LeakIX - Host homeready.td.com

Domain homeready.td.com

Germany

Akamai International B.V.

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.151
Domain: homeready.td.com
Port: 443
URL: https://homeready.td.com

First seen 2025-11-17 00:15
Last seen 2026-02-02 10:44
Open for 77 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-02-02 10:44
Create report

Open service 23.50.131.151:443 · homeready.td.com

2026-01-23 15:09

HTTP/1.1 200 OK
Last-Modified: Sun, 30 Nov 2025 02:51:59 GMT
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
Content-Length: 66902
Expires: Fri, 23 Jan 2026 15:09:57 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 23 Jan 2026 15:09:57 GMT
Connection: close
Set-Cookie: BIGipServerhomeready.td.com_App_443_pool=3583652618.64288.0000; expires=Fri, 23-Jan-2026 19:09:56 GMT; path=/; Httponly; Secure
Set-Cookie: BIGipServerBDC-homeready.td.com_Web_443_pool=3014406922.47873.0000; path=/; Httponly; Secure
Set-Cookie: TD-persist=BDC; Path=/; Expires=Fri, 23-Jan-2026 16:09:56 GMT
Strict-Transport-Security: max-age=86400

Page title: Application

<!DOCTYPE html>
<html lang="en" data-critters-container>
  <head>
    <meta charset="utf-8">
    <title>Application</title>
    <base href="/">
    <meta name="description" content="Mortgage Preapproval Application">
    <meta http-equiv="X-UA-Compatible" content="IE=edge, chrome=1">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <link rel="icon" type="image/x-icon" href="../assets/img/favicon.ico">

    <!-- OneTrust Cookies Consent Notice start for td.com -->
    <script type="text/javascript">
      function OptanonWrapper() {
        if (!window.isFirst) {
          window.isFirst = true;
          let src;
          if (
            window.location.href.includes('//homeready.td.com/') ||
            window.location.href.includes('//pretsaetreproprios.td.com/')
          ) {
            // Adding Adobe Analytics tracking for PROD
            src = 'https://assets.adobedtm.com/178dbd5c3653/0550e7378f48/launch-5f440c68afde.min.js';
          } else if (window.location.href.includes('dev.td.com') || window.location.href.includes('localhost')) {
            // Adding Adobe Analytics tracking for DEV
            src = 'https://assets.adobedtm.com/178dbd5c3653/0550e7378f48/launch-6a78c10d95e8-development.min.js';
          } else {
            // Adding Adobe Analytics tracking for SIT, PAT, and staging
            src = 'https://assets.adobedtm.com/178dbd5c3653/0550e7378f48/launch-7ca7b7396999-staging.min.js';
          }

          try {
            const url = new URL(document.URL);
            const lang = (url.searchParams.get('lang') || url.searchParams.get('locale') || 'en').split(/-_/)[0];

            window.OneTrust.changeLanguage(lang);
          } catch (e) {
            // ignore the error
            console.warn(e);
          }

          const script = document.createElement('script');
          script.setAttribute('type', 'text/javascript');
          script.setAttribute('src', src);
          script.setAttribute('async', 'true');
          document.head.appendChild(script);
        }
      }
    </script>

    <!-- OneTrust Cookies Consent Notice start for td.com -->
    <script type="text/javascript">
      let urlOneTrust;
      let dataDomain;
      if (
        window.location.href.includes('//homeready.td.com/') ||
        window.location.href.includes('//pretsaetreproprios.td.com/')
      ) {
        urlOneTrust = 'https://cdn.cookielaw.org/consent/58bd9410-3537-402a-a626-f44d31eb8404/otSDKStub.js';
        dataDomain = '58bd9410-3537-402a-a626-f44d31eb8404';
      } else {
        urlOneTrust = 'https://cdn.cookielaw.org/consent/58bd9410-3537-402a-a626-f44d31eb8404-test/otSDKStub.js';
        dataDomain = '58bd9410-3537-402a-a626-f44d31eb8404-test';
      }
      const script2 = document.createElement('script');
      script2.setAttribute('type', 'text/javascript');
      script2.setAttribute('src', urlOneTrust);
      script2.setAttribute('charset', 'UTF-8');
      script2.setAttribute('data-domain-script', dataDomain);
      document.head.appendChild(script2);
    </script>
    <!-- OneTrust Cookies Consent Notice end for td.com -->

