LeakIX - Host api.leap.mdm.ferguson.com

Domain api.leap.mdm.ferguson.com

Germany

Akamai International B.V.

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.137
Domain: api.leap.mdm.ferguson.com
Port: 443
URL: https://api.leap.mdm.ferguson.com

First seen 2025-11-16 09:19
Last seen 2026-02-09 06:52
Open for 84 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 06:52
Create report

Open service 23.50.131.137:443 · api.leap.mdm.ferguson.com

2026-01-22 12:12

HTTP/1.1 404 Not Found
Content-Length: 0
request-context: appId=cid-v1:a1d23391-a109-4642-90c8-5e0d81f9f151
Expires: Thu, 22 Jan 2026 12:12:24 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 22 Jan 2026 12:12:24 GMT
Alt-Svc: h3=":443"; ma=93600
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=89
Server-Timing: origin; dur=9
Akamai-GRN: 0.09173317.1769083944.3ccfb815
Server-Timing: ak_p; desc="1769083943869_389224201_1020246037_9798_1184_259_557_-";dur=1

Found 2026-01-22 by HttpPlugin

Create report

Open service 23.50.131.137:443 · api.leap.mdm.ferguson.com

2026-01-10 01:25

HTTP/1.1 404 Not Found
Content-Length: 0
request-context: appId=cid-v1:a1d23391-a109-4642-90c8-5e0d81f9f151
Expires: Sat, 10 Jan 2026 01:25:44 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 10 Jan 2026 01:25:44 GMT
Alt-Svc: h3=":443"; ma=93600
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=90
Server-Timing: origin; dur=9
Akamai-GRN: 0.11173317.1768008344.51272642
Server-Timing: ak_p; desc="1768008344702_389224209_1361520194_9801_921_6_13_-";dur=1

Found 2026-01-10 by HttpPlugin

Create report

Open service 2.16.6.156:443 · api.leap.mdm.ferguson.com

2026-01-06 19:24

HTTP/1.1 404 Not Found
Content-Length: 0
request-context: appId=cid-v1:a1d23391-a109-4642-90c8-5e0d81f9f151
Expires: Tue, 06 Jan 2026 19:24:19 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 06 Jan 2026 19:24:19 GMT
Alt-Svc: h3=":443"; ma=93600
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=141
Server-Timing: origin; dur=13
Akamai-GRN: 0.c7071002.1767727458.2e1a4555
Server-Timing: ak_p; desc="1767727458535_34604999_773473621_15385_1465_142_338_-";dur=1

Found 2026-01-06 by HttpPlugin

Create report

Open service 2a02:26f0:3100::1735:2aa2:443 · api.leap.mdm.ferguson.com

2026-01-06 19:24

HTTP/1.1 404 Not Found
Content-Length: 0
request-context: appId=cid-v1:a1d23391-a109-4642-90c8-5e0d81f9f151
Expires: Tue, 06 Jan 2026 19:24:18 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 06 Jan 2026 19:24:18 GMT
Alt-Svc: h3=":443"; ma=93600
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=164
Server-Timing: origin; dur=8
Akamai-GRN: 0.9e2a3517.1767727458.2dee9e55
Server-Timing: ak_p; desc="1767727458041_389360286_770612821_17162_2233_0_3_-";dur=1

Found 2026-01-06 by HttpPlugin

Create report

Open service 2.16.6.135:443 · api.leap.mdm.ferguson.com

2026-01-06 19:24

HTTP/1.1 404 Not Found
Content-Length: 0
request-context: appId=cid-v1:a1d23391-a109-4642-90c8-5e0d81f9f151
Expires: Tue, 06 Jan 2026 19:24:18 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 06 Jan 2026 19:24:18 GMT
Alt-Svc: h3=":443"; ma=93600
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=99
Server-Timing: origin; dur=14
Akamai-GRN: 0.dc071002.1767727457.18fbdc9a
Server-Timing: ak_p; desc="1767727457902_34605020_419159194_11297_1396_12_44_-";dur=1

