019d4508-d29f-7efc-983f-b3e5a974d7b2/019d4508-d29f-7efc-983f-b3e5a974d7b2.json HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MdqJlAj8Lnc%2FIHzZ7J7b%2B77c1Ly49ndMS7dPGxkuOkHKh3qGMw9O5S1ghyR0dmFPA0zXwf2%2FPBBOcGRX07h1hEgTrvjJYn5nQSgCvmJNb1XnAN71AK%2Fsmx1BpEeh2WMEAgSwaMqXfdxBcXYm\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed61eddc8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5057,"size_decoded":2743,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c2668de8773570d5c4f70bd0cd962eef","sha1":"12c7c461fa25cf24e04784d12a3ce43fd72182fe","sha256":"bb12c06a113e64afa4356ada391b39a99cbe9cc82c8689b99e63e02bce1a3121","sha512":"9288ff18ec11599d9f906982d1f1641cd27c80173223d1a0f85d6fb852997de75519cc0a3e057aa07d5b94cedcfd278f987b317e748fcde7d36df43de9d52776","ssdeep":"96:npyI44zLH3vWRo9v1CdDEKGa6AyxWRN4N454H4XZPyY2fzYgvzXoS:FrORo9Cdz6vER66WYTGkgroS","tlshash":"4aa1421db70da07dcb5a83c5d468fe094bec393211c57818d44f4d6c2aab7b71ca6a2b","first_seen":"2026-08-24T05:11:06.819942Z","last_seen":"2026-08-24T05:24:28.385878Z","times_seen":2,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/favicon.ico?favicon.2vz2p3q6mcy4y.ico","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:51.197Z","timestamp":1787549031197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /favicon.ico?favicon.2vz2p3q6mcy4y.ico HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:51 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ymPHf3%2FEWcmJRwYDrX%2FKmZsBmCel%2BNaanh%2F5nxksL9IJW5YeQUWhapRwdcEs1bJXAlTCe1VV3eux2TF122xlaNYrIpYscWnSLdWP6QPWr8bBI89tzxfvG18R9%2Bv6v4%2F38VZ4I6R4kuCS9Zy3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ffed64fe028deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":729,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"22e6e6cca2aa34448fb9a003bbd86681","sha1":"6247f814cd6d984d0ef04b1a6c40c55cf339ae7e","sha256":"00ff05e0e1cc57627924ad0a1caaa5cd9ff1421404d4e27f3457c2d161a91e21","sha512":"737abf12f316e0b7b1da6df6d2f9ebbd462340fbde6316d6a4dcbee45bb60b6ef844c46316739a2511ff52c9fd0c105ac70365e9cfd4505c26bffd10654fb9ed","ssdeep":"","tlshash":"9b700000802082802080020020008008800eb202ca002a83822a30820a8000000020b8","first_seen":"2026-08-24T05:11:06.769895Z","last_seen":"2026-08-24T05:24:28.386371Z","times_seen":2,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/1mf_mngr4ebt_.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.592Z","timestamp":1787549029592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/1mf_mngr4ebt_.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XQhhq3ejy91pzo45FpQ6qGLfP1mHGOC0VQROKaCtoTRLrX9YXdT56Kiq92%2FUwwnbXD%2BKsD8KuC9lFbiF0TC8l69C%2BVE3a1ynwFApP9eppex8BRzsjlFayT%2FuNfTH2duBwf8BpSEOJiclfTgH\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5aed7e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65094,"size_decoded":17134,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64759)","md5":"77e51a068be0d577fb6c8ef5280dae69","sha1":"5301b6925726d13a0768508d312a01b7d34ed32e","sha256":"069facca352fabd077a3e07b1327830e061224f420c00ab6734c8ef14f304f1b","sha512":"73c9830e71c7b0063164c0b6b1eda175062c42ce6732266f0bf3302e28583bc6d76f18ad616aaf74adae2ebd67d935cada84019880c68f13603827fa7049962d","ssdeep":"1536:v0vBL4rllPfu070BrkQesoOilu+DP9BYtOdBcEJ:mBL4rlRmMqrkQesvilu+wtiJ","tlshash":"515363ac43f86b8de70d89a1dfb3a84e69af2b9c768744a0f58c0124d89d5c17603fd5","first_seen":"2026-08-24T05:11:06.834244Z","last_seen":"2026-08-24T05:24:28.386971Z","times_seen":2,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/20_bwa23al6f1.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.593Z","timestamp":1787549029593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/20_bwa23al6f1.