LeakIX - Host 104.126.37.48

Host 104.126.37.48

Germany

Akamai International B.V.

Software information

AkamaiGHost

tcp/443

cloudflare

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.126.37.48
Domain: nativeappsdk.sb.action247.com
Port: 443
URL: https://nativeappsdk.sb.action247.com

First seen 2025-12-09 09:20
Last seen 2026-01-16 09:14
Open for 37 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549b3cde7047228433831cf194f4072699c3cbdcbfb

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/metadata/currentServerTime
GET /api/players/{id}/favoriteGames
GET /api/statistics/topWinners
GET /api/v1/certificates/public-keys
GET /api/v1/configurations
GET /api/v1/metadata/currentServerTime
GET /api/v1/players/{id}/configurations
GET /api/v1/players/{id}/favoriteGames
GET /api/v1/players/{id}/geoLocations
GET /api/v1/players/{id}/loyaltyPoints
GET /api/v1/players/{id}/payments/apple-pay/client-token
GET /api/v1/players/{id}/wallet
GET /api/v1/statistics/topWinners
PATCH /api/v1/sessions
POST /api/v1/logs
POST /api/v1/sessions/logout

Found on 2026-01-16 09:14

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549b3cde7047228433831cf194f4bfe8a906a170816

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/metadata/currentServerTime
GET /api/players/{id}/favoriteGames
GET /api/statistics/topWinners
GET /api/v1/configurations
GET /api/v1/metadata/currentServerTime
GET /api/v1/players/{id}/configurations
GET /api/v1/players/{id}/favoriteGames
GET /api/v1/players/{id}/geoLocations
GET /api/v1/players/{id}/loyaltyPoints
GET /api/v1/players/{id}/payments/apple-pay/client-token
GET /api/v1/players/{id}/wallet
GET /api/v1/statistics/topWinners
PATCH /api/v1/sessions
POST /api/v1/logs
POST /api/v1/sessions/logout

Found on 2026-01-02 12:30

Create report

Open service 104.126.37.48:443 · ptstaging.eu

2026-02-05 16:38

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 360
Expires: Thu, 05 Feb 2026 16:39:02 GMT
Date: Thu, 05 Feb 2026 16:39:02 GMT
Connection: close
Strict-Transport-Security: max-age=31536000

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;ptstaging&#46;eu&#47;" on this server.<P>
Reference&#32;&#35;18&#46;26257e68&#46;1770309542&#46;c286a51
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;26257e68&#46;1770309542&#46;c286a51</P>
</BODY>
</HTML>

Found 2026-02-05 by HttpPlugin

Create report

Open service 104.126.37.48:443 · careers.grandpacificresorts.com

2026-01-23 10:39

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Link: <https://careers.grandpacificresorts.com/wp-json/>; rel="https://api.w.org/"
Link: <https://careers.grandpacificresorts.com/wp-json/wp/v2/pages/797>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://careers.grandpacificresorts.com/>; rel=shortlink
X-Powered-By: WP Engine
X-Cacheable: SHORT
X-Cache-Group: normal
cf-cache-status: DYNAMIC
Server: cloudflare
CF-RAY: 9c26ab297ece918e-FRA
X-Akamai-Transformed: 9 15362 0 pmb=mTOE,2
Expires: Fri, 23 Jan 2026 10:39:41 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 23 Jan 2026 10:39:41 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
Set-Cookie: __cf_bm=SYCEF1Bp0iV40RV9eKiY.K85i5B3iX4lP8tyzPs5S8o-1769164781-1.0.1.1-gm.AEMDXDkmz8Xr9122PxolpBnwGia2qMSzDjb0HiWup6yn7DwLgCiNAPEK5IaZ5qAQC4KhFOmogVE6U_OkTMtnzFrER7Ybsm0f7iJOs5F4; path=/; expires=Fri, 23-Jan-26 11:09:41 GMT; domain=.careers.grandpacificresorts.com; HttpOnly; Secure; SameSite=None