Found 2026-01-06 by HttpPlugin

Create report

Open service 2a02:26f0:3100::1735:2a6b:443 · api.leap.mdm.ferguson.com

2026-01-06 19:24

HTTP/1.1 404 Not Found
Content-Length: 0
request-context: appId=cid-v1:a1d23391-a109-4642-90c8-5e0d81f9f151
Expires: Tue, 06 Jan 2026 19:24:18 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 06 Jan 2026 19:24:18 GMT
Alt-Svc: h3=":443"; ma=93600
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=82
Server-Timing: origin; dur=14
Akamai-GRN: 0.9e2a3517.1767727458.2dee9ff3
Server-Timing: ak_p; desc="1767727458374_389360286_770613235_9669_2110_152_335_-";dur=1

Found 2026-01-06 by HttpPlugin

Create report

Open service 2a02:26f0:3100::1735:2aa2:80 · api.leap.mdm.ferguson.com

2026-01-06 19:24

HTTP/1.1 301 Moved Permanently
Location: https://feip-mdm-leap-backend-aca-1.jollymoss-5fe4f404.eastus2.azurecontainerapps.io/
Content-Length: 0
Expires: Tue, 06 Jan 2026 19:24:58 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 06 Jan 2026 19:24:58 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=84
Server-Timing: origin; dur=10
Akamai-GRN: 0.9e2a3517.1767727498.2deef15d
Server-Timing: ak_p; desc="1767727498674_389360286_770634077_9330_1783_0_0_-";dur=1

Found 2026-01-06 by HttpPlugin

Create report

Open service 2.16.6.135:80 · api.leap.mdm.ferguson.com

2026-01-06 19:24

HTTP/1.1 301 Moved Permanently
Location: https://feip-mdm-leap-backend-aca-1.jollymoss-5fe4f404.eastus2.azurecontainerapps.io/
Content-Length: 0
Expires: Tue, 06 Jan 2026 19:24:56 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 06 Jan 2026 19:24:56 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=83
Server-Timing: origin; dur=6
Akamai-GRN: 0.c7071002.1767727496.2e1e266b
Server-Timing: ak_p; desc="1767727496670_34604999_773727851_8856_1353_91_0_-";dur=1

Found 2026-01-06 by HttpPlugin

Create report

Open service 2a02:26f0:3100::1735:2a6b:80 · api.leap.mdm.ferguson.com

2026-01-06 19:24

HTTP/1.1 301 Moved Permanently
Location: https://feip-mdm-leap-backend-aca-1.jollymoss-5fe4f404.eastus2.azurecontainerapps.io/
Content-Length: 0
Expires: Tue, 06 Jan 2026 19:24:58 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 06 Jan 2026 19:24:58 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=105
Server-Timing: origin; dur=22
Akamai-GRN: 0.672a3517.1767727498.3f483254
Server-Timing: ak_p; desc="1767727498699_389360231_1061696084_12739_3538_0_0_-";dur=1

Found 2026-01-06 by HttpPlugin

Create report

Open service 2.16.6.156:80 · api.leap.mdm.ferguson.com

2026-01-06 19:24

HTTP/1.1 301 Moved Permanently
Location: https://feip-mdm-leap-backend-aca-1.jollymoss-5fe4f404.eastus2.azurecontainerapps.io/
Content-Length: 0
Expires: Tue, 06 Jan 2026 19:24:58 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 06 Jan 2026 19:24:58 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=126
Server-Timing: origin; dur=23
Akamai-GRN: 0.dc071002.1767727498.19018865
Server-Timing: ak_p; desc="1767727498706_34605020_419530853_14822_1560_6_0_-";dur=1

Found 2026-01-06 by HttpPlugin

Create report

Open service 23.50.131.137:443 · api.leap.mdm.ferguson.com

2026-01-02 17:31

HTTP/1.1 404 Not Found
Content-Length: 0
request-context: appId=cid-v1:a1d23391-a109-4642-90c8-5e0d81f9f151
Expires: Fri, 02 Jan 2026 17:31:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 17:31:14 GMT
Alt-Svc: h3=":443"; ma=93600
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=84
Server-Timing: origin; dur=14
Akamai-GRN: 0.09173317.1767375074.350590e0
Server-Timing: ak_p; desc="1767375074499_389224201_889557216_9750_1021_100_201_-";dur=1

