LeakIX - Host 2.20.142.9

Host 2.20.142.9

Germany

Akamai International B.V.

Software information

AkamaiNetStorage

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 2.20.142.9
Domain: partnerlearning.gcash.com
Port: 443
URL: https://partnerlearning.gcash.com

First seen 2024-03-14 07:04
Last seen 2026-02-02 00:44
Open for 689 days

Severity: high
Fingerprint: 5f32cf5d6962f09c74247ea574247ea56ab2ec0e98c23140fa0602aa6a03462a

Found 56 files trough .DS_Store spidering:

/index.php
/license.txt
/readme.html
/wp-activate.php
/wp-admin
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-content/index.php
/wp-content/plugins
/wp-content/plugins/elementor
/wp-content/plugins/wp-mail-smtp
/wp-content/themes
/wp-content/tutor_import.json
/wp-content/upgrade
/wp-content/upgrade-temp-backup
/wp-content/uploads
/wp-content/uploads/2019
/wp-content/uploads/2021
/wp-content/uploads/2023
/wp-content/uploads/2023/03
/wp-content/uploads/2023/04
/wp-content/uploads/2023/05
/wp-content/uploads/2023/06
/wp-content/uploads/2023/07
/wp-content/uploads/2023/08
/wp-content/uploads/elementor
/wp-content/uploads/qubely
/wp-content/uploads/rcp-debug.log
/wp-content/uploads/tutor-certificate-builder
/wp-content/uploads/tutor-certificates
/wp-content/uploads/tutor-json
/wp-content/uploads/wc-logs
/wp-content/uploads/woocommerce-placeholder-1024x1024.png
/wp-content/uploads/woocommerce-placeholder-1200x750.png
/wp-content/uploads/woocommerce-placeholder-140x100.png
/wp-content/uploads/woocommerce-placeholder-150x150.png
/wp-content/uploads/woocommerce-placeholder-160x90.png
/wp-content/uploads/woocommerce-placeholder-300x300.png
/wp-content/uploads/woocommerce-placeholder-540x320.png
/wp-content/uploads/woocommerce-placeholder-768x768.png
/wp-content/uploads/woocommerce-placeholder.png
/wp-content/uploads/woocommerce_uploads
/wp-content/uploads/wpcode
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2026-02-02 00:44

Severity: high
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b79ca15ebcc657e14adaa422389274cbb5

Found 128 files trough .DS_Store spidering:

