LeakIX - Host estimatorx.com

Domain estimatorx.com

United States

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.49.104.52
Domain: www.estimatorx.com
Port: 443
URL: https://www.estimatorx.com

First seen 2026-01-10 05:25
Last seen 2026-02-09 17:45
Open for 30 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035497a9880e8507ef9f524beef04d759757d0e33c22b
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Invite
GET /api/Invite/key/{securityKey}
GET /api/Invite/{id}/{partitionKey}
GET /api/Organization
GET /api/Organization/{id}/{partitionKey}
GET /api/Project
GET /api/Project/{id}/{partitionKey}
GET /api/Template
GET /api/Template/{id}/{partitionKey}
GET /api/User
GET /api/User/me
GET /api/User/{id}/{partitionKey}
GET /api/administrative/logging
GET /api/administrative/logging/{file}
GET /api/administrative/organizations
GET /api/administrative/organizations/{id}/{partitionKey}
GET /api/administrative/users
GET /api/administrative/users/{id}/{partitionKey}
POST /api/Invite/key/{securityKey}/redeem
POST /api/Invite/{id}/{partitionKey}/send
```
  Found on 2026-02-09 17:45
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.49.104.52
Domain: estimatorx.com
Port: 443
URL: https://estimatorx.com

First seen 2026-01-12 15:59
Last seen 2026-02-02 00:20
Open for 20 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035497a9880e8507ef9f524beef04d759757d0e33c22b
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Invite
GET /api/Invite/key/{securityKey}
GET /api/Invite/{id}/{partitionKey}
GET /api/Organization
GET /api/Organization/{id}/{partitionKey}
GET /api/Project
GET /api/Project/{id}/{partitionKey}
GET /api/Template
GET /api/Template/{id}/{partitionKey}
GET /api/User
GET /api/User/me
GET /api/User/{id}/{partitionKey}
GET /api/administrative/logging
GET /api/administrative/logging/{file}
GET /api/administrative/organizations
GET /api/administrative/organizations/{id}/{partitionKey}
GET /api/administrative/users
GET /api/administrative/users/{id}/{partitionKey}
POST /api/Invite/key/{securityKey}/redeem
POST /api/Invite/{id}/{partitionKey}/send
```
  Found on 2026-02-02 00:20
Create report

Open service 20.49.104.52:443 · www.estimatorx.com

2026-01-23 13:50

HTTP/1.1 200 OK
Content-Length: 2122
Connection: close
Content-Type: text/html
Date: Fri, 23 Jan 2026 13:51:07 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1daffc5f848974a"
Last-Modified: Thu, 05 Sep 2024 19:01:10 GMT
Strict-Transport-Security: max-age=2592000

Page title: EstimatorX

<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0" />

  <title>EstimatorX</title>

  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
  <link rel="manifest" href="/site.webmanifest">
  <link rel="mask-icon" href="/safari-pinned-tab.svg" color="#5bbad5">

  <meta name="msapplication-TileColor" content="#2d89ef">
  <meta name="theme-color" content="#ffffff">

  <base href="/" />

  <link rel="stylesheet"
        href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css"
        integrity="sha256-wLz3iY/cO4e6vKZ4zRmo4+9XDpMcgKOvv/zEU3OMlRo="
        crossorigin="anonymous">

  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6.2.1/css/all.min.css"
        integrity="sha256-Z1K5uhUaJXA7Ll0XrZ/0JhX4lAtZFpT6jkKrEDT0drU="
        crossorigin="anonymous">

  <link rel="stylesheet" href="/_content/LoreSoft.Blazor.Controls/BlazorControls.css" />

  <link rel="stylesheet" href="css/main.css" />
  <link rel="stylesheet" href="EstimatorX.Client.styles.css" />
</head>

<body>
  <div id="app">
    <div class="d-flex justify-content-center mb-3">
      <span class="spinner-border" style="width: 3rem; height: 3rem;" role="status"></span>
    </div>
    <h3 class="d-flex justify-content-center">
      Loading ...
    </h3>
  </div>

  <div id="blazor-error-ui">
    An unhandled error has occurred.
    <a href="" class="reload">Reload</a>
    <a class="dismiss">🗙</a>
  </div>

  <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js"
          integrity="sha256-lSABj6XYH05NydBq+1dvkMu6uiCc/MbLYOFGRkf3iQs="
          crossorigin="anonymous"></script>

  <script src="_content/Microsoft.Authentication.WebAssembly.Msal/AuthenticationService.js"></script>
  <script src="_framework/blazor.webassembly.js"></script>
</body>

</html>

Found 2026-01-23 by HttpPlugin

Create report

Open service 20.49.104.52:443 · estimatorx.com

2026-01-22 21:41

HTTP/1.1 200 OK
Content-Length: 2122
Connection: close
Content-Type: text/html
Date: Thu, 22 Jan 2026 21:42:01 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1daffc5f848974a"
Last-Modified: Thu, 05 Sep 2024 19:01:10 GMT
Strict-Transport-Security: max-age=2592000