Found 2026-01-02 by HttpPlugin

Create report

Open service 23.50.131.137:443 · api.leap.mdm.ferguson.com

2025-12-23 09:09

HTTP/1.1 404 Not Found
Content-Length: 0
request-context: appId=cid-v1:a1d23391-a109-4642-90c8-5e0d81f9f151
Expires: Tue, 23 Dec 2025 09:10:01 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 23 Dec 2025 09:10:01 GMT
Alt-Svc: h3=":443"; ma=93600
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=82
Server-Timing: origin; dur=14
Akamai-GRN: 0.09173317.1766481001.4b879e74
Server-Timing: ak_p; desc="1766481001326_389224201_1267179124_9581_1025_149_316_-";dur=1

Found 2025-12-23 by HttpPlugin

Create report

ferguson.comapi.ferguson.comapi.instaadd.ferguson.comapi.leap.mdm.ferguson.comapp.dpc.enterprisedata.ferguson.comapp.leap.mdm.ferguson.comassociate.ferguson.comb2cdev.signaturehardware.comb2cprod.signaturehardware.combuildable.ferguson.comcalcd.ferguson.comcapvwa.ferguson.comcatalog.materapaper.comcdn.dpc.enterprisedata.ferguson.comcdn.signaturehardware.comconjur.ferguson.comcustomer.ferguson.comdar.proflo.comdev-api.leap.mdm.ferguson.comdev-app.dpc.enterprisedata.ferguson.comdev-app.leap.mdm.ferguson.comdev-buildable.ferguson.comdev-cdn.dpc.enterprisedata.ferguson.comdev-locations.mdm.ferguson.comdev.api.instaadd2.ferguson.comdev.instaadd2.ferguson.comdev.mdm.ferguson.comimage.ferguson.comimage.fergusonshowroom.comimage.fergusonshowrooms.comimage.showroom.ferguson.comimage.the-stockmarket.cominstaadd.ferguson.comlocations.mdm.ferguson.comm.ferguson.comm.fergusononline.comm.test.ferguson.comm1.ferguson.commdmazurelocations-dev.mdm.ferguson.compre-prod.signaturehardware.compreview-bol.ferguson.compreview-test.ferguson.compreview.ferguson.compunchoutapp.ferguson.comPunchoutapp.test.ferguson.comsast-sq.ferguson.comsecure.associate.ferguson.comsfcc-qa-bol.ferguson.comsfcc-qa-test.ferguson.comsfcc-qa.ferguson.comsfcc-stg.ferguson.comsfcc.signaturehardware.comsfccdev.signaturehardware.comsfccprod.signaturehardware.comshop.ferguson.comshowroom.ferguson.comsignaturehardware.comsnow.ferguson.comstage.jonesstephens.comstagejones.jonesstephens.comstaging.signaturehardware.comstg-test.ferguson.comtest-locations.mdm.ferguson.comtest.ferguson.comtest.pollardwater.comtksipro.ferguson.comtst-api.leap.mdm.ferguson.comtst-app.dpc.enterprisedata.ferguson.comtst-app.leap.mdm.ferguson.comtst-cdn.dpc.enterprisedata.ferguson.comtst.api.instaadd2.ferguson.comtst.instaadd2.ferguson.comuat-api.dpc.enterprisedata.ferguson.comuat-api.leap.mdm.ferguson.comuat-app.dpc.enterprisedata.ferguson.comuat-app.leap.mdm.ferguson.comuat-buildable.ferguson.comuat-cdn.dpc.enterprisedata.ferguson.comuat-locations.mdm.ferguson.comuat.api.sales-cockpit.ferguson.comuat.sales-cockpit.ferguson.comuataka.sales-cockpit.ferguson.comwww.actionautomation.comwww.amerock.comwww.cal-steam.comwww.dogwoodbuildingsupply.comwww.durastar.comwww.energyandprocess.comwww.ferguson.comwww.fergusonindustrial.comwww.fergusononline.comwww.fergusonshowrooms.comwww.fnw.comwww.jonesstephens.comwww.pollardwater.comwww.signaturehardware.comwww.test.ferguson.comwww.test.pollardwater.comwww.the-stockmarket.comwww1.ferguson.com