    <noscript>Version 1.0.1</noscript>
    <!-- Begin Ensighten Privacy Bootstrap -->
    <script type="text/javascript">
      let url;
      if (
        window.location.href.includes('//homeready.td.com/') ||
        window.location.href.includes('//pretsaetreproprios.td.com/')
      ) {
        // Adding Adobe Analytics tracking for PROD
        url = '//nexus.ensighten.com/tdb/hoj-privacy-prod/Bootstrap.js';
      } else {
        // Adding Adobe Analytics tracking for SIT, PAT, and staging
        url = '//nexus.ensighten.com/tdb/hoj-privacy-dev/Bootstrap.js';
      }

      const script1 = document.createElement('script');
      script1.setAttribute('type', 'text/javascript');
      script1.setAttribute('src', url);
      document.head.appendChild(script1);
    </script>
    <!-- End Ensighten Privacy Bootstrap -->

    <!-- Begin Adobe Target Flicker Control-->
    <script type="text/javascript">
      (function (win, doc, style,

Found 2026-01-23 by HttpPlugin

Create report

Open service 23.50.131.151:443 · homeready.td.com

2026-01-09 19:59

HTTP/1.1 200 OK
Last-Modified: Sat, 29 Nov 2025 04:58:26 GMT
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
Content-Length: 66902
Expires: Fri, 09 Jan 2026 19:59:18 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 19:59:18 GMT
Connection: close
Set-Cookie: BIGipServerhomeready.td.com_App_443_pool=2140810506.64288.0000; expires=Fri, 09-Jan-2026 23:59:18 GMT; path=/; Httponly; Secure
Set-Cookie: BIGipServerSOC-homeready.td.com_Web_443_pool=2896964874.47873.0000; path=/; Httponly; Secure
Set-Cookie: TD-persist=SOC; Path=/; Expires=Fri, 09-Jan-2026 20:59:18 GMT
Set-Cookie: GDPR=true; expires=Sat, 10-Jan-2026 00:59:18 GMT; path=/
Strict-Transport-Security: max-age=86400

Page title: Application

<!DOCTYPE html>
<html lang="en" data-critters-container>
  <head>
    <meta charset="utf-8">
    <title>Application</title>
    <base href="/">
    <meta name="description" content="Mortgage Preapproval Application">
    <meta http-equiv="X-UA-Compatible" content="IE=edge, chrome=1">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <link rel="icon" type="image/x-icon" href="../assets/img/favicon.ico">

    <!-- OneTrust Cookies Consent Notice start for td.com -->
    <script type="text/javascript">
      function OptanonWrapper() {
        if (!window.isFirst) {
          window.isFirst = true;
          let src;
          if (
            window.location.href.includes('//homeready.td.com/') ||
            window.location.href.includes('//pretsaetreproprios.td.com/')
          ) {
            // Adding Adobe Analytics tracking for PROD
            src = 'https://assets.adobedtm.com/178dbd5c3653/0550e7378f48/launch-5f440c68afde.min.js';
          } else if (window.location.href.includes('dev.td.com') || window.location.href.includes('localhost')) {
            // Adding Adobe Analytics tracking for DEV
            src = 'https://assets.adobedtm.com/178dbd5c3653/0550e7378f48/launch-6a78c10d95e8-development.min.js';
          } else {
            // Adding Adobe Analytics tracking for SIT, PAT, and staging
            src = 'https://assets.adobedtm.com/178dbd5c3653/0550e7378f48/launch-7ca7b7396999-staging.min.js';
          }

          try {
            const url = new URL(document.URL);
            const lang = (url.searchParams.get('lang') || url.searchParams.get('locale') || 'en').split(/-_/)[0];

            window.OneTrust.changeLanguage(lang);
          } catch (e) {
            // ignore the error
            console.warn(e);
          }

          const script = document.createElement('script');
          script.setAttribute('type', 'text/javascript');
          script.setAttribute('src', src);
          script.setAttribute('async', 'true');
          document.head.appendChild(script);
        }
      }
    </script>