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5TDS6FET6xZ%2FouPjvjB0TEMxV%2FByECkR7Pb2Pl6M0FfqddYs58%2FIjV6JSUb%2FobnT4A%2FNCPW2%2BKjqsEF6d%2F7yGAVf%2BGNG9q3aK7FMg8KHvmQQ841K%2BbVNakKskQcFhLv%2Bjqc8nGzEa4N6TYjQ\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5aed7f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311787,"size_decoded":80073,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56768)","md5":"980cb4c7c29de00d61009b6a97b42b1b","sha1":"cbb44dc52e5864b7d8b5094efe4c7993a97408f2","sha256":"6ad2c5046f4e0b87d3228559a6542e58185fcf1b57f0afdcd9d3c9c0140aa567","sha512":"e0c595cd1d86b03f83c85bcf1d1f7edd542b9f746d00478c87515a1bf29bdc278d0c84a3bd1d1554b0c62ac254eb71c67393da7d613f4941d959b5b14f1b3ae8","ssdeep":"6144:0LFRpCQst177P0AzThLSgME4eoZwc/pBbIUEi/ORlLxbxLDdh6Di748Ly:hQc1PcA/JME4eotpRIRRlLnDdO","tlshash":"13645eca154bbb938b0002d6983f3e549e1c5ff5904e9c24fa85e596b878c7d43b63b8","first_seen":"2026-08-24T05:11:06.817443Z","last_seen":"2026-08-24T05:24:28.387501Z","times_seen":2,"resource_available":true,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":370,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/1ifh7lx8zj5ig.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.569Z","timestamp":1787549029569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/1ifh7lx8zj5ig.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2FnCW074sH460LwSWDwJ6wFJiTdFNJxleetmkF5XmAPT8Op3P%2BlnrFG36ePOB46R1ZGORvy%2BIQRIZ%2FfDeuzDOXDNjdpHTQPKAoDngNGQ3ATs42IA77qGkXB%2FwjTrb7R%2BcLojKGnaTgWgxnM8\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5acd6e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234578,"size_decoded":76074,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65251)","md5":"3bfec3b85f220d5e7ec8f481f103a8f8","sha1":"1e73360226b68464f6a9d7097394b6c57c27e55f","sha256":"5413ceb0a466a4d031dfe5fa89c20a3353eef627eb0617f347282453f2292d31","sha512":"dd1665bd97c197b371bca43605f3dd9b5539c6f74710fb34379ea2fc0690abc418bc68d02afbaea8eed47e5ed23aeef318db45b2faa98a06197374de3bf0d5de","ssdeep":"3072:ULqAZO8hlCs9N0tZltOUNYuJ1qcmqfn61HD8hvOsN5sTIt5d:cqAQ8hlCsnOllfiHDMFN5sTIt5d","tlshash":"17340be83995f562aab302a710af18037338252b280d4d60b351fd9db57845eb17bfde","first_seen":"2026-08-24T05:11:06.822875Z","last_seen":"2026-08-24T05:24:28.388051Z","times_seen":2,"resource_available":true,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":388,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/3v-1i7cowb9ri.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.575Z","timestamp":1787549029575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/3v-1i7cowb9ri.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q4%2BeoRqO7%2BPSuQ%2BQ20i1VUYkdb8QlkaLAkb8OTyhD0%2BhJYvKmgx8xccWCQP3OhdE09JpkvhRlk%2F%2BcGi7ezIEqUXJKXcFxmPz6actLRKjGTpfl8ouCortDoLsneqGxO4HqigvNX4yn3n1QeOx\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5add718deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13065,"size_decoded":5309,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12730)","md5":"3387a28ce86be844718611036f46c7b2","sha1":"21853569063a1acbd6372b1ef16bb710ab9c556b","sha256":"6a13809481c9d3dceac1f6b048bb89659724b39ec11ae5c3814d76cb0fd4b2e2","sha512":"d4977058bd75cf35868bfae1dbb9cadb5c0884262853ec30c99c705e5f0eba0aa719d7cf7163ddf1f6264321ef79d5c0802a09477c94e1a175a711b6704d366d","ssdeep":"192:nnSMidqZ7SIGufc/eiXkqi3Ukd2LWcj+d0oTnXy9Jync2Nr0cMFhOj:nSMiUZ7lGufc2iXkJRxf2whHNgcMFhM","tlshash":"7f42856bb101661baed280d2481d1226966c5929a416903cbdfc6fe3f156ccef4bff34","first_seen":"2026-08-24T05:11:06.771576Z","last_seen":"2026-08-24T05:24:28.388598Z","times_seen":2,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/3jm796h_31c0l.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.578Z","timestamp":1787549029578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/3jm796h_31c0l.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZHXjKGZBigluRguBUpgXRVhbuZKWzP2XYweZrWSdl0Br3KEQndIq04z22lzKI4nil6ARRQanngLaiIYCr5N571dhbsBCTi3G8%2BXOD%2BZpQgMBTDCyf8%2FOa5uTdwN8kWRtxuNtV%2B%2Bkd89VO0F\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5add738deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52595,"size_decoded":13985,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52258)","md5":"ccbe64c7aae63f468e27bd14f08382d5","sha1":"1ea4a1ec9e296563068c7bd67d4a133f9995eca2","sha256":"0a3e756d0e6766ef1d05739e83f5cfc41bde4acb96da54f4ecfb99ec7e4fb6ab","sha512":"49104e3bd3fef89969fd5594fe5190bcbfeed0a0237b5a7cb9974095bbc4ef7ba058cf9a82c69088aa62fc140effb60ee5ba477dd774bec6272fa161580cffea","ssdeep":"768:nStnZJU6K9OrmEsWUIgoNtbN9MffjQRcquxW4:ynbXUYFduY4","tlshash":"4f33d6b53291fab702db91d9d0370012f2780c7120ad64b4b394dcaf799dd8992faf69","first_seen":"2026-03-24T20:01:41.647593Z","last_seen":"2026-08-24T05:24:28.389106Z","times_seen":409,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/3ttg3owg2uc3t.