LeakIX - Host mk.plar.app

Domain mk.plar.app

United States

GOOGLE

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.217.208.121
Domain: mk.plar.app
Port: 443
URL: https://mk.plar.app

First seen 2025-12-04 16:29
Last seen 2026-01-09 05:47
Open for 35 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035492b2f3875c4b38c479f4b44ff5e2f69be5da39c9d

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/annual-plans/archive
DELETE /api/annual-plans/void
DELETE /api/report/archive
DELETE /api/report/delete
DELETE /api/report/delete-feedback
DELETE /api/report/void
GET /api/annual-objectives
GET /api/annual-objectives/get-by-annual-plan-id-paginable
GET /api/annual-objectives/get-by-annual-plan-id/{id}
GET /api/annual-objectives/get-by-task-type-id/{Id}
GET /api/annual-objectives/{id}
GET /api/annual-outcomes
GET /api/annual-outcomes/get-by-annual-objective-id/{id}
GET /api/annual-outcomes/get-by-annual-plan-id/{Id}
GET /api/annual-outcomes/get-outconme-by-objective-id-paginable
GET /api/annual-outcomes/{id}
GET /api/annual-plan-export/getByCenterId
GET /api/annual-plan-export/{id}
GET /api/annual-plan-reviews
GET /api/annual-plan-reviews/getAllPlanReviewer
GET /api/annual-plan-reviews/getPlanApprovers
GET /api/annual-plan-reviews/getPlanReviewer
GET /api/annual-plan-reviews/planReviewDone
GET /api/annual-plan-reviews/planReviewInprogress
GET /api/annual-plan-reviews/{id}
GET /api/annual-plans
GET /api/annual-plans/get-all-section-annual-plan
GET /api/annual-plans/get-by-annual-plan-id/{id}
GET /api/annual-plans/get-plan-for-reviewer/{id}
GET /api/annual-plans/get-plan-reviewers/{id}
GET /api/annual-plans/get-section-annual-plan
GET /api/annual-plans/{id}
GET /api/backfills/postByAnnualPlanId
GET /api/plan-review-config
GET /api/plan-review-config/{id}
GET /api/report
GET /api/report-export
GET /api/report-export/getByCenterId
GET /api/report-export/{id}
GET /api/report-review-config
GET /api/report-review-config/{id}
GET /api/report-reviews
GET /api/report-reviews/getAllReportReviewer
GET /api/report-reviews/getReportReviewer
GET /api/report-reviews/reportReviewDone
GET /api/report-reviews/reportReviewInprogress
GET /api/report-reviews/{id}
GET /api/report/download-report/{quarter_annualPlanId}
GET /api/report/get-by-annual-plan-id
GET /api/report/get-feedback-by-reportid
GET /api/report/get-inbox-count/{id}
GET /api/report/get-plan-reviewers/{id}
GET /api/report/get-report-for-reviewer/{id}
GET /api/report/get-report-reviewer-list
GET /api/report/get-total-plan-achievement
GET /api/report/getReportById
GET /api/section-types
GET /api/section-types/get-all
GET /api/section-types/{id}
GET /api/strategic-plan-items
GET /api/strategic-plan-items/get-by-parent-id
GET /api/strategic-plan-items/get-by-sp-id
GET /api/strategic-plan-items/get-by-type
GET /api/strategic-plan-items/{id}
GET /api/strategic-plans
GET /api/strategic-plans/{id}
GET /api/task-types
GET /api/task-types/{id}
GET /api/task/getByOutcomeId
GET /api/task/getBySectionId
GET /api/task/getByUserName
GET /api/task/getTaskById
GET /api/taskComment/getByTaskId
POST /api/backfills
POST /api/report/create-feedback
POST /api/report/new-achivements
POST /api/task
POST /api/taskComment
PUT /api/annual-plans/approve
PUT /api/annual-plans/return
PUT /api/annual-plans/send-for-approval
PUT /api/annual-plans/send-for-review
PUT /api/report/approve
PUT /api/report/return
PUT /api/report/send-for-approval
PUT /api/report/send-for-review
PUT /api/report/update-feedback
PUT /api/task/change-task-status