    <!-- OneTrust Cookies Consent Notice start for td.com -->
    <script type="text/javascript">
      let urlOneTrust;
      let dataDomain;
      if (
        window.location.href.includes('//homeready.td.com/') ||
        window.location.href.includes('//pretsaetreproprios.td.com/')
      ) {
        urlOneTrust = 'https://cdn.cookielaw.org/consent/58bd9410-3537-402a-a626-f44d31eb8404/otSDKStub.js';
        dataDomain = '58bd9410-3537-402a-a626-f44d31eb8404';
      } else {
        urlOneTrust = 'https://cdn.cookielaw.org/consent/58bd9410-3537-402a-a626-f44d31eb8404-test/otSDKStub.js';
        dataDomain = '58bd9410-3537-402a-a626-f44d31eb8404-test';
      }
      const script2 = document.createElement('script');
      script2.setAttribute('type', 'text/javascript');
      script2.setAttribute('src', urlOneTrust);
      script2.setAttribute('charset', 'UTF-8');
      script2.setAttribute('data-domain-script', dataDomain);
      document.head.appendChild(script2);
    </script>
    <!-- OneTrust Cookies Consent Notice end for td.com -->

    <noscript>Version 1.0.1</noscript>
    <!-- Begin Ensighten Privacy Bootstrap -->
    <script type="text/javascript">
      let url;
      if (
        window.location.href.includes('//homeready.td.com/') ||
        window.location.href.includes('//pretsaetreproprios.td.com/')
      ) {
        // Adding Adobe Analytics tracking for PROD
        url = '//nexus.ensighten.com/tdb/hoj-privacy-prod/Bootstrap.js';
      } else {
        // Adding Adobe Analytics tracking for SIT, PAT, and staging
        url = '//nexus.ensighten.com/tdb/hoj-privacy-dev/Bootstrap.js';
      }

      const script1 = document.createElement('script');
      script1.setAttribute('type', 'text/javascript');
      script1.setAttribute('src', url);
      document.head.appendChild(script1);
    </script>
    <!-- End Ensighten Privacy Bootstrap -->

    <!-- Begin Adobe Target Flicker Control-->
    <script type="text/javascript">
      (function (win, doc, style,

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.50.131.151:443 · homeready.td.com

2026-01-02 21:55

HTTP/1.1 200 OK
Last-Modified: Sun, 30 Nov 2025 02:51:59 GMT
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
Content-Length: 66902
Expires: Fri, 02 Jan 2026 21:55:16 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 21:55:16 GMT
Connection: close
Set-Cookie: BIGipServerhomeready.td.com_App_443_pool=3600429834.64288.0000; expires=Sat, 03-Jan-2026 01:55:15 GMT; path=/; Httponly; Secure
Set-Cookie: BIGipServerBDC-homeready.td.com_Web_443_pool=3014406922.47873.0000; path=/; Httponly; Secure
Set-Cookie: TD-persist=BDC; Path=/; Expires=Fri, 02-Jan-2026 22:55:15 GMT
Strict-Transport-Security: max-age=86400

Page title: Application

<!DOCTYPE html>
<html lang="en" data-critters-container>
  <head>
    <meta charset="utf-8">
    <title>Application</title>
    <base href="/">
    <meta name="description" content="Mortgage Preapproval Application">
    <meta http-equiv="X-UA-Compatible" content="IE=edge, chrome=1">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <link rel="icon" type="image/x-icon" href="../assets/img/favicon.ico">

    <!-- OneTrust Cookies Consent Notice start for td.com -->
    <script type="text/javascript">
      function OptanonWrapper() {
        if (!window.isFirst) {
          window.isFirst = true;
          let src;
          if (
            window.location.href.includes('//homeready.td.com/') ||
            window.location.href.includes('//pretsaetreproprios.td.com/')
          ) {
            // Adding Adobe Analytics tracking for PROD
            src = 'https://assets.adobedtm.com/178dbd5c3653/0550e7378f48/launch-5f440c68afde.min.js';
          } else if (window.location.href.includes('dev.td.com') || window.location.href.includes('localhost')) {
            // Adding Adobe Analytics tracking for DEV
            src = 'https://assets.adobedtm.com/178dbd5c3653/0550e7378f48/launch-6a78c10d95e8-development.min.js';
          } else {
            // Adding Adobe Analytics tracking for SIT, PAT, and staging
            src = 'https://assets.adobedtm.com/178dbd5c3653/0550e7378f48/launch-7ca7b7396999-staging.min.js';
          }

          try {
            const url = new URL(document.URL);
            const lang = (url.searchParams.get('lang') || url.searchParams.get('locale') || 'en').split(/-_/)[0];

            window.OneTrust.changeLanguage(lang);
          } catch (e) {
            // ignore the error
            console.warn(e);
          }

          const script = document.createElement('script');
          script.setAttribute('type', 'text/javascript');
          script.setAttribute('src', src);
          script.setAttribute('async', 'true');
          document.head.appendChild(script);
        }
      }
    </script>

