LeakIX - Host core.payoutpartner.com

Domain core.payoutpartner.com

United States

AMAZON-02

Software information

Heroku

tcp/443

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 3.33.249.164
Domain: sandbox.core.payoutpartner.com
Port: 443
URL: https://sandbox.core.payoutpartner.com

First seen 2025-12-02 01:13
Last seen 2026-01-01 21:58
Open for 30 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3ff39efc0b14ae4040313029a164e0eabab5c0813
```
GraphQL introspection enabled at /graphql
Types: 511 (by kind: ENUM: 53, INPUT_OBJECT: 209, INTERFACE: 3, OBJECT: 240, SCALAR: 6)
Operations:
- Query: Query | fields: checkSlug, clients, companies, company, crcPurposes
- Mutation: Mutation | fields: addAccountMember, approveEnrollment, approveJobApplication, archiveCheckLists, archiveClient
Directives: deprecated, include, oneOf, skip (total: 4)
```
  Found on 2026-01-01 21:58
  
  569.6 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-12-11 02:00
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 52.223.53.203
Domain: rc.core.payoutpartner.com
Port: 443
URL: https://rc.core.payoutpartner.com

First seen 2025-10-29 14:27
Last seen 2026-01-03 00:21
Open for 65 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3943ac6615745c8a34b683b799a3b83ad27731945
```
GraphQL introspection enabled at /graphql
Types: 475 (by kind: ENUM: 52, INPUT_OBJECT: 190, INTERFACE: 3, OBJECT: 224, SCALAR: 6)
Operations:
- Query: Query | fields: checkSlug, clients, companies, company, crcPurposes
- Mutation: Mutation | fields: addAccountMember, approveEnrollment, approveJobApplication, archiveClient, archiveDocuments
Directives: deprecated, include, oneOf, skip (total: 4)
```
  Found on 2026-01-03 00:21
  
  535.6 kBytes
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-12-03 22:46
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 76.223.11.49
Domain: core.payoutpartner.com
Port: 443
URL: https://core.payoutpartner.com

First seen 2025-12-02 01:12
Last seen 2025-12-30 12:57
Open for 28 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3943ac6615745c8a34b683b799a3b83ad27731945
```
GraphQL introspection enabled at /graphql
Types: 475 (by kind: ENUM: 52, INPUT_OBJECT: 190, INTERFACE: 3, OBJECT: 224, SCALAR: 6)
Operations:
- Query: Query | fields: checkSlug, clients, companies, company, crcPurposes
- Mutation: Mutation | fields: addAccountMember, approveEnrollment, approveJobApplication, archiveClient, archiveDocuments
Directives: deprecated, include, oneOf, skip (total: 4)
```
  Found on 2025-12-30 12:57
  
  535.7 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.212.52.84
Domain: qa.core.payoutpartner.com
Port: 443
URL: https://qa.core.payoutpartner.com

First seen 2024-10-07 00:12
Last seen 2024-12-20 20:52
Open for 74 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c47dfe71947dfe719511acc516ca19a49c4e4557e8a466010
```
Found 16 files trough .DS_Store spidering:

/404.html
/422.html
/500.html
/agreement_individual.pdf
/agreement_organization.pdf
/apple-touch-icon.png
/assets
/favicon-16x16.png
/favicon-32x32.png
/favicon.ico
/pop_agreement_individual.pdf
/pop_agreement_organization.pdf
/robots.txt
/site.webmanifest
/Varslingsrutiner.pdf
/Varslingsrutiner.png
```
  Found on 2024-12-20 20:52
Create report

Open service 52.223.53.203:443 · rc.core.payoutpartner.com

2026-01-10 01:48

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://rc.core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=TXu%2FkQ%2F65%2B%2FyLZSdVVcEnWqHepth3ASrTJK2GAaEz64%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1768009719"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=TXu%2FkQ%2F65%2B%2FyLZSdVVcEnWqHepth3ASrTJK2GAaEz64%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1768009719"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: f61cd33e-7132-4592-b194-3c5319872ef2
X-Runtime: 0.009007
X-Xss-Protection: 0
Date: Sat, 10 Jan 2026 01:48:39 GMT
Content-Length: 119
Connection: close


<html><body>You are being <a href="https://rc.core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 76.223.11.49:443 · core.payoutpartner.com

2026-01-09 22:18

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=DBFHhVMa8Rsd9I7gHoXOS6hMPcZLuMGo%2FR1MBzWqt0k%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767997142"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=DBFHhVMa8Rsd9I7gHoXOS6hMPcZLuMGo%2FR1MBzWqt0k%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767997142"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: d73812f4-dcd1-4168-a687-456f0d680ef0
X-Runtime: 0.005290
X-Xss-Protection: 0
Date: Fri, 09 Jan 2026 22:19:02 GMT
Content-Length: 116
Connection: close


<html><body>You are being <a href="https://core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 3.33.249.164:443 · sandbox.core.payoutpartner.com

