diff --git a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md
index ddb5b908e..00c4f81ad 100644
--- a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md
+++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md
@@ -36,7 +36,7 @@ curl -s "https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectCo
     [...]
 ```
 
-- Contact `https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig?key=<api-key>`
+- Contact `https://identitytoolkit.googleapis.com/v1/projects?key=<api-key>`
 
 For the sake of brevity the output was truncated, but in the complete output the project ID appears more than 5 times