When this happens
Theurl of PUT /v1/clients/{clientCode}/webhook-endpoint cannot safely receive notifications. It must be https on port 443, use a public DNS name (not an IP address, localhost or an internal suffix), contain no credentials or fragment, and resolve only to public addresses.
What to do
Use a public HTTPS URL that you control and send the request again. PayPathIQ repeats these checks before every delivery. If a destination later stops passing them, the endpoint is disabled withdisabledReason destination_unsafe; fix the destination and configure the endpoint again.