2026-01-08 23:42

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://sandbox.core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=dlpm2u9OdFFE6GwiO49LR2vHzjDLKg5CNz%2F5DXy4f34%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767915731"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=dlpm2u9OdFFE6GwiO49LR2vHzjDLKg5CNz%2F5DXy4f34%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767915731"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: f76156b6-f6a9-4ac2-d9d2-dd4cd69a39e1
X-Runtime: 0.003896
X-Xss-Protection: 0
Date: Thu, 08 Jan 2026 23:42:11 GMT
Content-Length: 124
Connection: close


<html><body>You are being <a href="https://sandbox.core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 52.223.53.203:443 · rc.core.payoutpartner.com

2026-01-03 00:21

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://rc.core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=I6vTBLXSHA0RPPWq5Zer94OoCuOtP9FghD5zx96ODgU%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767399665"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=I6vTBLXSHA0RPPWq5Zer94OoCuOtP9FghD5zx96ODgU%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767399665"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 6555fa8b-f63b-4a58-af4a-d34dc88f1e0b
X-Runtime: 0.005398
X-Xss-Protection: 0
Date: Sat, 03 Jan 2026 00:21:05 GMT
Content-Length: 119
Connection: close


<html><body>You are being <a href="https://rc.core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2026-01-03 by HttpPlugin

Create report

Open service 3.33.249.164:443 · sandbox.core.payoutpartner.com

2026-01-01 21:58

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://sandbox.core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kSxyZO1gS4rRB9Mg%2FPNM1Ebvj%2BgGxbux5z%2BTcFsObSw%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767304728"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=kSxyZO1gS4rRB9Mg%2FPNM1Ebvj%2BgGxbux5z%2BTcFsObSw%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767304728"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 056339d2-7868-db2b-882e-523b689a5be6
X-Runtime: 0.003598
X-Xss-Protection: 0
Date: Thu, 01 Jan 2026 21:58:48 GMT
Content-Length: 124
Connection: close


<html><body>You are being <a href="https://sandbox.core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2026-01-01 by HttpPlugin

Create report

Open service 76.223.11.49:443 · core.payoutpartner.com

2025-12-30 12:57

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=8Lb4Db6wdLYIRwadj9H9lUM3X3niTyGoCrHHCqdRQi8%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767099429"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=8Lb4Db6wdLYIRwadj9H9lUM3X3niTyGoCrHHCqdRQi8%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767099429"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 6c7bdfa6-c72b-453a-8ccd-05675dc5273c
X-Runtime: 0.004641
X-Xss-Protection: 0
Date: Tue, 30 Dec 2025 12:57:09 GMT
Content-Length: 116
Connection: close


<html><body>You are being <a href="https://core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 3.33.249.164:443 · sandbox.core.payoutpartner.com

2025-12-30 06:36

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://sandbox.core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Myg7NjF3dbbZbN02kZifr49T1oLbcBnUbCDX8clcUZo%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767076610"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Myg7NjF3dbbZbN02kZifr49T1oLbcBnUbCDX8clcUZo%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767076610"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 991079f8-03ad-7866-8e46-cfd57cc80c4e
X-Runtime: 0.002851
X-Xss-Protection: 0
Date: Tue, 30 Dec 2025 06:36:50 GMT
Content-Length: 124
Connection: close


<html><body>You are being <a href="https://sandbox.core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 52.223.53.203:443 · rc.core.payoutpartner.com

2025-12-23 09:49

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://rc.core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=NfXqlLymRS2wropLc4qiDMO9g1UggY822UTnityc1ak%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766483359"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=NfXqlLymRS2wropLc4qiDMO9g1UggY822UTnityc1ak%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766483359"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: df179381-8e98-44da-a756-9b7d94385ece
X-Runtime: 0.006159
X-Xss-Protection: 0
Date: Tue, 23 Dec 2025 09:49:19 GMT
Content-Length: 119
Connection: close


<html><body>You are being <a href="https://rc.core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 3.33.249.164:443 · sandbox.core.payoutpartner.com

2025-12-22 14:24

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://sandbox.core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=T2bg9H47IkGyc5tCUU%2BePLPutUuaGmUHFaCcIu0Dv6g%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766413473"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=T2bg9H47IkGyc5tCUU%2BePLPutUuaGmUHFaCcIu0Dv6g%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766413473"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 690ea7a6-2120-5246-7408-29d5716038c7
X-Runtime: 0.003934
X-Xss-Protection: 0
Date: Mon, 22 Dec 2025 14:24:33 GMT
Content-Length: 124
Connection: close


<html><body>You are being <a href="https://sandbox.core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 76.223.11.49:443 · core.payoutpartner.com

2025-12-22 10:54

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=cj8tTF1MPbatn7UilK4rCsONV1x%2BOQ0SGCxJPYXIwCQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766400880"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=cj8tTF1MPbatn7UilK4rCsONV1x%2BOQ0SGCxJPYXIwCQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766400880"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: d0e59db7-d40b-45b3-af26-25fc722ae00a
X-Runtime: 0.005460
X-Xss-Protection: 0
Date: Mon, 22 Dec 2025 10:54:40 GMT
Content-Length: 116
Connection: close


<html><body>You are being <a href="https://core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 76.223.11.49:443 · core.payoutpartner.com