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.582Z","timestamp":1787549029582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/3ttg3owg2uc3t.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0J2j%2Brnv0fjHBLORxsBaC8XU%2B2QN2RuV1WJyYK78YVuTXvfLq%2BBj2C93vUXeE%2FkD7GBUeWzhqf4Jkgygu4Ir04C3h%2B5Pf76yVLPAYDRdZfnbW23vbGLvJeU1hraQnk1FQYrs7cBnmt%2FfJ%2Bqi\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5add768deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10021,"size_decoded":4977,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6764)","md5":"c09a36cf05e0894f84dfe75c3def9c22","sha1":"7a6c0c0a4c5cc97f9c7ee23590003d73f29086d1","sha256":"d7a3f723ba987c11609b018a2323fc06e4d11826440fca0f9e73afacc47dd8f0","sha512":"4f0c358aaeee2d352ac195a84582d5abb2d8bd2008a9be75ab7177ef5e9f4e05b7fa99d897e9faba531c7226eba204094ee4573762b375d320f77489800dfa9d","ssdeep":"192:nnSQCLgCGLXc2xROT4RREBBSLl2RqcmNV99kpa3rghbZMNQ:nSxH2jOTG4Bc2RoTTrUbr","tlshash":"102206403241f1782b6e458ee46f840eb2ae6f7d951e1424f2fc94b51fa1885b2b3fd9","first_seen":"2026-08-24T05:11:06.827118Z","last_seen":"2026-08-24T05:24:28.389583Z","times_seen":2,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/3r9rd5xaex8_e.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.589Z","timestamp":1787549029589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/3r9rd5xaex8_e.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxyaGIosDI0IKTDkhQwCzDIzLywftste1QnKxw%2FKILbj8GMD5IkvoIA2IJbQ1Vww60jysB9XV0d820lFMBliIdo2gJ0fQmf68rlTTUe%2BvQWcq8PQR%2B5GjJGDXxN8eoOvbNpC%2B7XfAsnGmDYB\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5aed7c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252953,"size_decoded":61241,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41386)","md5":"97e9cfdf410ebefeb0e94e335bd0f5a9","sha1":"6d5d59891d8934c701b85b61bd25765860201c75","sha256":"bb4ac53db6e939f6a2e921dd8c2e1fa3b8ad2949d8bb9ca468a5efd5b7386ead","sha512":"a9dea8ecfc5501cd457b52df756ddf5dd1a2dfeb0a4c7b100f909974953fba3bd0ef06945907d883bd1e63f32e950ad5cba9e29614778a20af049aae7f854b86","ssdeep":"6144:WtTpfp3fYt0RIRFIZkXVv59TGV/LJGiZJN:pFIaXVv59TGVbN","tlshash":"c8345c9573ffba1a07d621ab10d94101eafe0da45cbd5c95d29c422eb5d8ce4a0b3b3c","first_seen":"2026-08-24T05:11:06.791346Z","last_seen":"2026-08-24T05:24:28.390087Z","times_seen":2,"resource_available":true,"data":null}},"time_used":893,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":378,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/third_party/cookielaw/scripttemplates/otSDKStub.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:50.554Z","timestamp":1787549030554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /third_party/cookielaw/scripttemplates/otSDKStub.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSVEIAQ4VSA73Q4ekvQx4iYhXjXHa7r4QFlqLrp887tKQNQTla6uJLFmDIyOQXUYMk%2FjLm99hyaE%2FzC7HPeWtAVUPs%2Ft1MIO12vCgm7iJQZvdFu52ZOVoYS05Fn6rQRt85Agx8vl80SpvLIT\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed60fdd08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26840,"size_decoded":10182,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26839)","md5":"00e18ce007272081f06532f6f2ee5115","sha1":"0f4a6444348f9bd8ad20742ba6935d2d33245d6a","sha256":"512791a3a47f4481c170b3d8d8f8eb2646f83ce065b521e2659b73d3ab7f2c13","sha512":"81aece6ad1f6b9a3ad89aeeeeab84f3ccc0ffb97c7d0d2e07666ca5bda74b09df2aec3a7ca2d913b73d2fa139ab538cc8fab1a444199cc3d58f3aa71443f1be3","ssdeep":"384:r8k7hIX3xzMABwXeU9LH6rlIgknE8eEaRgCyu8Lc3LKvTJ9x4AaHKJx686S:rzIxAABwXb9wvknECPCJ87J9ugwS","tlshash":"a5c20989b040fe3447d251dc993be25a723a746d3486c168f858dce0647dc4b6633bba","first_seen":"2026-08-10T05:13:17.560131Z","last_seen":"2026-08-24T11:32:57.381737Z","times_seen":4103,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T05:23:48.674Z","timestamp":1787549028674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nlocation: /public/services/bill-payment\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZtkPxhoVoTHVU4jwfLf2%2FlrurxpbMv6RzFwYZ1FJulbugoaSDjR4rXkLqYZ6wwCrYjC574NfIgYs8GCgD16cFrO%2FCIuydPD%2Byf5QeT2uFdiyo3YJaMhtW8kw6gVG%2FjAynREfUrIposoD%2BcuG\"}]}\r\ncf-ray: a2ffed555d128deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-24T11:40:44.090216Z","times_seen":18075023,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":5,"connect":12,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/offline.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.554Z","timestamp":1787549029554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /offline.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybdCBchMjm7gMcHt6DzSlHgu1xaquj4BN1rw%2BggSSeBtzTxF86K9vZVQW%2BjDwECdcEj1xPPLiwk4oNWimQW7rcqOv4qbaMCdxSdNQ5TY5%2FyIfzeS6m2RiyVDfcrIeTA1wJOOKdCHivbTykFJ\"}]}\r\npriority: u=2,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5abd668deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40615,"size_decoded":12600,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"60fea8b2f7bbbf611d8c5baa9794792a","sha1":"f2456086414fb9b4c0a2d4234ee0cb6a3b6280dd","sha256":"a3c0868fbade36fdc6b66360f857a49c339fef433bba84d17dea4ef9ef1eca2b","sha512":"75ad7372ba2779f32d41e801d0376eda43c924ed069882fea6f9fc7b7cbdc2c7478f85b002d33a1b7f87671b8e8ff0d41b8b56ffdb219a915d15cc8b509b3931","ssdeep":"384:FoOfqd43knzCUs/lE7K55o+ZREY1FULCzBkPhrlsbsPW1OA0vM46xGXkjsuTTnOf:FlmnOUs4MJFqCzPsPMZn5BYxHOpu5","tlshash":"f00374491cf320228513f1695f6ba10bf13aa453698adc517a9c83653f4863d87befec","first_seen":"2026-08-24T05:11:06.754626Z","last_seen":"2026-08-24T05:24:28.391715Z","times_seen":2,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/304l471rpmtvw.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.564Z","timestamp":1787549029564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/304l471rpmtvw.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66wyoBp1%2BsnB6ZziVWz%2FAY5fyKSIrQ6d%2FuqZcVvYjae30agawfyh96jBOdKI82P8F2k4l1t2CC0v2pY0J0E%2FGSsAKiCVwxTywc1CcgFzBb4bsZ%2BHCuKmU7SxMQcEFb%2BYRDWD8DqvS71O4vkg\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5acd6c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124019,"size_decoded":35945,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65251)","md5":"83c2bc94a62b0ffdb3f5a00201e1a01b","sha1":"0fe2386c9b72b2570e2a1acacfd4771927815690","sha256":"06e289fe928b578dc8ca96b6c9f4999b910f2382c432ea89bc39902285babb0a","sha512":"7d1d6aaeefe28c4a12f903cf00f5683eb10071ad5613add7aeff52b476ef2eaba526e56d72e32b5cf7a083ea24f289814fc71c56e22699b635765e17dc0ee33c","ssdeep":"1536:mEgAtvj3EpzFiIwYGdZnPbGbaOYd4K7ud7xHpsKcaK3upkr/jCIpWoT6XjGqr:mCqzF2YgZKaOYd4KugakvCcWy6Sqr","tlshash":"5dc3e5f936d5f442076b50aac07f0002f22c4d77189e6860e3e5edda752465de2e3faa","first_seen":"2026-08-24T05:11:06.776924Z","last_seen":"2026-08-24T05:24:28.392414Z","times_seen":2,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/third_party/cookielaw/consent/019d4508-d29f-7efc-983f-b3e5a974d7b2/019e7450-9605-7ff1-bc9f-25584057919a/en.json","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:52.085Z","timestamp":1787549032085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /third_party/cookielaw/consent/019d4508-d29f-7efc-983f-b3e5a974d7b2/019e7450-9605-7ff1-bc9f-25584057919a/en.json HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5bdqxWBq%2F6hOJwqvpjWSXdNkze64twIyD%2B44fz4VSfLs7d5tE0LH1syiKGYs3l5uAfMehwA5AhXFyeYrXKpzOdstJvJ9x9L3SLNPgSd6WZOJUxWJ1M%2BFCayB5%2B2kW9yCkInuu%2FxdAMY0%2F3yQ\"}]}\r\npriority: u=4,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed6a8edb8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42886,"size_decoded":13565,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"774c7771589a57f6024f7e6ba8c8f928","sha1":"b0ba7b56f02a6a8a6531dea212641f7b9bb895e6","sha256":"138645c1ee295740897ecffc49a6b9fe79a4aded4f9d242e5145552eac8ea353","sha512":"1db06f3a2aeaa5157ee06586e9c86090a8bc66d29298384424bc16a1766e11d20e11f640eecbc9fe11084d78db746a93707507dbed1f876611b82de5cf8982b5","ssdeep":"768:A4XToT+D+tJ50ZNh4wl8ZcG3AucJlB2RCdux9RZBEWcWQH3xBtKCB:A4XTXCtcqAuSlB2RVx9R0tH3x77B","tlshash":"3b133a1f560a24fc07874721b03d7f17a7b825a4b2d9d819db2d4c2620a39da36b339f","first_seen":"2026-08-24T05:11:06.812Z","last_seen":"2026-08-24T05:24:28.392999Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/third_party/cookielaw/logos/static/ot_guard_logo.svg","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:52.924Z","timestamp":1787549032924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /third_party/cookielaw/logos/static/ot_guard_logo.svg HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ueqm9Zcj9Q5K8cY776AmnjsDAwXt6cawC21AFZ6OWTy45xXBlFe7Hq9gl%2FSoykqCzrHE8raambiZLCNL79TQEDn7KFn4stTH9Dyhm4Dkc%2BPUjfPePg0g3gCsoj1V5%2BB6SO6XoKApRmbGrWJO\"}]}\r\npriority: u=4,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed6fcf2f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":1033,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b57c99c9d1e3c50b2114c6db053d7ff0","sha1":"ada8abfed92ba8a545bbd9d299d74d5972cc4ae8","sha256":"691dcdb24853a0f5ce4e6597e5713dea66799b57ffe2c2a10f28f98e0b569b19","sha512":"0dab6d06f386d922fb28f70f2590d4f9c361e7f4e5d5e581b98e59aac12b266cba596ffccd87203b4330673ee4ec1d459a1abdfc4b066d243a43b2bf7909f0ee","ssdeep":"","tlshash":"2ef0d4d91906a6adb6822e7cdd3c56e04c2c7ce274dc22c894cce094d4489bc9705855","first_seen":"2023-05-07T20:46:54Z","last_seen":"2026-08-24T11:28:14.702403Z","times_seen":182828,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/3wqjcgln4agu4.css","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.557Z","timestamp":1787549029557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/3wqjcgln4agu4.css HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iiYWOZoeIaERmRb843KCFF5gzCHWnM2dYNqZKKaErk2000prbqW3uZTMB05oHgLz2zcfoTgGnyBuDJSKzR6%2BJ%2BTCw45uQ55lCS1OLRXgk0kdUcSjkA%2BuI7zwTaHCvid27q%2FR8yDM7L3MTu4d\"}]}\r\npriority: u=2,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5abd688deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129299,"size_decoded":24610,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65057)","md5":"4f4260554bf114b7e291f6e10caa367c","sha1":"22de266435f18beed99004c3237a263727feac7f","sha256":"6258fdc573adfeb52575a0fdf8f74b46f40ff92b184cb2aa170df0aae8a17855","sha512":"73a45bc7c96e03c7e147f3b3c49d623850823caaafafd6a0287540a12bf68a2ba52169ee3c0e1015060158e8356f119f9ad211c396b210d063d8a0e38c4e6252","ssdeep":"3072:J6Y+Zp0GOWLT9HhR/hwZEFOZcV1CVpIgEqI6vIUeHS30:YY+Zp0GOWLT9HhR/hwZEMOVcVSgEqI6q","tlshash":"53c3a3a0b33de93fbc3354ba979cf88c5119b181cd2647e8fa22722216c77f29d66514","first_seen":"2026-08-24T05:11:06.774833Z","last_seen":"2026-08-24T05:24:28.394082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/01xrwq0h0w-bu.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.580Z","timestamp":1787549029580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/01xrwq0h0w-bu.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=acR1RI5JdgtyjS4288dje6n4UUXcUzcS7iVy1J1Cq34YZ7QafHlQKlNwzXg3LiJ%2By1s9t%2BMa6EAgyfB08NCrodVMtVWIEol2tiIC6Fts7cYJupkh4jkMBTcPdtal23TcsW7B49Q4NTE19TOo\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5add758deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46728,"size_decoded":18164,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46393)","md5":"0dd4a4da1812a33ad6694b8700b18319","sha1":"5be94cf2bf5344bb7da27b7c649a8f1dc3cc6fbe","sha256":"2b574c5b46d0dbb9f28c2f0c60c1c97a0845a53fd9bfcf5797288a52bc53ca04","sha512":"2a21c070b957e8a7a0c2dd412a329d9a3337778eb31266e28e0ede733b16c0ee9f8a36115e8e80959631664e85b7ee4232d96a6cc361dcd95babffe382942bec","ssdeep":"768:nS0BpGIfmgpsfas9SpBEWNS3gywc3VuvzXf5I2kz+C:/nGIOgFrfCPH","tlshash":"57232be135d3a0796bd12841e13b0765a6755521780a009cf3b98cea3c68ecbf17bb7e","first_seen":"2026-08-24T05:11:06.839732Z","last_seen":"2026-08-24T05:24:28.394629Z","times_seen":2,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/1oeffhlqtener.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.584Z","timestamp":1787549029584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/1oeffhlqtener.