    <!-- OneTrust Cookies Consent Notice start for td.com -->
    <script type="text/javascript">
      let urlOneTrust;
      let dataDomain;
      if (
        window.location.href.includes('//homeready.td.com/') ||
        window.location.href.includes('//pretsaetreproprios.td.com/')
      ) {
        urlOneTrust = 'https://cdn.cookielaw.org/consent/58bd9410-3537-402a-a626-f44d31eb8404/otSDKStub.js';
        dataDomain = '58bd9410-3537-402a-a626-f44d31eb8404';
      } else {
        urlOneTrust = 'https://cdn.cookielaw.org/consent/58bd9410-3537-402a-a626-f44d31eb8404-test/otSDKStub.js';
        dataDomain = '58bd9410-3537-402a-a626-f44d31eb8404-test';
      }
      const script2 = document.createElement('script');
      script2.setAttribute('type', 'text/javascript');
      script2.setAttribute('src', urlOneTrust);
      script2.setAttribute('charset', 'UTF-8');
      script2.setAttribute('data-domain-script', dataDomain);
      document.head.appendChild(script2);
    </script>
    <!-- OneTrust Cookies Consent Notice end for td.com -->

    <noscript>Version 1.0.1</noscript>
    <!-- Begin Ensighten Privacy Bootstrap -->
    <script type="text/javascript">
      let url;
      if (
        window.location.href.includes('//homeready.td.com/') ||
        window.location.href.includes('//pretsaetreproprios.td.com/')
      ) {
        // Adding Adobe Analytics tracking for PROD
        url = '//nexus.ensighten.com/tdb/hoj-privacy-prod/Bootstrap.js';
      } else {
        // Adding Adobe Analytics tracking for SIT, PAT, and staging
        url = '//nexus.ensighten.com/tdb/hoj-privacy-dev/Bootstrap.js';
      }

      const script1 = document.createElement('script');
      script1.setAttribute('type', 'text/javascript');
      script1.setAttribute('src', url);
      document.head.appendChild(script1);
    </script>
    <!-- End Ensighten Privacy Bootstrap -->

    <!-- Begin Adobe Target Flicker Control-->
    <script type="text/javascript">
      (function (win, doc, style,

Found 2026-01-02 by HttpPlugin

Create report

Open service 23.50.131.151:443 · homeready.td.com

2025-12-23 04:53

HTTP/1.1 200 OK
Last-Modified: Sun, 30 Nov 2025 02:51:59 GMT
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
Content-Length: 66902
Expires: Tue, 23 Dec 2025 04:53:11 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 23 Dec 2025 04:53:11 GMT
Connection: close
Set-Cookie: BIGipServerhomeready.td.com_App_443_pool=3583652618.64288.0000; expires=Tue, 23-Dec-2025 08:53:11 GMT; path=/; Httponly; Secure
Set-Cookie: BIGipServerBDC-homeready.td.com_Web_443_pool=3014406922.47873.0000; path=/; Httponly; Secure
Set-Cookie: TD-persist=BDC; Path=/; Expires=Tue, 23-Dec-2025 05:53:11 GMT
Strict-Transport-Security: max-age=86400

Page title: Application

<!DOCTYPE html>
<html lang="en" data-critters-container>
  <head>
    <meta charset="utf-8">
    <title>Application</title>
    <base href="/">
    <meta name="description" content="Mortgage Preapproval Application">
    <meta http-equiv="X-UA-Compatible" content="IE=edge, chrome=1">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <link rel="icon" type="image/x-icon" href="../assets/img/favicon.ico">