/index.php
/license.txt
/readme.html
/wp-activate.php
/wp-admin
/wp-admin/about.php
/wp-admin/admin-ajax.php
/wp-admin/admin-footer.php
/wp-admin/admin-functions.php
/wp-admin/admin-header.php
/wp-admin/admin-post.php
/wp-admin/admin.php
/wp-admin/async-upload.php
/wp-admin/authorize-application.php
/wp-admin/comment.php
/wp-admin/contribute.php
/wp-admin/credits.php
/wp-admin/css
/wp-admin/custom-background.php
/wp-admin/custom-header.php
/wp-admin/customize.php
/wp-admin/edit-comments.php
/wp-admin/edit-form-advanced.php
/wp-admin/edit-form-blocks.php
/wp-admin/edit-form-comment.php
/wp-admin/edit-link-form.php
/wp-admin/edit-tag-form.php
/wp-admin/edit-tags.php
/wp-admin/edit.php
/wp-admin/erase-personal-data.php
/wp-admin/export-personal-data.php
/wp-admin/export.php
/wp-admin/freedoms.php
/wp-admin/images
/wp-admin/images/about-header-about.svg
/wp-admin/images/about-header-contribute.svg
/wp-admin/images/about-header-credits.svg
/wp-admin/images/about-header-freedoms.svg
/wp-admin/images/about-header-privacy.svg
/wp-admin/images/about-release-badge.svg
/wp-admin/images/about-texture.png
/wp-admin/images/align-center-2x.png
/wp-admin/images/align-center.png
/wp-admin/images/align-left-2x.png
/wp-admin/images/align-left.png
/wp-admin/images/align-none-2x.png
/wp-admin/images/align-none.png
/wp-admin/images/align-right-2x.png
/wp-admin/images/align-right.png
/wp-admin/images/arrows-2x.png
/wp-admin/images/arrows.png
/wp-admin/images/browser-rtl.png
/wp-admin/images/browser.png
/wp-admin/images/bubble_bg-2x.gif
/wp-admin/images/bubble_bg.gif
/wp-admin/images/comment-grey-bubble-2x.png
/wp-admin/images/comment-grey-bubble.png
/wp-admin/images/contribute-code.svg
/wp-admin/images/contribute-main.svg
/wp-admin/images/contribute-no-code.svg
/wp-admin/images/dashboard-background.svg
/wp-admin/images/date-button-2x.gif
/wp-admin/images/date-button.gif
/wp-admin/images/freedom-1.svg
/wp-admin/images/freedom-2.svg
/wp-admin/images/freedom-3.svg
/wp-admin/images/freedom-4.svg
/wp-admin/images/gcash-img.zip
/wp-admin/images/generic.png
/wp-admin/images/icons32-2x.png
/wp-admin/images/icons32-vs-2x.png
/wp-admin/images/icons32-vs.png
/wp-admin/images/icons32.png
/wp-admin/images/imgedit-icons-2x.png
/wp-admin/images/imgedit-icons.png
/wp-admin/images/list-2x.png
/wp-admin/images/list.png
/wp-admin/images/loading.gif
/wp-admin/images/marker.png
/wp-admin/images/mask.png
/wp-admin/images/media-button-2x.png
/wp-admin/images/media-button-image.gif
/wp-admin/images/media-button-music.gif
/wp-admin/images/media-button-other.gif
/wp-admin/images/media-button-video.gif
/wp-admin/images/media-button.png
/wp-admin/images/menu-2x.png
/wp-admin/images/menu-vs-2x.png
/wp-admin/images/menu-vs.png
/wp-admin/images/menu.png
/wp-admin/images/no.png
/wp-admin/images/post-formats-vs.png
/wp-admin/images/post-formats.png
/wp-admin/images/post-formats32-vs.png
/wp-admin/images/post-formats32.png
/wp-admin/images/privacy.svg
/wp-admin/images/resize-2x.gif
/wp-admin/images/resize-rtl-2x.gif
/wp-admin/images/resize-rtl.gif
/wp-admin/images/resize.gif
/wp-admin/images/se.png
/wp-admin/images/sort-2x.gif
/wp-admin/images/sort.gif
/wp-admin/images/spinner-2x.gif
/wp-admin/images/spinner.gif
/wp-admin/images/stars-2x.png
/wp-admin/images/stars.png
/wp-admin/images/w-logo-blue-bak.png
/wp-admin/images/w-logo-blue.png
/wp-admin/images/w-logo-white.png
/wp-admin/images/wheel.png
/wp-admin/images/wordpress-logo-bak.svg
/wp-admin/images/wordpress-logo-white.svg
/wp-admin/images/wordpress-logo.png
/wp-admin/images/wordpress-logo.svg
/wp-admin/images/wpspin_light-2x.gif
/wp-admin/images/wpspin_light.gif
/wp-admin/images/xit-2x.gif
/wp-admin/images/xit.gif
/wp-admin/images/yes.png
/wp-admin/import.php
/wp-admin/includes
/wp-admin/index.php
/wp-admin/install-helper.php
/wp-admin/install.php
/wp-admin/js
/wp-admin/link-add.php
/wp-admin/link-manager.php

Found on 2025-12-17 03:10

Severity: medium
Fingerprint: 5f32cf5d6962f09c47a1e7ef47a1e7ef64288b14bf28f1c2ac0229703847acdf

Found 120 files trough .DS_Store spidering:

/index.php
/license.txt
/readme.html
/wp-activate.php
/wp-admin
/wp-admin/about.php
/wp-admin/admin-ajax.php
/wp-admin/admin-footer.php
/wp-admin/admin-functions.php
/wp-admin/admin-header.php
/wp-admin/admin-post.php
/wp-admin/admin.php
/wp-admin/async-upload.php
/wp-admin/authorize-application.php
/wp-admin/comment.php
/wp-admin/contribute.php
/wp-admin/credits.php
/wp-admin/css
/wp-admin/custom-background.php
/wp-admin/custom-header.php
/wp-admin/customize.php
/wp-admin/edit-comments.php
/wp-admin/edit-form-advanced.php
/wp-admin/edit-form-blocks.php
/wp-admin/edit-form-comment.php
/wp-admin/edit-link-form.php
/wp-admin/edit-tag-form.php
/wp-admin/edit-tags.php
/wp-admin/edit.php
/wp-admin/erase-personal-data.php
/wp-admin/export-personal-data.php
/wp-admin/export.php
/wp-admin/freedoms.php
/wp-admin/images
/wp-admin/import.php
/wp-admin/includes
/wp-admin/index.php
/wp-admin/install-helper.php
/wp-admin/install.php
/wp-admin/js
/wp-admin/link-add.php
/wp-admin/link-manager.php
/wp-admin/link-parse-opml.php
/wp-admin/link.php
/wp-admin/load-scripts.php
/wp-admin/load-styles.php
/wp-admin/maint
/wp-admin/media-new.php
/wp-admin/media-upload.php
/wp-admin/media.php
/wp-admin/menu-header.php
/wp-admin/menu.php
/wp-admin/moderation.php
/wp-admin/ms-admin.php
/wp-admin/ms-delete-site.php
/wp-admin/ms-edit.php
/wp-admin/ms-options.php
/wp-admin/ms-sites.php
/wp-admin/ms-themes.php
/wp-admin/ms-upgrade-network.php
/wp-admin/ms-users.php
/wp-admin/my-sites.php
/wp-admin/nav-menus.php
/wp-admin/network
/wp-admin/network.php
/wp-admin/options-discussion.php
/wp-admin/options-general.php
/wp-admin/options-head.php
/wp-admin/options-media.php
/wp-admin/options-permalink.php
/wp-admin/options-privacy.php
/wp-admin/options-reading.php
/wp-admin/options-writing.php
/wp-admin/options.php
/wp-admin/plugin-editor.php
/wp-admin/plugin-install.php
/wp-admin/plugins.php
/wp-admin/post-new.php
/wp-admin/post.php
/wp-admin/press-this.php
/wp-admin/privacy-policy-guide.php
/wp-admin/privacy.php
/wp-admin/profile.php
/wp-admin/revision.php
/wp-admin/setup-config.php
/wp-admin/site-editor.php
/wp-admin/site-health-info.php
/wp-admin/site-health.php
/wp-admin/term.php
/wp-admin/theme-editor.php
/wp-admin/theme-install.php
/wp-admin/themes.php
/wp-admin/tools.php
/wp-admin/update-core.php
/wp-admin/update.php
/wp-admin/upgrade-functions.php
/wp-admin/upgrade.php
/wp-admin/upload.php
/wp-admin/user
/wp-admin/user-edit.php
/wp-admin/user-new.php
/wp-admin/users.php
/wp-admin/widgets-form-blocks.php
/wp-admin/widgets-form.php
/wp-admin/widgets.php
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2025-11-07 03:32

Severity: high
Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb35d9aca00b34a044e9c6388b40d0c2e48

Found 29 files trough .DS_Store spidering:

/index.php
/license.txt
/readme.html
/wp-activate.php
/wp-admin
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-content/index.php
/wp-content/plugins
/wp-content/plugins/elementor
/wp-content/plugins/wp-mail-smtp
/wp-content/themes
/wp-content/tutor_import.json
/wp-content/upgrade
/wp-content/upgrade-temp-backup
/wp-content/uploads
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2025-03-22 12:02

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.142.9
Domain: stripe-ledger-gateway.dev-submittable.com
Port: 443
URL: https://stripe-ledger-gateway.dev-submittable.com