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zmCMC3ui4ZfFlzrohU%2BQUy35NDCrWfL5mm3uJ9O%2BT9zQ%2BWRshzoUYEWMA7L%2FifsHEWbBrgdXnB2%2FDE5X3fuztZM2hk6apUhHIr%2F98BcGnjuDgzrSmgaEOSyKBWQ5KvrnCq%2BvybUmaAU7PrTn\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5aed788deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28298,"size_decoded":10924,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27963)","md5":"abd1cbaaf68e579bb94baac480a14992","sha1":"b606065fb0398cb328de9799fa22ad174eecaf57","sha256":"8e231fa45d75d9367c7f7367cc9403c09d6ec10d72d1d5fda69511161bf303a3","sha512":"fa91fb5ca36854c33f47367ef283f01f6f2cfbf2412f9023f2af78da3a9c9e1393803f8c5b2e85198dc7f00f6ed9471572ef4d7657536fa549e451bdce06b864","ssdeep":"384:nSVNDMN3O03Ar2XvfU+78g1WmRT2bCYYwzbIdcqSMBStc22DgayrZP+65ksfd1VI:nSVNDMN3O0lM+78uWmhOX0y19usl1Kz","tlshash":"e1d2c7a63202b26277ea8185c83b4119f77a6a18200e412cb5b95df76872dc6f0f7f75","first_seen":"2026-08-24T05:11:06.74792Z","last_seen":"2026-08-24T05:24:28.385215Z","times_seen":2,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/11h3zh51v513l.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.587Z","timestamp":1787549029587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/11h3zh51v513l.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QyzL0o3BRQn7p0ceaLM%2FQO9RVUBegGz7oQwk3u4DUvu%2BLMOruyp4ZM08LRpCO0iocwHP12yqNFrOHfTx9nUz5VkyUliGiv9vs%2F%2BMzHXsFKNdxSRcQpP3DukeRBcGCZW3coPeR3vZnqQRtCnz\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5aed7a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28238,"size_decoded":8711,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27903)","md5":"3e3e1b422eb02d9681370c961a47cc09","sha1":"9f1bd30efbaa4cae5f866b1e8ba0c63fb17a3fd4","sha256":"5919f70b613482612768cc905e7d5b80d157543ce42f552d052600120e0ad503","sha512":"572f77fb8b90ac6c8f26078b89f9161c9a3b851e753e7374160e78039cd653aed5aee7b51c567a64046b0292d12439a5eeceb98184101f901de2d34425579650","ssdeep":"768:nS+NrgkL1C3y330gL1st+xR9YRQNzzXZM6:vrgkL1C3E0gL1st6SQBzXZ/","tlshash":"fcc2950b5a8ae9718a9504c4268f4908c4ef0d3806ece8a5d64f49fd7a70dd0597bbfb","first_seen":"2026-08-24T05:11:06.843971Z","last_seen":"2026-08-24T05:24:28.395126Z","times_seen":2,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/25lbqmvty8kvr.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.591Z","timestamp":1787549029591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/25lbqmvty8kvr.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdcl0NHlG8eeyIbddnWqk%2F9QBXAbo5RvSfxpuMJ9HDvQG3sw8dpZBQ30xHzHYea%2FWRWf5E%2BUJGsh97t3kBA6oWIm47PX6fLjp%2BxdQqeDPnYmEvinQTgUJv9YwDB1ZqmC%2Bncr1fkZP6%2BFZP8j\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5aed7d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66560,"size_decoded":25841,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65251)","md5":"2d1a227b46d2b12e5f391cbe561f0778","sha1":"09115d75ffe63f12a199fcc6c2babaf0092ff8a0","sha256":"ad9a9de72a856a7afe9c1cfb998608ece600203d45f785625ad1f523ae0f8157","sha512":"8a61517c787152e8e713dcec23e90ff1c0bba3238b7b1bb7918a39e6c4d9963c829ed221828adb60eceb160b47edc0ca7df984ef20d87a2e07059916909ec6c3","ssdeep":"1536:gOyF/eRhVEZ68Hz68HHQJBZFqkW2QXCMtHuVF/LKcQOK1ULj:gOyF/8hVEZ68Hz68HHQJFqkW2QXCMtH8","tlshash":"ef531bc57752f02243eb61d9446b1406f37cda29a84c0868f351e8f728b598a96fffb4","first_seen":"2026-08-24T05:11:06.793665Z","last_seen":"2026-08-24T05:24:28.395689Z","times_seen":2,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/offline-mock/geolocation/cookieconsentpub/v1/geo/location","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:50.844Z","timestamp":1787549030844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /offline-mock/geolocation/cookieconsentpub/v1/geo/location HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KFpJlkkOmZXN%2BVQ8rEOnNLJvE%2Btrf5Ej6Qjt0HH0SZguRlceGx7bSJUbzLkmw7EAcLlU2FBJ2XwknSlKOq2tQtiG%2BVnDVium3vZ6MfBCSdg7U92ezrnVHJ7voIaDkwxvBU90oFoS%2BJbGV5VV\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed62cde18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118,"size_decoded":815,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"79ee28f93842a02b9bbb3e2a52889821","sha1":"0c0bb40c2bcdfccda11b8491ed6747f5affa2de1","sha256":"434d8f755e0f2efe1493bbb0bc9686022f3c786505e2ebbacc77b9cf21bcf78b","sha512":"c78e8dcf06a57a5ca3cd7681177c7977f5de1077d2053e91e247168a68b72f9cd9cf35808380fa983bce549d6fd3a074df5115ec3208fb8ec6c636f252a1b709","ssdeep":"","tlshash":"90b0921f116d6e68cb0c331b8a4dd4aa12f84a8929d10803cbd88eaaa6c49e0205b404","first_seen":"2026-08-24T05:11:06.751841Z","last_seen":"2026-08-24T05:24:28.396195Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/third_party/cookielaw/scripttemplates/202604.2.0/assets/otCommonStyles.css","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:52.359Z","timestamp":1787549032359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /third_party/cookielaw/scripttemplates/202604.2.0/assets/otCommonStyles.css HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OeVXzIgordWdYW7O%2FbTvfPk8V8IPn8GDEGtWpXAFkMNkCxIQZ8m1rxsixOZT39PQsGX%2FgRi5Z6giJV%2F%2BGnSl8Uni%2FaEFtLe%2Fcnmv0Ko08cN6Mz1xH8WwgjfpqlP2znnUY%2BDSRM1q%2BAVlmi9c\"}]}\r\npriority: u=4,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed6c3ef78deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27866,"size_decoded":5936,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27866), with no line terminators","md5":"f4297b13f1b5c497d54d3767629a002c","sha1":"ae2550792ac24a25062c48846e0d3ab0d1af519d","sha256":"5e27a702c8bd7f6a9029ad274d877fc49f4384c97b14e8989c36a77fdb5ced82","sha512":"400aaced1e056538ced18c38a0d531a439191d4558d52ceb36f4e5504e406f89093d712719b6796467403630613e961d5bbce62ea23db4ff531326eb34aad5c8","ssdeep":"384:3/8CQGGI09YzbHDouelC774jlIhHLnwGfg4xqsQ4PNE:aYnpWN","tlshash":"4cc2559b38512b1ae6d7c71d952139827d11aceffd739ceee009a3784adc3e24c1464a","first_seen":"2026-05-06T04:05:19.736546Z","last_seen":"2026-08-24T10:58:49.002246Z","times_seen":5862,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/media/InterVariable-s.p.2c0y96ae70xfx.woff2","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.556Z","timestamp":1787549029556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/media/InterVariable-s.p.2c0y96ae70xfx.woff2 HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3d8EOPsYD23P8N4TD9Tx9K8EF%2FPIjjjweqDJPZGvOIYnXsl6ox%2FEnMcNJ7JJ6QIZgrugx75NZ1YoQM1PVb90bAbNo1KU19sqbmHD625xd990xiTmu6%2FtK0RkR5iED5IOWhX2lM76Xwg84tg2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ffed5abd678deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 352240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352240,"size_decoded":352932,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 352240, version 4.66","md5":"2bf3d951bf9d6109437ea0874bbf12fb","sha1":"f55b18fdf5a4fbca23e23010fbe89df27d70d1ff","sha256":"693b77d4f32ee9b8bfc995589b5fad5e99adf2832738661f5402f9978429a8e3","sha512":"9c34339e338bc88488195216a834004c3cc2934896df8a5849c26801a88c7a4c4d84563d9cdae449d81bb379549f69f57c5fb9b199826adb8a88c3eb7d22bac1","ssdeep":"6144:NXxnNQ1mzp/C4K2K9y0deanlT3TPkHW644MVz66Z2YS78Eq/H493abRLF/VBoGuB:RxnNXpq4XF0tTPk2jzRkYS8/GabjC+a","tlshash":"fc742337370464501452c3aca8a70a57e6302de69fda07ecc7ae84e8899ca797f1f74d","first_seen":"2024-11-16T09:12:47.72962Z","last_seen":"2026-08-24T11:28:37.26121Z","times_seen":16524,"resource_available":false,"data":null}},"time_used":906,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/2r0w_omfut6sg.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.585Z","timestamp":1787549029585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/2r0w_omfut6sg.