Visa icon Visa HackerOne

console.jpmorgan.tink.com


Endpoints (3 of 3)

Page 1 of 1

Path
Port
Status Code
Content-Length
Title
Resp Headers
/
80
301
167
301 Moved Permanently

Location: https://console.jpmorgan.tink.com/

Content-Type: text/html

/
443
200
1520
J.P.Morgan merchant portal

Content-Type: text/html

/assets/index-D64rY02I.js
443
200
845719
None

Content-Type: application/javascript

  • Path: /
  • Port: 80
  • Status Code: 301
  • Title: 301 Moved Permanently
  • Via: 1.1 54a56da0fe0bae919389c7d572d4720e.cloudfront.net (CloudFront)

    Date: Sat, 15 Jun 2024 06:12:26 GMT

    Server: CloudFront

    X-Cache: Redirect from cloudfront

    Location: https://console.jpmorgan.tink.com/

    X-Amz-Cf-Id: f5uBwXM03adhXMXfPpy5hg2Rt7_0cJZ2xPGkWQmaFQdXG_rmBuEqIQ==

    Content-Type: text/html

    X-Amz-Cf-Pop: JFK50-P6

    Content-Length: 167

  • First snapshot: 10 months, 1 week ago
  • Latest snapshot: 10 months, 1 week ago
  • Path: /
  • Port: 443
  • Status Code: 200
  • Title: J.P.Morgan merchant portal
  • Via: 1.1 cedbf7a51c689bd1e26af4b73768d270.cloudfront.net (CloudFront)

    Date: Sat, 15 Jun 2024 06:12:27 GMT

    Etag: W/"d860a5ffaac59104b223363ff1d16e89"

    Vary: Accept-Encoding

    Server: AmazonS3

    X-Cache: Miss from cloudfront

    X-Amz-Cf-Id: r0aJKhGvDzcslgU3YHWTSVJKGjKjmsm4rGxkGiEOBVmiCpy3lHw9Lg==

    Content-Type: text/html

    X-Amz-Cf-Pop: JFK50-P6

    Cache-Control: no-cache,no-store,max-age=0,must-revalidate

    Last-Modified: Wed, 12 Jun 2024 08:28:12 GMT

    X-Amz-Version-Id: null

    X-Content-Type-Options: nosniff

    Content-Security-Policy: base-uri 'self'; connect-src 'self' https://api-gateway.production.jersey.tink.se https://sentry.io https://rum.browser-intake-datadoghq.eu https://api.tink.com; default-src 'none'; font-src 'self' https://cdn.tink.se; frame-ancestors 'none'; frame-src 'self' blob:; img-src 'self' data: https:; manifest-src 'self'; media-src 'self'; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; worker-src 'none'

    Strict-Transport-Security: max-age=15724800; includeSubDomains

    X-Amz-Server-Side-Encryption: AES256

  • First snapshot: 10 months, 1 week ago
  • Latest snapshot: 10 months, 1 week ago
  • Path: /assets/index-D64rY02I.js
  • Port: 443
  • Status Code: 200
  • Title: None
  • Content-Type: application/javascript
  • Content-Length: 845719
  • First snapshot: 10 months, 1 week ago
  • Latest snapshot: 10 months, 1 week ago

Page 1 of 1