Page title: EstimatorX

<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0" />

  <title>EstimatorX</title>

  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
  <link rel="manifest" href="/site.webmanifest">
  <link rel="mask-icon" href="/safari-pinned-tab.svg" color="#5bbad5">

  <meta name="msapplication-TileColor" content="#2d89ef">
  <meta name="theme-color" content="#ffffff">

  <base href="/" />

  <link rel="stylesheet"
        href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css"
        integrity="sha256-wLz3iY/cO4e6vKZ4zRmo4+9XDpMcgKOvv/zEU3OMlRo="
        crossorigin="anonymous">

  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6.2.1/css/all.min.css"
        integrity="sha256-Z1K5uhUaJXA7Ll0XrZ/0JhX4lAtZFpT6jkKrEDT0drU="
        crossorigin="anonymous">

  <link rel="stylesheet" href="/_content/LoreSoft.Blazor.Controls/BlazorControls.css" />

  <link rel="stylesheet" href="css/main.css" />
  <link rel="stylesheet" href="EstimatorX.Client.styles.css" />
</head>

<body>
  <div id="app">
    <div class="d-flex justify-content-center mb-3">
      <span class="spinner-border" style="width: 3rem; height: 3rem;" role="status"></span>
    </div>
    <h3 class="d-flex justify-content-center">
      Loading ...
    </h3>
  </div>

  <div id="blazor-error-ui">
    An unhandled error has occurred.
    <a href="" class="reload">Reload</a>
    <a class="dismiss">🗙</a>
  </div>

  <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js"
          integrity="sha256-lSABj6XYH05NydBq+1dvkMu6uiCc/MbLYOFGRkf3iQs="
          crossorigin="anonymous"></script>

  <script src="_content/Microsoft.Authentication.WebAssembly.Msal/AuthenticationService.js"></script>
  <script src="_framework/blazor.webassembly.js"></script>
</body>

</html>

Found 2026-01-22 by HttpPlugin

Create report

Open service 20.49.104.52:443 · estimatorx.com

2026-01-12 15:59

HTTP/1.1 200 OK
Content-Length: 2122
Connection: close
Content-Type: text/html
Date: Mon, 12 Jan 2026 16:00:26 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1daffc5f848974a"
Last-Modified: Thu, 05 Sep 2024 19:01:10 GMT
Strict-Transport-Security: max-age=2592000

Page title: EstimatorX

<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0" />

  <title>EstimatorX</title>

  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
  <link rel="manifest" href="/site.webmanifest">
  <link rel="mask-icon" href="/safari-pinned-tab.svg" color="#5bbad5">

  <meta name="msapplication-TileColor" content="#2d89ef">
  <meta name="theme-color" content="#ffffff">

  <base href="/" />

  <link rel="stylesheet"
        href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css"
        integrity="sha256-wLz3iY/cO4e6vKZ4zRmo4+9XDpMcgKOvv/zEU3OMlRo="
        crossorigin="anonymous">

  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6.2.1/css/all.min.css"
        integrity="sha256-Z1K5uhUaJXA7Ll0XrZ/0JhX4lAtZFpT6jkKrEDT0drU="
        crossorigin="anonymous">

  <link rel="stylesheet" href="/_content/LoreSoft.Blazor.Controls/BlazorControls.css" />

  <link rel="stylesheet" href="css/main.css" />
  <link rel="stylesheet" href="EstimatorX.Client.styles.css" />
</head>

<body>
  <div id="app">
    <div class="d-flex justify-content-center mb-3">
      <span class="spinner-border" style="width: 3rem; height: 3rem;" role="status"></span>
    </div>
    <h3 class="d-flex justify-content-center">
      Loading ...
    </h3>
  </div>

  <div id="blazor-error-ui">
    An unhandled error has occurred.
    <a href="" class="reload">Reload</a>
    <a class="dismiss">🗙</a>
  </div>

  <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js"
          integrity="sha256-lSABj6XYH05NydBq+1dvkMu6uiCc/MbLYOFGRkf3iQs="
          crossorigin="anonymous"></script>

  <script src="_content/Microsoft.Authentication.WebAssembly.Msal/AuthenticationService.js"></script>
  <script src="_framework/blazor.webassembly.js"></script>
</body>

</html>

Found 2026-01-12 by HttpPlugin

Create report

Open service 20.49.104.52:80 · estimatorx.com

2026-01-12 15:59

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Mon, 12 Jan 2026 16:00:26 GMT
Location: https://estimatorx.com/

Found 2026-01-12 by HttpPlugin

Create report

Open service 20.49.104.52:443 · staging.estimatorx.com

2026-01-11 20:56

HTTP/1.1 503 Service Unavailable
Connection: close
Date: Sun, 11 Jan 2026 20:57:35 GMT
Transfer-Encoding: chunked