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0rYW5sX2zjMFKg7wjNcSgkkHmqSGf%2BRIOEB495eeD5smmGSOShj5ba7kvhcR2aUbLQOOkQ8oZCZxaxxIgKPQWTwurJBx%2BXcAiEePZZwLOQcm%2BQkFDv%2BxZ%2BRkcjHWChM1YceWv%2Fe7hWAyLsC\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5aed798deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31584,"size_decoded":12435,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31249)","md5":"347528ce0fedd8569b1fcb61fc29f272","sha1":"2197bb37027111b60533e776db52f7c88f56eb62","sha256":"3e6579f18bcf24ea034ee80835cd42a971b9ec725cddf958347724d33866f2a4","sha512":"068dfbc9daba1a690711e17d77be895685390cb3185514cc4360dbc47373ce7da799624ba83c6ed89e36500f843654f083a32930b9adddc1bc6207a90493c3ce","ssdeep":"768:nSYVnAvYYG3NLOM/Qcjzy+ClOGht+BoIMbHGtMb91Oxzg8RbD+y9WUxbYTY14FNr:1VnAvR4LOiQwG+yD+BoIMbHKMb+x88RQ","tlshash":"bce2f8c372b0f06a8f7d10df201e4009b7967e1d682b9495f7a46c9b361d989a4cff68","first_seen":"2026-08-24T05:11:06.806752Z","last_seen":"2026-08-24T05:24:28.398002Z","times_seen":2,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/_next/static/chunks/2lzf2zrl10wre.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:49.595Z","timestamp":1787549029595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /_next/static/chunks/2lzf2zrl10wre.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZ1FRnuq%2BgfyhjeL9Rg8aPd9f9msOK%2Fxy2YNZ6c9UUKm%2F5htRg85AHrHxLHYdE3O%2Fx7%2B5lw1SEOAnLAXbw5QkUEQfebF3EP22I3YaDlVZ4Z%2Fz3rOu0%2FhjnE%2F9JIGr%2BYd2oogXP%2BdaPfgSyf0\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed5afd808deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8425,"size_decoded":4040,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8090)","md5":"ffb7eabe937cdd99da8189e25dd48d18","sha1":"0d8e0d865b4dddb285824c0efe5da896c02121f6","sha256":"88e8567674ec825e9bbe388925d13d552776d254a94cb636c17a262e87fa9fce","sha512":"26aa6e77dee3bd1903ec01cb0b24ee7dc2b6c8aa1618acdd97c6df3a4ed8186078067c46824c29daff53cada7394c4b8fa7d5edfae436850677591526a92fa04","ssdeep":"96:nv/Say16k94mMI1bMpcLBeIZ7Yv23qK3ytLJ/RSGm5bEcaEppKwuv2YDxSylqR5y:nnSayk6MqLBRD3qK3ErEppPYFRqW7","tlshash":"a202d8b532e4f4e1669e4181c43b401af2551c3e616d60b8b7f98cf92a8048ef567ffa","first_seen":"2026-08-24T05:11:06.829305Z","last_seen":"2026-08-24T05:24:28.398504Z","times_seen":2,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sabesp-agenciavirtual.com/third_party/cookielaw/scripttemplates/202604.2.0/otBannerSdk.js","fqdn":"sabesp-agenciavirtual.com","domain":"sabesp-agenciavirtual.com","tld":"com"},"ip":{"addr":"104.21.94.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabesp-agenciavirtual.com/public/services/bill-payment","date":"2026-08-24T05:23:50.987Z","timestamp":1787549030987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sabesp-agenciavirtual.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 17:25:20 GMT","end":"Mon, 16 Nov 2026 18:23:55 GMT"},"fingerprint":{"sha1":"5E:6C:01:A0:56:2C:9A:89:EE:53:AA:76:5E:73:EB:FE:98:DB:0B:83","sha256":"46:C1:90:68:10:D8:95:95:1F:5F:A2:02:9C:D5:70:B7:0F:2E:32:29:D3:54:84:D7:6D:D8:89:42:AA:C9:75:C8"}}},"request":{"raw":"GET /third_party/cookielaw/scripttemplates/202604.2.0/otBannerSdk.js HTTP/1.1\r\nHost: sabesp-agenciavirtual.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabesp-agenciavirtual.com/public/services/bill-payment\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 05:23:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ie64z0zqwjlYBTi8FLHXWq1EQeYnIR4hUZWiLGkgSIix%2BhBV%2FOVE4L7wCrz8%2FsOn283owHbjzWuObufwPpyoGRTtODciLzF7Q02vms%2Fd1BsCkL8FThtuGmXJkWTN40HXZyBCzUZu%2BHv7ar0O\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ffed63ade98deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":568333,"size_decoded":137896,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"d3da42a6132fc415f2298f58a13c66e3","sha1":"cc8ee82f3229867d024391e6457e0338f5a0a72e","sha256":"54ea9e57fe5a72f2654b859fe2fa7883e7bbc2208ad317333a59d2a438ed829e","sha512":"1fe38d1da57313f4f50713a398a769ca3f280cf4bd0e6bdad4c43f3dab682b0d0deff5ed2f6b9b5ee974e07361249ab41ae6f28e639f83f3c33e9fc7d12216d1","ssdeep":"6144:IaGXAs51k3m1pvx3gcNC75GD3WLBLcJ4aHo8MD4dCRfQuxZtnVi1dr8o:Ia451k3m1pOBKo8dCWuxZtITF","tlshash":"57c43a4d7590753547e762b9c02b510ab63574acac8580acf41cc4f90bf9f862aa3fbb","first_seen":"2026-06-25T20:21:55.485529Z","last_seen":"2026-08-24T08:59:52.21427Z","times_seen":908,"resource_available":true,"data":null}},"time_used":1033,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":534,"receive":499,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"sabesp-agenciavirtual.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}