2025-12-21 10:47

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=0wr3bHaMQu1cjipr43cCpOTELJtKgF2JU1B%2FPD82ylQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766314062"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=0wr3bHaMQu1cjipr43cCpOTELJtKgF2JU1B%2FPD82ylQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766314062"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 5402f965-30f6-4495-b05b-e72e82d38c6e
X-Runtime: 0.004187
X-Xss-Protection: 0
Date: Sun, 21 Dec 2025 10:47:42 GMT
Content-Length: 116
Connection: close


<html><body>You are being <a href="https://core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2025-12-21 by HttpPlugin

Create report

Open service 52.223.53.203:443 · rc.core.payoutpartner.com

2025-12-21 09:36

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://rc.core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=LPLYCFo5EEPR4NUzCyV8yh0%2FS4u7wkekZ3GWpzLWZW4%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766309794"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=LPLYCFo5EEPR4NUzCyV8yh0%2FS4u7wkekZ3GWpzLWZW4%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766309794"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 4fde2f4a-8c5f-4dcc-9688-8fa7b6e04293
X-Runtime: 0.008472
X-Xss-Protection: 0
Date: Sun, 21 Dec 2025 09:36:34 GMT
Content-Length: 119
Connection: close


<html><body>You are being <a href="https://rc.core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2025-12-21 by HttpPlugin

Create report

Open service 3.33.249.164:443 · sandbox.core.payoutpartner.com

2025-12-20 13:35

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://sandbox.core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Xs3XAb6OeXSc2jw%2B%2FgBwVCPr5i4MfUdknRISw0aKsYM%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766237715"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Xs3XAb6OeXSc2jw%2B%2FgBwVCPr5i4MfUdknRISw0aKsYM%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766237715"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 56379592-5bb3-f6c0-d6e3-735ce7ac0cf0
X-Runtime: 0.003294
X-Xss-Protection: 0
Date: Sat, 20 Dec 2025 13:35:15 GMT
Content-Length: 124
Connection: close


<html><body>You are being <a href="https://sandbox.core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2025-12-20 by HttpPlugin

Create report

Open service 52.223.53.203:443 · rc.core.payoutpartner.com

2025-12-19 11:15

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://rc.core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=YgL2q0e%2BbYkEw6bKshpPHrcVShvDZ6ZhBviONDT4CT8%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766142905"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=YgL2q0e%2BbYkEw6bKshpPHrcVShvDZ6ZhBviONDT4CT8%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766142905"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: bc83b507-adb7-4db5-b1c3-b94d18e00303
X-Runtime: 0.004784
X-Xss-Protection: 0
Date: Fri, 19 Dec 2025 11:15:06 GMT
Content-Length: 119
Connection: close


<html><body>You are being <a href="https://rc.core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2025-12-19 by HttpPlugin

Create report

Open service 76.223.11.49:443 · core.payoutpartner.com

2025-12-19 08:47

HTTP/1.1 302 Found
Cache-Control: no-store
Content-Type: text/html; charset=utf-8
Location: https://core.payoutpartner.com/partner/session/new
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Sy65lM6ntdw2VT5VYm%2FuSJgQH6HnZ9KL1RJj7CKx3Eo%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766134070"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Sy65lM6ntdw2VT5VYm%2FuSJgQH6HnZ9KL1RJj7CKx3Eo%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766134070"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 9d15a82d-e24e-43d6-861d-4d343054d1bc
X-Runtime: 0.004280
X-Xss-Protection: 0
Date: Fri, 19 Dec 2025 08:47:50 GMT
Content-Length: 116
Connection: close


<html><body>You are being <a href="https://core.payoutpartner.com/partner/session/new">redirected</a>.</body></html>

Found 2025-12-19 by HttpPlugin

Create report

rc.core.payoutpartner.com

Fingerprint:

227dc8898c01c31bde819eec987ba5bb1af6babc0d3dac46ecd0168328e03536

CN:

rc.core.payoutpartner.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-12-01 00:00

Not after:

2026-03-01 00:00

core.payoutpartner.com

Fingerprint:

a92fc96e857d9ecb0ca9a4f83c7b780bd8dcd2562a78c6a1cc7098844f53b184

CN:

core.payoutpartner.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-02 00:14

Not after:

2026-03-02 00:14

sandbox.core.payoutpartner.com

Fingerprint:

fdb98270d1796aca32fb5594623e38ad0c2efa593404796d9f1275ee6de4f491

CN:

sandbox.core.payoutpartner.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-02 00:14

Not after:

2026-03-02 00:14

Domain summary

rc.core.payoutpartner.com 6 sandbox.core.payoutpartner.com 6 core.payoutpartner.com 5 qa.core.payoutpartner.com 1

4 recorded

IP summary

52.223.53.203 2 76.223.11.49 2 3.33.249.164 2 52.212.52.84 1

4 recorded

Domain core.payoutpartner.com

United States

Software information

GraphQL introspection is enabled.

GraphQL introspection is enabled.

GraphQL introspection is enabled.

MacOS file listing through .DS_Store file

rc.core.payoutpartner.com

core.payoutpartner.com

sandbox.core.payoutpartner.com

Domain summary

IP summary