First seen 2025-11-24 15:52
Last seen 2026-02-01 19:59
Open for 69 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549cb90f838ab2ad2cc9821a1329821a1329821a132
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /payments/fee
POST /payments
POST /stripe
```
  Found on 2026-02-01 19:59
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.142.9
Domain: sape-api-selfservice.citbank.com
Port: 443
URL: https://sape-api-selfservice.citbank.com

First seen 2025-10-14 15:00
Last seen 2025-12-16 14:03
Open for 62 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549a4839f52f19e383c83da541842e1354edab959f6

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/AccountClosure/GetAccountClosureSwitch
GET /api/AccountClosure/GetExistingAccountsForClosure
GET /api/AccountClosure/GetExternalAccountsForClosure
GET /api/AccountClosure/IsAccountClosureSwitchEnabled
GET /api/AppHelper/DeleteSession
GET /api/AppHelper/GetAnalyticsGuid
GET /api/AppHelper/GetCookieAttributes
GET /api/AppHelper/IsExistingCustomer
GET /api/AppHelper/IsSSOUserFlag
GET /api/Applicant/GetCustomerDetails
GET /api/Applicant/GetFakeSSNList
GET /api/Beneficiary/GetAllExistingAccounts
GET /api/Beneficiary/GetAllExistingAccountsAndBeneficiaries
GET /api/Beneficiary/GetSingleExistingAccountBeneficiaries
GET /api/CustomerRetentionOffer/GetCustomerRetentionOfferDetails
GET /api/CustomerRetentionOffer/UpdateOfferStatusAccepted
GET /api/ErrorLog/EndSesion
GET /api/ExistingCustomerDashboard/GetExistingCustomerAccounts
GET /api/ExistingCustomerDashboard/GetExistingCustomerDashboardInfo
GET /api/ExistingCustomerDashboard/GetExistingCustomerDocuments
GET /api/ExistingCustomerDashboard/GetExistingOAODocuments
GET /api/ExistingCustomerDashboard/GetFile
GET /api/ExistingCustomerDashboard/GetFileContent
GET /api/ExistingCustomerDashboard/ProductDisclosureDocument
GET /api/ExistingCustomerDashboard/PromotionDisclosureDocument
GET /api/Lookup/GetCustomerLookup
GET /api/Lookup/GetDocumentCategories
GET /api/MaturingCD/GetCDProducts
GET /api/MaturingCD/GetCdAccountDetails
GET /api/MaturingCD/GetCustomerforAgreements
GET /api/MaturingCD/GetExistingCustomerDetails
GET /api/MaturingCD/GetExistingInternalCDAccounts
GET /api/MaturingCD/GetExistingSavingsAccounts
GET /api/MaturingCD/GetRecentMailAddressByAccountNumber
GET /api/MaturingCD/GetTransferOptions
GET /api/MaturingCD/IsManageCDOn
GET /api/MaturingCD/IsUserHaveExternalAccounts
GET /api/Offer/GetAllOfferCategories
GET /api/Offer/GetAllOffers
GET /api/Offer/GetOffer
GET /api/SSP/GetIsD1Flag
GET /api/Schedule/GetAssetsLiabilitiesAndAccounts
GET /api/Schedule/GetCustomerScheduleInfo
GET /api/Schedule/LookupDetails
GET /api/Schedule/ScheduleConfirmation
GET /api/Schedule/TestAuth
GET /api/SelfService/GetDeepLinkAccountNumber
GET /api/SelfService/GetExistingCustomerSelfServiceInfo
GET /api/SelfService/GetFISDownStatus
GET /api/SelfService/GetMobilePartnerOfferExternalBrowserSwitch
GET /api/SelfService/GetWireTransferSwitch
GET /api/SelfService/PreMaintenanceSwitch
GET /api/Status/GetAppHealthCheck
GET /api/Status/GetWealthInternalAppHealthCheck
GET /api/Status/GetWealthInternalAppHealthCheckViaProxyService
GET /api/WireTransfer/CheckWireRequestCompleteStatus
GET /api/WireTransfer/GetDocumentGuid