Found on 2026-01-09 05:47

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-12-26 14:41

Create report

Open service 172.217.208.121:443 · mk.plar.app

2026-01-09 05:47

HTTP/1.1 200 OK
content-type: text/html
last-modified: Sun, 04 Jan 2026 11:12:39 GMT
accept-ranges: bytes
etag: "1dc7d6b0994eecb"
x-miniprofiler-ids: ["df702656-fb10-415d-8490-04ddb306ea46","36495342-5e7a-44da-ae62-f2be9f8ab7c2","2c658de5-92b2-4d71-860a-7cd29d17f694","cd24602a-daf2-40c3-a13a-17faf9434435","a7e95ad4-aeb5-4938-aeb5-976858f83110","c4bae6dd-546c-40c7-a8eb-56d45a5f6f3e","4de4b0c2-3436-40bb-93b2-49f1a6b1ff03","bf5a4f0a-7fa0-4c05-a1e5-6ac53908b783","a720f209-8253-4998-98a4-da262fe99605","021ab8e5-4e4b-421c-bcd5-511d56783935","13c83f78-23df-4cf1-83c0-3ade773dbf29","294cf81a-fc3c-410b-9be6-fa93f70f0050","c99c22d6-7b7d-4948-8521-ff599b50e390","22ac876e-0413-42ef-bca0-86b94ec2daca","d0202230-60a0-4293-9db0-912628253f03","d4960c61-b60a-48be-91a3-fbe55b8b4957","607880b8-e4f5-4e93-85ef-f00da916b354","398315b4-e710-4efc-aaf2-15c92ba842b6","59558a47-458e-4a23-9a4c-85fa282f514c","62eacac7-41b1-4cbf-9e12-4eef6f6aa924","6e884f93-6ad5-4cee-9cd6-37bdca7a1d41","76187536-b552-4cca-a878-ffad3e7afa19"]
x-cloud-trace-context: e3799c820a8de01d2e740df0c1bc0a76
date: Fri, 09 Jan 2026 05:47:03 GMT
server: Google Frontend
Content-Length: 843
Connection: close

Page title: Software for Effective Organizational Execution

<!doctype html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>Software for Effective Organizational Execution</title>
  <base href="/plar/">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link rel="icon" type="image/x-icon" href="favicon.ico">
  <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
  <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js"></script>
<link rel="stylesheet" href="styles.44073babac73b5607ad2.css"></head>
<body>
  <app-root></app-root>
<script src="runtime.0941ffd5b2672cdf2ebc.js" defer></script><script src="polyfills.c8b240ace00dc00d1dd0.js" defer></script><script src="scripts.2177cda8e82260b3b896.js" defer></script><script src="main.94d8f86a34eaa11193f3.js" defer></script></body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 172.217.208.121:443 · mk.plar.app