<div style="display: block; margin: auto;  width: 600px; height: 500px; text-align: center; font-family: 'Courier', cursive, sans-serif;"><h1 style="color: 747474">:( Application Error</h1><p style="color:#666">If you are the application administrator, you can access the <a style="color: grey"href="https://web-ls-app-eus-ex-stg-01.scm.azurewebsites.net/detectors">diagnostic resources</a>.</div>

Found 2026-01-11 by HttpPlugin

Create report

Open service 20.49.104.52:80 · staging.estimatorx.com

2026-01-11 20:56

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Sun, 11 Jan 2026 20:57:35 GMT
Location: https://staging.estimatorx.com/

Found 2026-01-11 by HttpPlugin

Create report

Open service 20.49.104.52:443 · www.estimatorx.com

2026-01-10 05:25

HTTP/1.1 200 OK
Content-Length: 2122
Connection: close
Content-Type: text/html
Date: Sat, 10 Jan 2026 05:26:25 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1daffc5f848974a"
Last-Modified: Thu, 05 Sep 2024 19:01:10 GMT
Strict-Transport-Security: max-age=2592000

Page title: EstimatorX

<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0" />

  <title>EstimatorX</title>

  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
  <link rel="manifest" href="/site.webmanifest">
  <link rel="mask-icon" href="/safari-pinned-tab.svg" color="#5bbad5">

  <meta name="msapplication-TileColor" content="#2d89ef">
  <meta name="theme-color" content="#ffffff">

  <base href="/" />

  <link rel="stylesheet"
        href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css"
        integrity="sha256-wLz3iY/cO4e6vKZ4zRmo4+9XDpMcgKOvv/zEU3OMlRo="
        crossorigin="anonymous">

  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6.2.1/css/all.min.css"
        integrity="sha256-Z1K5uhUaJXA7Ll0XrZ/0JhX4lAtZFpT6jkKrEDT0drU="
        crossorigin="anonymous">

  <link rel="stylesheet" href="/_content/LoreSoft.Blazor.Controls/BlazorControls.css" />

  <link rel="stylesheet" href="css/main.css" />
  <link rel="stylesheet" href="EstimatorX.Client.styles.css" />
</head>

<body>
  <div id="app">
    <div class="d-flex justify-content-center mb-3">
      <span class="spinner-border" style="width: 3rem; height: 3rem;" role="status"></span>
    </div>
    <h3 class="d-flex justify-content-center">
      Loading ...
    </h3>
  </div>

  <div id="blazor-error-ui">
    An unhandled error has occurred.
    <a href="" class="reload">Reload</a>
    <a class="dismiss">🗙</a>
  </div>

  <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js"
          integrity="sha256-lSABj6XYH05NydBq+1dvkMu6uiCc/MbLYOFGRkf3iQs="
          crossorigin="anonymous"></script>

  <script src="_content/Microsoft.Authentication.WebAssembly.Msal/AuthenticationService.js"></script>
  <script src="_framework/blazor.webassembly.js"></script>
</body>

</html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 20.49.104.52:80 · www.estimatorx.com

2026-01-10 05:25

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Sat, 10 Jan 2026 05:26:25 GMT
Location: https://www.estimatorx.com/

Found 2026-01-10 by HttpPlugin

Create report

www.estimatorx.com

Fingerprint:

9f724cf3aa96e5d4fbd000790372fef9022e69e578cfe1037625d22c933eeeb5

CN:

www.estimatorx.com

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2026-01-10 00:00

Not after:

2026-04-14 23:59

estimatorx.com

Fingerprint:

97e15ab83f646430300b35aca5e2f445037fa2da019ed43bf5e67a903ce829b5

CN:

estimatorx.com

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2026-01-12 00:00

Not after:

2026-04-14 23:59

estimatorx.com

Fingerprint:

87f256a41350dd5375e5b30f0bc9d0b437ba5ec153270058b01b205834ef1ee8

CN:

estimatorx.com

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2025-08-25 00:00

Not after:

2026-02-25 23:59

staging.estimatorx.com

Fingerprint:

f342eefb0a531cdf10d78018d8fb8dad187d4503cbe484838737f0cd4e16281b

CN:

staging.estimatorx.com

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2025-08-24 00:00

Not after:

2026-02-24 23:59

www.estimatorx.com

Fingerprint:

d1aa7effb80f5a3c3f978eb74f7b966aacf5cdb941746cfd468e388b393b374f

CN:

www.estimatorx.com

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2025-08-23 00:00

Not after:

2026-02-23 23:59

Domain summary

www.estimatorx.com 3 estimatorx.com 3 staging.estimatorx.com 1

3 recorded

IP summary

20.49.104.52 6

1 recorded

Domain estimatorx.com

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

www.estimatorx.com

estimatorx.com

estimatorx.com

staging.estimatorx.com

www.estimatorx.com

Domain summary

IP summary