GET /api/WireTransfer/GetExistingAccountsForWireTransfer
GET /api/WireTransfer/GetExternalBankDetailsByRoutingNumber
GET /api/WireTransfer/GetWireDate
GET /api/WireTransfer/GetWireFeeConfigurations
GET /api/WireTransfer/GetWireTransferPurposes
GET /api/WireTransfer/GetWireTransferRecipients
POST /OAOSSO/Auth
POST /OAOSSO/Consumer
POST /api/AccountClosure/BadMailCodeInquiryForMailACheck
POST /api/AccountClosure/ConfirmAccountClosure
POST /api/AppHelper/ExtendSession
POST /api/Beneficiary/AddBeneficiariesToAccountAsync
POST /api/Beneficiary/RemoveBeneficiaryFromAccount
POST /api/Beneficiary/ValidApplicantAddress
POST /api/Beneficiary/ValidateBeneficiaryNameSSNDOB
POST /api/ErrorLog/LogError
POST /api/ExistingCustomerDashboard/DeleteCustomerDocument
POST /api/ExistingCustomerDashboard/InitiateBannerOfferOAORequest
POST /api/ExistingCustomerDashboard/InitiateOAORequest
POST /api/ExistingCustomerDashboard/InitiateWealthOAORequest
POST /api/ExistingCustomerDashboard/UploadCustomerDocuments
POST /api/MaturingCD/ConfirmExistingSavingsTransfer
POST /api/MaturingCD/InitializeNewAccountInternalTransfer
POST /api/MaturingCD/MaturingCDRetention
POST /api/MaturingCD/RenegotiateMaturingCD
POST /api/MaturingCD/SaveMailACheck
POST /api/MaturingCD/SaveManageCDRequest
POST /api/MaturingCD/UpdateBackupWithholding
POST /api/MaturingCD/UpdateESignPrivacyNoticeConsumerReportFlag
POST /api/MaturingCD/UpdateEsignConsent
POST /api/Offer/OfferEventUpdate
POST /api/SSP/CeBMobileAuth
POST /api/SSP/DigitalAuth
POST /api/SSP/GetAccountClosureOffers
POST /api/SSP/GetCustomerOffers
POST /api/SSP/GetCustomerRetentionOffers
POST /api/SSP/OAOSSPAuth
POST /api/SSP/SetAccountClosureOfferStatus
POST /api/SSP/SetRetentionOfferTransferStatus
POST /api/SSP/ValidateSAML
POST /api/SSPActivityLog/InsertSSPActivityLog
POST /api/Schedule/Assets
POST /api/Schedule/Liabilities
POST /api/Schedule/RiskToleranceAndRetirement
POST /api/Schedule/ScheduleInfo
POST /api/SmartSaver/GetSmartSavingsProjection
POST /api/SmartSaver/SaveSmartSaverEnrollmentInfo
POST /api/Splash/AddSplashCustomers
POST /api/Splash/AddSplashPages
POST /api/Splash/AddSplashPresentationStatus
POST /api/Wealth/SaveWealthContactForm
POST /api/WireTransfer/DeleteWireTransferRecipient
POST /api/WireTransfer/GenerateOTP
POST /api/WireTransfer/GetCustomerPhoneNumbers
POST /api/WireTransfer/InitWireTransfer
POST /api/WireTransfer/SaveWireTransferRecipient
POST /api/WireTransfer/UpdateDisclosure
POST /api/WireTransfer/UpdateWireTransferRecipient
POST /api/WireTransfer/VerifyOTP

Found on 2025-12-16 14:03

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549a4839f52f19e383c83da541842e1354e86da6127

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/AccountClosure/GetAccountClosureSwitch
GET /api/AccountClosure/GetExistingAccountsForClosure
GET /api/AccountClosure/GetExternalAccountsForClosure
GET /api/AccountClosure/IsAccountClosureSwitchEnabled
GET /api/AppHelper/DeleteSession
GET /api/AppHelper/GetAnalyticsGuid
GET /api/AppHelper/GetCookieAttributes
GET /api/AppHelper/IsExistingCustomer
GET /api/AppHelper/IsSSOUserFlag
GET /api/Applicant/GetCustomerDetails
GET /api/Applicant/GetFakeSSNList
GET /api/Beneficiary/GetAllExistingAccounts