    <!-- OneTrust Cookies Consent Notice start for td.com -->
    <script type="text/javascript">
      function OptanonWrapper() {
        if (!window.isFirst) {
          window.isFirst = true;
          let src;
          if (
            window.location.href.includes('//homeready.td.com/') ||
            window.location.href.includes('//pretsaetreproprios.td.com/')
          ) {
            // Adding Adobe Analytics tracking for PROD
            src = 'https://assets.adobedtm.com/178dbd5c3653/0550e7378f48/launch-5f440c68afde.min.js';
          } else if (window.location.href.includes('dev.td.com') || window.location.href.includes('localhost')) {
            // Adding Adobe Analytics tracking for DEV
            src = 'https://assets.adobedtm.com/178dbd5c3653/0550e7378f48/launch-6a78c10d95e8-development.min.js';
          } else {
            // Adding Adobe Analytics tracking for SIT, PAT, and staging
            src = 'https://assets.adobedtm.com/178dbd5c3653/0550e7378f48/launch-7ca7b7396999-staging.min.js';
          }

          try {
            const url = new URL(document.URL);
            const lang = (url.searchParams.get('lang') || url.searchParams.get('locale') || 'en').split(/-_/)[0];

            window.OneTrust.changeLanguage(lang);
          } catch (e) {
            // ignore the error
            console.warn(e);
          }

          const script = document.createElement('script');
          script.setAttribute('type', 'text/javascript');
          script.setAttribute('src', src);
          script.setAttribute('async', 'true');
          document.head.appendChild(script);
        }
      }
    </script>

    <!-- OneTrust Cookies Consent Notice start for td.com -->
    <script type="text/javascript">
      let urlOneTrust;
      let dataDomain;
      if (
        window.location.href.includes('//homeready.td.com/') ||
        window.location.href.includes('//pretsaetreproprios.td.com/')
      ) {
        urlOneTrust = 'https://cdn.cookielaw.org/consent/58bd9410-3537-402a-a626-f44d31eb8404/otSDKStub.js';
        dataDomain = '58bd9410-3537-402a-a626-f44d31eb8404';
      } else {
        urlOneTrust = 'https://cdn.cookielaw.org/consent/58bd9410-3537-402a-a626-f44d31eb8404-test/otSDKStub.js';
        dataDomain = '58bd9410-3537-402a-a626-f44d31eb8404-test';
      }
      const script2 = document.createElement('script');
      script2.setAttribute('type', 'text/javascript');
      script2.setAttribute('src', urlOneTrust);
      script2.setAttribute('charset', 'UTF-8');
      script2.setAttribute('data-domain-script', dataDomain);
      document.head.appendChild(script2);
    </script>
    <!-- OneTrust Cookies Consent Notice end for td.com -->

    <noscript>Version 1.0.1</noscript>
    <!-- Begin Ensighten Privacy Bootstrap -->
    <script type="text/javascript">
      let url;
      if (
        window.location.href.includes('//homeready.td.com/') ||
        window.location.href.includes('//pretsaetreproprios.td.com/')
      ) {
        // Adding Adobe Analytics tracking for PROD
        url = '//nexus.ensighten.com/tdb/hoj-privacy-prod/Bootstrap.js';
      } else {
        // Adding Adobe Analytics tracking for SIT, PAT, and staging
        url = '//nexus.ensighten.com/tdb/hoj-privacy-dev/Bootstrap.js';
      }

      const script1 = document.createElement('script');
      script1.setAttribute('type', 'text/javascript');
      script1.setAttribute('src', url);
      document.head.appendChild(script1);
    </script>
    <!-- End Ensighten Privacy Bootstrap -->

    <!-- Begin Adobe Target Flicker Control-->
    <script type="text/javascript">
      (function (win, doc, style,

Found 2025-12-23 by HttpPlugin

Create report

homeready.td.comwww.homeowners.td.comrcp-proxy.td.comrcp-proxy-upload.td.compretsaetreproprios.td.comhomeowners.td.com

Fingerprint:

0791d3255a3efdd07eca3b546315d0ae970a635f90083378639b9999a3ef8dc1

CN:

homeready.td.com

Key:

RSA-2048

Issuer:

DigiCert G5 TLS RSA4096 SHA384 2021 CA1

Not before:

2025-09-11 00:00

Not after:

2026-10-12 23:59

Domain summary

homeready.td.com 4

1 recorded

IP summary

23.50.131.151 2

1 recorded

Domain homeready.td.com

Germany

Swagger API description is publicly available

Create report

Create report

Create report

Create report

homeready.td.comwww.homeowners.td.comrcp-proxy.td.comrcp-proxy-upload.td.compretsaetreproprios.td.comhomeowners.td.com

Domain summary

IP summary