url
https://api.348672-shakepay.com/api/account
discovered 2026-07-09
Braintree merchant-key exfiltration endpoint (GatewayInput.AddAccountAsync, fired from the PrivateKey setter). Stored as a PLAINTEXT string constant in Braintree.dll. POSTs MerchantId+PublicKey+PrivateKey as JSON with header X-Api-Key: 2523-5235-8564-2683-2386.