GET /api/Beneficiary/GetAllExistingAccountsAndBeneficiaries
GET /api/Beneficiary/GetSingleExistingAccountBeneficiaries
GET /api/CustomerRetentionOffer/GetCustomerRetentionOfferDetails
GET /api/CustomerRetentionOffer/UpdateOfferStatusAccepted
GET /api/ErrorLog/EndSesion
GET /api/ExistingCustomerDashboard/GetExistingCustomerAccounts
GET /api/ExistingCustomerDashboard/GetExistingCustomerDashboardInfo
GET /api/ExistingCustomerDashboard/GetExistingCustomerDocuments
GET /api/ExistingCustomerDashboard/GetExistingOAODocuments
GET /api/ExistingCustomerDashboard/GetFile
GET /api/ExistingCustomerDashboard/ProductDisclosureDocument
GET /api/ExistingCustomerDashboard/PromotionDisclosureDocument
GET /api/Lookup/GetCustomerLookup
GET /api/Lookup/GetDocumentCategories
GET /api/MaturingCD/GetCDProducts
GET /api/MaturingCD/GetCdAccountDetails
GET /api/MaturingCD/GetCustomerforAgreements
GET /api/MaturingCD/GetExistingCustomerDetails
GET /api/MaturingCD/GetExistingInternalCDAccounts
GET /api/MaturingCD/GetExistingSavingsAccounts
GET /api/MaturingCD/GetRecentMailAddressByAccountNumber
GET /api/MaturingCD/GetTransferOptions
GET /api/MaturingCD/IsManageCDOn
GET /api/MaturingCD/IsUserHaveExternalAccounts
GET /api/Offer/GetAllOfferCategories
GET /api/Offer/GetAllOffers
GET /api/Offer/GetOffer
GET /api/SSP/GetIsD1Flag
GET /api/Schedule/GetAssetsLiabilitiesAndAccounts
GET /api/Schedule/GetCustomerScheduleInfo
GET /api/Schedule/LookupDetails
GET /api/Schedule/ScheduleConfirmation
GET /api/Schedule/TestAuth
GET /api/SelfService/GetDeepLinkAccountNumber
GET /api/SelfService/GetExistingCustomerSelfServiceInfo
GET /api/SelfService/GetFISDownStatus
GET /api/SelfService/GetMobilePartnerOfferExternalBrowserSwitch
GET /api/SelfService/GetWireTransferSwitch
GET /api/SelfService/PreMaintenanceSwitch
GET /api/Status/GetAppHealthCheck
GET /api/Status/GetWealthInternalAppHealthCheck
GET /api/Status/GetWealthInternalAppHealthCheckViaProxyService
GET /api/WireTransfer/CheckWireRequestCompleteStatus
GET /api/WireTransfer/GetDocumentGuid
GET /api/WireTransfer/GetExistingAccountsForWireTransfer
GET /api/WireTransfer/GetExternalBankDetailsByRoutingNumber
GET /api/WireTransfer/GetWireDate
GET /api/WireTransfer/GetWireFeeConfigurations
GET /api/WireTransfer/GetWireTransferPurposes
GET /api/WireTransfer/GetWireTransferRecipients
POST /OAOSSO/Auth
POST /OAOSSO/Consumer
POST /api/AccountClosure/BadMailCodeInquiryForMailACheck
POST /api/AccountClosure/ConfirmAccountClosure
POST /api/AppHelper/ExtendSession
POST /api/Beneficiary/AddBeneficiariesToAccountAsync
POST /api/Beneficiary/RemoveBeneficiaryFromAccount
POST /api/Beneficiary/ValidApplicantAddress
POST /api/Beneficiary/ValidateBeneficiaryNameSSNDOB
POST /api/ErrorLog/LogError
POST /api/ExistingCustomerDashboard/DeleteCustomerDocument
POST /api/ExistingCustomerDashboard/InitiateBannerOfferOAORequest
POST /api/ExistingCustomerDashboard/InitiateOAORequest
POST /api/ExistingCustomerDashboard/InitiateWealthOAORequest
POST /api/ExistingCustomerDashboard/UploadCustomerDocuments
POST /api/MaturingCD/ConfirmExistingSavingsTransfer
POST /api/MaturingCD/InitializeNewAccountInternalTransfer
POST /api/MaturingCD/MaturingCDRetention
POST /api/MaturingCD/RenegotiateMaturingCD
POST /api/MaturingCD/SaveMailACheck