Fingerprint:

6a0cbe481c74b5294a136966c5bd24a26fd0fd2b7948a7b5e8f0cd295a250228

CN:

ferguson.com

Key:

ECDSA-256

Issuer:

DigiCert Global G3 TLS ECC SHA384 2020 CA1

Not before:

2026-01-06 00:00

Not after:

2026-12-22 23:59

ferguson.comapi.ferguson.comapi.instaadd.ferguson.comapi.leap.mdm.ferguson.comapp.dpc.enterprisedata.ferguson.comapp.leap.mdm.ferguson.comassociate.ferguson.comb2cdev.signaturehardware.comb2cprod.signaturehardware.combuildable.ferguson.comcalcd.ferguson.comcapvwa.ferguson.comcatalog.materapaper.comcdn.dpc.enterprisedata.ferguson.comcdn.signaturehardware.comconjur.ferguson.comcustomer.ferguson.comdar.proflo.comdev-api.leap.mdm.ferguson.comdev-app.dpc.enterprisedata.ferguson.comdev-app.leap.mdm.ferguson.comdev-buildable.ferguson.comdev-cdn.dpc.enterprisedata.ferguson.comdev-locations.mdm.ferguson.comdev.api.instaadd2.ferguson.comdev.instaadd2.ferguson.comdev.mdm.ferguson.comimage.ferguson.comimage.fergusonshowroom.comimage.fergusonshowrooms.comimage.showroom.ferguson.comimage.the-stockmarket.cominstaadd.ferguson.comlocations.mdm.ferguson.comm.ferguson.comm.fergusononline.comm.test.ferguson.comm1.ferguson.commdmazurelocations-dev.mdm.ferguson.compre-prod.signaturehardware.compreview-bol.ferguson.compreview-test.ferguson.compreview.ferguson.comsast-sq.ferguson.comsecure.associate.ferguson.comsfcc-qa-bol.ferguson.comsfcc-qa-test.ferguson.comsfcc-qa.ferguson.comsfcc-stg.ferguson.comsfcc.signaturehardware.comsfccdev.signaturehardware.comsfccprod.signaturehardware.comshop.ferguson.comshowroom.ferguson.comsignaturehardware.comsnow.ferguson.comstage.jonesstephens.comstagejones.jonesstephens.comstaging.signaturehardware.comstg-test.ferguson.comtest-locations.mdm.ferguson.comtest.ferguson.comtest.pollardwater.comtksipro.ferguson.comtst-api.leap.mdm.ferguson.comtst-app.dpc.enterprisedata.ferguson.comtst-app.leap.mdm.ferguson.comtst-cdn.dpc.enterprisedata.ferguson.comtst.api.instaadd2.ferguson.comtst.instaadd2.ferguson.comuat-api.dpc.enterprisedata.ferguson.comuat-api.leap.mdm.ferguson.comuat-app.dpc.enterprisedata.ferguson.comuat-app.leap.mdm.ferguson.comuat-buildable.ferguson.comuat-cdn.dpc.enterprisedata.ferguson.comuat-locations.mdm.ferguson.comuat.api.sales-cockpit.ferguson.comuat.sales-cockpit.ferguson.comuataka.sales-cockpit.ferguson.comwww.actionautomation.comwww.amerock.comwww.cal-steam.comwww.dogwoodbuildingsupply.comwww.durastar.comwww.energyandprocess.comwww.ferguson.comwww.fergusonindustrial.comwww.fergusononline.comwww.fergusonshowrooms.comwww.fnw.comwww.jonesstephens.comwww.pollardwater.comwww.signaturehardware.comwww.test.ferguson.comwww.test.pollardwater.comwww.the-stockmarket.comwww1.ferguson.com

Fingerprint:

68adde091420c01491e03c05ba6487ca953faf5474f100758c4416a70fc96587

CN:

ferguson.com

Key:

ECDSA-256

Issuer:

DigiCert Global G3 TLS ECC SHA384 2020 CA1

Not before:

2025-12-21 00:00

Not after:

2026-12-22 23:59

ferguson.comapi.ferguson.comapi.instaadd.ferguson.comapi.leap.mdm.ferguson.comapp.dpc.enterprisedata.ferguson.comapp.leap.mdm.ferguson.comassociate.ferguson.comb2cdev.signaturehardware.comb2cprod.signaturehardware.combuildable.ferguson.comcalcd.ferguson.comcapvwa.ferguson.comcatalog.materapaper.comcdn.dpc.enterprisedata.ferguson.comcdn.signaturehardware.comconjur.ferguson.comcustomer.ferguson.comdar.proflo.comdev-api.leap.mdm.ferguson.comdev-app.dpc.enterprisedata.ferguson.comdev-app.leap.mdm.ferguson.comdev-buildable.ferguson.comdev-cdn.dpc.enterprisedata.ferguson.comdev-locations.mdm.ferguson.comdev.api.instaadd2.ferguson.comdev.instaadd2.ferguson.comdev.mdm.ferguson.comimage.ferguson.comimage.fergusonshowroom.comimage.fergusonshowrooms.comimage.showroom.ferguson.comimage.the-stockmarket.cominstaadd.ferguson.comlocations.mdm.ferguson.comm.ferguson.comm.fergusononline.comm.test.ferguson.comm1.ferguson.commdmazurelocations-dev.mdm.ferguson.compre-prod.signaturehardware.compreview-bol.ferguson.compreview-test.ferguson.compreview.ferguson.comsast-sq.ferguson.comsecure.associate.ferguson.comsfcc-qa-bol.ferguson.comsfcc-qa-test.ferguson.comsfcc-qa.ferguson.comsfcc-stg.ferguson.comsfcc.signaturehardware.comsfccdev.signaturehardware.comsfccprod.signaturehardware.comshop.ferguson.comshowroom.ferguson.comsignaturehardware.comsnow.ferguson.comstage.jonesstephens.comstagejones.jonesstephens.comstaging.signaturehardware.comstg-test.ferguson.comtest-locations.mdm.ferguson.comtest.ferguson.comtest.pollardwater.comtksipro.ferguson.comtst-api.leap.mdm.ferguson.comtst-app.dpc.enterprisedata.ferguson.comtst-app.leap.mdm.ferguson.comtst-cdn.dpc.enterprisedata.ferguson.comtst.api.instaadd2.ferguson.comtst.instaadd2.ferguson.comuat-api.dpc.enterprisedata.ferguson.comuat-api.leap.mdm.ferguson.comuat-app.dpc.enterprisedata.ferguson.comuat-app.leap.mdm.ferguson.comuat-buildable.ferguson.comuat-cdn.dpc.enterprisedata.ferguson.comuat-locations.mdm.ferguson.comuat.api.sales-cockpit.ferguson.comuat.sales-cockpit.ferguson.comuataka.sales-cockpit.ferguson.comwww.actionautomation.comwww.amerock.comwww.cal-steam.comwww.dogwoodbuildingsupply.comwww.durastar.comwww.energyandprocess.comwww.ferguson.comwww.fergusonindustrial.comwww.fergusononline.comwww.fergusonshowrooms.comwww.fnw.comwww.jonesstephens.comwww.pollardwater.comwww.signaturehardware.comwww.test.ferguson.comwww.test.pollardwater.comwww.the-stockmarket.comwww1.ferguson.com

Fingerprint:

fdba66f4bdcaf4e116c7830c86523a8d5e2a6b1a399f89338c13af6a749ee53a

CN:

ferguson.com

Key:

ECDSA-256

Issuer:

DigiCert Global G3 TLS ECC SHA384 2020 CA1

Not before:

2025-12-09 00:00

Not after:

2026-02-18 23:59

Domain summary

api.leap.mdm.ferguson.com 12

1 recorded

IP summary

23.50.131.137 2 2.16.6.156 1 2a02:26f0:3100::1735:2aa2 1 2.16.6.135 1 2a02:26f0:3100::1735:2a6b 1

5 recorded

© 2026 LeakIX v2.0.49
About LeakIX - Credits - Take-down and blacklist requests - Security issues - Terms and conditions - Cookie policy - Legal notice