Found 2026-01-23 by HttpPlugin

Create report

Open service 104.126.37.48:443 · nativeappsdk.sb.action247.com

2026-01-09 14:57

HTTP/1.1 404 Not Found
Content-Security-Policy: frame-ancestors 'none'
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 0
Expires: Fri, 09 Jan 2026 14:57:55 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 14:57:55 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=105
Server-Timing: origin; dur=24
Alt-Svc: h3=":443"; ma=93600
Server-Timing: ak_p; desc="1767970675347_1753097501_2006832992_12857_7198_0_5_-";dur=1

Found 2026-01-09 by HttpPlugin

Create report

Open service 104.126.37.48:443 · careers.grandpacificresorts.com

2026-01-09 02:25

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Link: <https://careers.grandpacificresorts.com/wp-json/>; rel="https://api.w.org/"
Link: <https://careers.grandpacificresorts.com/wp-json/wp/v2/pages/797>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://careers.grandpacificresorts.com/>; rel=shortlink
X-Powered-By: WP Engine
X-Cacheable: SHORT
X-Cache-Group: normal
cf-cache-status: DYNAMIC
Server: cloudflare
CF-RAY: 9bb07b95cade5c8d-FRA
X-Akamai-Transformed: 9 15334 0 pmb=mTOE,2
Expires: Fri, 09 Jan 2026 02:25:13 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 02:25:13 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
Set-Cookie: __cf_bm=HtKx65fhZa5H4JZ5JsHF3jBdVpUNyL7s4zhqcI7ut3o-1767925513-1.0.1.1-rFlshkGDgaY8tn0B1Rkjd3zhwe9VcG9Qp6TtVnAxDQG3yn2EHg7KdrDR2MZmkh8zbAWBeuaL4XqHjSsHTenZMJ3mIlJFZaf09GftjcmOJ8I; path=/; expires=Fri, 09-Jan-26 02:55:13 GMT; domain=.careers.grandpacificresorts.com; HttpOnly; Secure; SameSite=None

Found 2026-01-09 by HttpPlugin

Create report

Open service 104.126.37.48:443 · nativeappsdk.sb.action247.com

2026-01-02 12:30

HTTP/1.1 404 Not Found
Content-Security-Policy: frame-ancestors 'none'
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 0
Expires: Fri, 02 Jan 2026 12:30:18 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 12:30:18 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=100
Server-Timing: origin; dur=23
Alt-Svc: h3=":443"; ma=93600
Server-Timing: ak_p; desc="1767357018634_1753097501_1219935593_12308_5678_93_102_-";dur=1

Found 2026-01-02 by HttpPlugin

Create report

Open service 104.126.37.48:443 · careers.grandpacificresorts.com

2026-01-02 03:16

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Link: <https://careers.grandpacificresorts.com/wp-json/>; rel="https://api.w.org/"
Link: <https://careers.grandpacificresorts.com/wp-json/wp/v2/pages/797>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://careers.grandpacificresorts.com/>; rel=shortlink
X-Powered-By: WP Engine
X-Cacheable: SHORT
X-Cache-Group: normal
cf-cache-status: DYNAMIC
Server: cloudflare
CF-RAY: 9b7718a76d323737-FRA
X-Akamai-Transformed: 9 15334 0 pmb=mTOE,2
Expires: Fri, 02 Jan 2026 03:16:12 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 03:16:12 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
Set-Cookie: __cf_bm=gUOYwnV.EvAqJlmv_uM3JPhR6EOYftAkq0XXnkQNK_8-1767323772-1.0.1.1-2Rb9LOblRxjDVOZJE2dbPdBcXKdkFewn_L8TCJV0Mg6D78_jFoucfjUnkGrMPOgBecvhKlWazXefIq938uDCFY67zs3SdpUqwKtpcxtUT.M; path=/; expires=Fri, 02-Jan-26 03:46:12 GMT; domain=.careers.grandpacificresorts.com; HttpOnly; Secure; SameSite=None