POST /api/MaturingCD/SaveManageCDRequest
POST /api/MaturingCD/UpdateBackupWithholding
POST /api/MaturingCD/UpdateESignPrivacyNoticeConsumerReportFlag
POST /api/MaturingCD/UpdateEsignConsent
POST /api/Offer/OfferEventUpdate
POST /api/SSP/CeBMobileAuth
POST /api/SSP/DigitalAuth
POST /api/SSP/GetAccountClosureOffers
POST /api/SSP/GetCustomerOffers
POST /api/SSP/GetCustomerRetentionOffers
POST /api/SSP/OAOSSPAuth
POST /api/SSP/SetAccountClosureOfferStatus
POST /api/SSP/SetRetentionOfferTransferStatus
POST /api/SSP/ValidateSAML
POST /api/SSPActivityLog/InsertSSPActivityLog
POST /api/Schedule/Assets
POST /api/Schedule/Liabilities
POST /api/Schedule/RiskToleranceAndRetirement
POST /api/Schedule/ScheduleInfo
POST /api/SmartSaver/GetSmartSavingsProjection
POST /api/SmartSaver/SaveSmartSaverEnrollmentInfo
POST /api/Splash/AddSplashCustomers
POST /api/Splash/AddSplashPages
POST /api/Splash/AddSplashPresentationStatus
POST /api/Wealth/SaveWealthContactForm
POST /api/WireTransfer/DeleteWireTransferRecipient
POST /api/WireTransfer/GenerateOTP
POST /api/WireTransfer/GetCustomerPhoneNumbers
POST /api/WireTransfer/InitWireTransfer
POST /api/WireTransfer/SaveWireTransferRecipient
POST /api/WireTransfer/UpdateDisclosure
POST /api/WireTransfer/UpdateWireTransferRecipient
POST /api/WireTransfer/VerifyOTP

Found on 2025-11-23 10:00

Create report

Open service 2.20.142.9:443 · partnerlearning.gcash.com

2026-01-22 23:15

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Retry-After: 600
x-envoy-upstream-service-time: 239
X-Akamai-Transformed: 9 1352 0 pmb=mRUM,1
Expires: Thu, 22 Jan 2026 23:15:46 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 22 Jan 2026 23:15:46 GMT
Content-Length: 7028
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=114
Server-Timing: origin; dur=926
Alt-Svc: h3=":443"; ma=93600
Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload
Server-Timing: ak_p; desc="1769123744958_34901526_206233208_103983_11303_146_148_-";dur=1

Page title: GCash Partner LMS

<!doctype html>
<html lang="en-US">
<head>
	<meta charset="UTF-8">
	<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=2.0">
	<link rel="profile" href="http://gmpg.org/xfn/11">
	<title>GCash Partner LMS</title>
	<style type="text/css">
	html, body {
		margin: 0 auto;
		font-family: 'Roboto', sans-serif;
		height: 100%;
		background: #eeeef4;
		font-weight: 100;
		user-select: none;
	}
	main {
		height: 100%;
		display: flex;
		margin: 0 20px;
		text-align: center;
		flex-direction: column;
		align-items: center;
		justify-content: center;
	}
	main h1 {
		font-size: 3em;
		font-weight: 100;
		color: #f44;
		margin: 0;
	}
	main h2 {
		font-size: 1.5em;
		font-weight: 100;
		margin-bottom: 0;
	}
	main h3 {
		font-size: 1.5em;
		font-weight: 100;
		margin-top: 0;
	}
	main a {
		font-size: 1.5em;
		font-weight: 300;
		color: #f44;
		text-decoration: none;
	}

</style>

