Domain product.suitapi.com
The Netherlands
Software information
Kestrel
tcp/443
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2026-01-03 12:35
Last seen 2026-01-23 13:17
Open for 20 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549d68d7c993ba43e0b2bd92917ef5ac66f2ff18b83Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /api/v1/CommercialDescription/GetCommercialDescriptionByItemCode GET /api/v1/CommercialDescription/GetCommercialDescriptions GET /api/v1/CommercialDescription/GetCommercialDescriptionsByItemCodes GET /api/v1/Division/GetCategoriesByDepartmentId GET /api/v1/Division/GetCategoryById GET /api/v1/Division/GetDepartmentById GET /api/v1/Division/GetDepartmentsByDivisionId GET /api/v1/Division/GetDivisionById GET /api/v1/Division/GetDivisions GET /api/v1/Item/GetItemByItemCode GET /api/v1/Item/GetItemDetails GET /api/v1/Item/GetItemDetailsByEanCodes GET /api/v1/Item/GetItemDetailsByItemCodes GET /api/v1/Item/GetItemDetailsByItemDetailCodes GET /api/v1/Item/GetItems GET /api/v1/Item/GetItemsByCategoryId GET /api/v1/ItemCode/GetItemCodesByItemClassCode GET /api/v1/ItemCode/GetItemCodesByItemClassId GET /api/v1/ItemCode/GetItemCodesByItemDetailCodes GET /api/v1/ItemCode/GetItemCodesByItemIds GET /api/v1/ItemCode/GetItemDetailCodeByEanCode GET /api/v1/ItemDetailWebsite/GetItemDetailWebsitesByItemCode GET /api/v1/ItemDetailWebsite/GetItemDetailWebsitesByItemDetailCode GET /api/v1/ItemDetailWebsite/GetOnlineItemDetailWebsites GET /api/v1/OriginItem/GetItemDetailsByOriginItemCode GET /api/v1/OriginItem/GetOriginItemByItemCode GET /api/v1/OriginItem/GetOriginItemDetails GET /api/v1/OriginItem/GetOriginItemDetailsByItemDetailCodes GET /api/v1/OriginItem/GetOriginItems GET /api/v1/ParentChild/GetParentChildRecordsByStyleCode GET /api/v1/Price/GetCurrentPriceByItemCodeAndRegionId GET /api/v1/Price/GetCurrentPricesByItemCode POST /api/v1/Item/FindItemDetails POST /api/v1/Item/GetItemsByItemCodes
Found on 2026-01-23 13:17
-
-
Open service 13.69.68.45:443 · product.suitapi.com
2026-01-23 13:17
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Fri, 23 Jan 2026 13:17:43 GMT Server: Kestrel Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:90d28a4d-9320-4ea9-9294-2b454ffe3f67
Found 2026-01-23 by HttpPluginCreate report
-
Open service 13.69.68.45:443 · product.suitapi.com
2026-01-11 14:36
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Sun, 11 Jan 2026 14:37:26 GMT Server: Kestrel Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:90d28a4d-9320-4ea9-9294-2b454ffe3f67
Found 2026-01-11 by HttpPluginCreate report
-
Open service 13.69.68.45:80 · product.suitapi.com
2026-01-11 14:36
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Sun, 11 Jan 2026 14:37:26 GMT Location: https://product.suitapi.com/
Found 2026-01-11 by HttpPluginCreate report
-
Open service 13.69.68.45:443 · product.suitapi.com
2026-01-10 01:44
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Sat, 10 Jan 2026 01:45:54 GMT Server: Kestrel Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:90d28a4d-9320-4ea9-9294-2b454ffe3f67
Found 2026-01-10 by HttpPluginCreate report