Found 2026-01-02 by HttpPlugin

Create report

Open service 104.126.37.48:443 · nativeappsdk.sb.action247.com

2025-12-22 16:10

HTTP/1.1 404 Not Found
Content-Security-Policy: frame-ancestors 'none'
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 0
Expires: Mon, 22 Dec 2025 16:10:18 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 22 Dec 2025 16:10:18 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=414
Server-Timing: origin; dur=40
Alt-Svc: h3=":443"; ma=93600
Server-Timing: ak_p; desc="1766419818067_1753097516_432130165_45422_9297_0_45_-";dur=1

Found 2025-12-22 by HttpPlugin

Create report

Open service 104.126.37.48:443 · careers.grandpacificresorts.com

2025-12-22 11:41

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Link: <https://careers.grandpacificresorts.com/wp-json/>; rel="https://api.w.org/"
Link: <https://careers.grandpacificresorts.com/wp-json/wp/v2/pages/797>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://careers.grandpacificresorts.com/>; rel=shortlink
X-Powered-By: WP Engine
X-Cacheable: SHORT
X-Cache-Group: normal
cf-cache-status: DYNAMIC
Server: cloudflare
CF-RAY: 9b1f59b1adb9d9ce-FRA
X-Akamai-Transformed: 9 14520 0 pmb=mTOE,2
Expires: Mon, 22 Dec 2025 11:41:29 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 22 Dec 2025 11:41:29 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
Set-Cookie: __cf_bm=PMFVmlOc6_zgpf91ebwPmKs3_BI0zAQ77EgRgYO0RlI-1766403689-1.0.1.1-1Kwsoz3uA7Mp246gSgtcmnNtoKBxg4xfGNd6KRQnPng3PF5yHiH9Z31rMRqEy_8AcRoIjZLJCjYsQn6fYhatoaFLZDuzbeXYs4JjRvngXRo; path=/; expires=Mon, 22-Dec-25 12:11:29 GMT; domain=.careers.grandpacificresorts.com; HttpOnly; Secure; SameSite=None

Found 2025-12-22 by HttpPlugin

Create report

*.ptstaging.euptstaging.eu

Fingerprint:

99c52feb6f80b0d979e345d4f619b38551b28f6b69c8fef6c9acad4169e3458b

CN:

*.ptstaging.eu

Key:

ECDSA-256

Issuer:

DigiCert TLS Hybrid ECC SHA384 2020 CA1

Not before:

2025-02-28 00:00

Not after:

2026-02-28 23:59

careers.grandpacificresorts.comcarlsbadinn.grandpacificresorts.commarbrisa.grandpacificresorts.compalisades.grandpacificresorts.comseapointe.grandpacificresorts.comwebmail.grandpacificresorts.comwww.gpresorts.comwww.grandpacificresorts.com

Fingerprint:

4f00291fe6b96198b81c0d9c9bd9cd9e29c8ac814c1ccf0c9767777d4cbe6d90

CN:

www.gpresorts.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-11-16 23:53

Not after:

2026-02-14 23:53

asg-webapi.sb.action247.comasgusa-restapi.sb.action247.comfileservices.sb.action247.comgamesrv1.sb.action247.cominfo.sb.action247.comnativeappsdk.sb.action247.compaymentprocessorswebapi.sb.action247.comsb.action247.comwebapi.sb.action247.com

Fingerprint:

955a225bc3af461fb838974df1d6a951eaeb1ade326f92b909ccfedbbbc2cb03

CN:

sb.action247.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-12-10 03:57

Not after:

2026-03-10 03:57

Domain summary

nativeappsdk.sb.action247.com 4 ptstaging.eu 0 careers.grandpacificresorts.com 3

3 recorded