                              <script>!function(e){var n="https://s.go-mpulse.net/boomerang/";if("False"=="True")e.BOOMR_config=e.BOOMR_config||{},e.BOOMR_config.PageParams=e.BOOMR_config.PageParams||{},e.BOOMR_config.PageParams.pci=!0,n="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="CQ5NU-3VNCL-F4GTA-N5NTZ-2H76W",function(){function e(){if(!o){var e=document.createElement("script");e.id="boomr-scr-as",e.src=window.BOOMR.url,e.async=!0,i.parentNode.appendChild(e),o=!0}}function t(e){o=!0;var n,t,a,r,d=document,O=window;if(window.BOOMR.snippetMethod=e?"if":"i",t=function(e,n){var t=d.createElement("script");t.id=n||"boomr-if-as",t.src=window.BOOMR.url,BOOMR_lstart=(new Date).getTime(),e=e||d.body,e.appendChild(t)},!window.addEventListener&&window.attachEvent&&navigator.userAgent.match(/MSIE [67]\./))return window.BOOMR.snippetMethod="s",void t(i.parentNode,"boomr-async");a=document.createElement("IFRAME"),a.src="about:blank",a.title="",a.role="presentation",a.loading="eager",r=(a.frameElement||a).style,r.width=0,r.height=0,r.border=0,r.display="none",i.parentNode.appendChild(a);try{O=a.contentWindow,d=O.document.open()}catch(_){n=document.domain,a.src="javascript:var d=document.open();d.domain='"+n+"';void(0);",O=a.contentWindow,d=O.document.open()}if(n)d._boomrl=function(){this.domain=n,t()},d.write("<bo"+"dy onload='document._boomrl();'>");else if(O._boomrl=function(){t()},O.addEventListener)O.addEventListener("load",O._boomrl,!1);else if(O.attachEvent)O.attachEvent("onload",O._boomrl);d.close()}function a(e){window.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!window.BOOMR||!window.BOOMR.version&&!window.BOOMR.snippetExecuted){window.BOOMR=window.BOOMR||{},window.BOOMR.snippetStart=(new Date).getTime(),window.BOOMR.snippetExecuted=!0,window.BOOMR.snippetVersion=12,window.BOOMR.url=n+"CQ5NU-3VNCL-F4GTA-N5NTZ-2H76W";var i=document.currentScript||document.getElementsByTagName("script")[0],o=!1,r=document.createElement("link");if(r.relList&&"function"==typeof r.relList.supports&&r.relList.supports("preload")&&"as"in r)window.BOOMR.snippetMethod="p",r.href=window.BOOMR.url,r.rel="preload",r.as="script",r.addEventListener("load",e),r.addEventListener("error",function(){t(!0)}),setTimeout(function(){if(!o)t(!0)},3e3),BOOMR_lstart=(new Date).getTime(),i.parentNode.appendChild(r);else t(!1);if(window.addEventListener)window.addEventListener("load",a,!1);else if(window.attachEvent)window.attachEvent("onload",a)}}(),"".length>0)if(e&&"performance"in e&&e.performance&&"function"==typeof e.performance.setResourceTimingBufferSize)e.performance.setResourceTimingBufferSize();!function(){if(BOOMR=e.BOOMR||{},BOOMR.plugins=BOOMR.plugins||{},!BOOMR.plugins.AK){var n=""=="true"?1:0,t="",a="t5azasaccshas2lsv6qq-f-c064b5bd3-clientnsv4-s.akamaihd.net",i="false"=="true"?2:1,o={"ak.v":"39","ak.cp":"1529290","ak.ai":parseInt("973624",10),"ak.ol":"0","ak.cr":146,"ak.ipv":4,"ak.proto":"http/1.1","ak.rid":"c4ade78","ak.r":22668,"ak.a2":n,"ak.m":"dscb","ak.n":"essl","ak.bpcip":"159.65.144.0","ak.cport":38838,"ak.gh":"2.20.142.22","ak.quicv":"","ak.tlsv":"tls1.3","ak.0rtt":"","ak.0rtt.ed":"","ak.csrc":"-","ak.acc":"bbr","ak.t":"1769123

Found 2026-01-22 by HttpPlugin

Host 2.20.142.9

Germany

Software information

MacOS file listing through .DS_Store file

Swagger API description is publicly available

Swagger API description is publicly available

objects.oyes.globaloyes.globalspinnaker-api.oyes.globalspinnaker.oyes.globalwww.oyes.global

*.dev-submittable.com

www.farmaciapandotornerocbfmas.com

*.endpointlockdown.comendpointlockdown.com

Domain summary