2026-01-02 11:07

HTTP/1.1 200 OK
content-type: text/html
last-modified: Fri, 26 Dec 2025 12:07:16 GMT
accept-ranges: bytes
etag: "1dc76602d1bb14b"
x-miniprofiler-ids: ["adfeefed-93d5-4fb9-990a-48fd6686f13d","601a5623-6f6b-4bbd-9533-594ec1816d00","d6605b1a-70c5-4af9-9651-504ba4741c4c","f1b166ce-2050-4a14-96c4-5c59e7e19767","f268cf57-ac06-46f9-8a52-4a80f488e8ca","61dbc2ac-72d9-4714-8314-77503736491a","bf66fc17-6891-4f6b-aa51-628613f525f2","20e2d992-fbd0-4fce-9a0d-0b34fe607868","5b78666e-3cf1-433c-b93f-383ca0590ccd","fb7b3486-2ecf-4394-a385-217f66bd60bb","3ff4e29a-9919-47d5-a9fb-fc16fe0ddbe9","85ab831c-f6fa-4ae5-9b10-bdd8496a373d","f4b240e7-9421-410c-8e5e-d697f69d3843","6470479c-f5d0-4654-9a51-91e1d6e4c582","f60af216-6050-4536-93bd-565d2907a46c","96c6da2a-44db-420d-be92-c38278671c02","7d9625dd-a034-42a9-a4af-a4f442c27eec","70edae3b-90af-4f6f-8e5d-b013bd7b3b3f","ee2db5d5-ee0c-49d3-9de5-1d14a999f1da","a19e144d-8790-4f2c-b7b1-bf3f2bd2c541","7f213d5a-fcf6-4b46-aeda-36c1f4246a52","efb40a76-f6f8-4710-ac12-57def00aa5e1"]
x-cloud-trace-context: 600b73df685a8293657c198db51cca99
date: Fri, 02 Jan 2026 11:07:16 GMT
server: Google Frontend
Content-Length: 843
Connection: close

Page title: Software for Effective Organizational Execution

<!doctype html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>Software for Effective Organizational Execution</title>
  <base href="/plar/">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link rel="icon" type="image/x-icon" href="favicon.ico">
  <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
  <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js"></script>
<link rel="stylesheet" href="styles.44073babac73b5607ad2.css"></head>
<body>
  <app-root></app-root>
<script src="runtime.2ba57cdbee8263962bbd.js" defer></script><script src="polyfills.c8b240ace00dc00d1dd0.js" defer></script><script src="scripts.2177cda8e82260b3b896.js" defer></script><script src="main.94d8f86a34eaa11193f3.js" defer></script></body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 172.217.208.121:443 · mk.plar.app

2025-12-22 21:11

HTTP/1.1 200 OK
content-type: text/html
last-modified: Mon, 15 Dec 2025 18:42:23 GMT
accept-ranges: bytes
etag: "1dc6df28d0992cb"
x-miniprofiler-ids: ["e48e11c0-fc9b-40d8-b35c-d8340649485d","45bb7670-e722-4e74-ac2b-e5565ea92fcc","e638191b-bb6f-4b72-a6d1-e97dbfeb0971","652ee001-8adc-4611-9161-f4014991dbeb","1c3be0a7-a72d-4ca6-8837-f5c757b78688","e63cd8bd-c325-4908-82bd-edb892f66574","24e9849c-9777-4eeb-bfca-349711967265","3be9f1f4-54c1-4a20-857b-95e667ab6fb3","8ff1338e-830b-4fd6-8cdf-252f7c7d7cdb","527983c5-615c-47ee-81b6-73455f16fd9d","aaeb25a3-e4a8-423a-b020-0a392469900e","cded7c64-7fc4-4867-b80f-e873e9813d43","0fe74a15-5c9d-4805-a143-b050b56a62c4","dde76c83-9fe8-472d-9164-d35d360da446","d94cf48f-7cd4-44f7-8892-d05d02b4339a","d630b146-9ddb-4a35-83f9-1dc004a32d08","1035fe75-de8b-4bab-8a3e-90e8fc4f2adf","2ce8262a-3d1c-4ef5-8b49-869a5f99c4c7","85bc4176-0725-4bd0-822a-8f99cf797b10","fdc9eab5-a86a-4418-90a9-e57d0e87e7e8","9f825208-d294-4229-b681-68e305fe0c73","0ce87e12-a44e-4b98-a5a2-04fac8308ebd"]
x-cloud-trace-context: 77f1a833dc94cf381e754eb608c80c41
date: Mon, 22 Dec 2025 21:11:17 GMT
server: Google Frontend
Content-Length: 843
Connection: close

Page title: Software for Effective Organizational Execution

<!doctype html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>Software for Effective Organizational Execution</title>
  <base href="/plar/">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link rel="icon" type="image/x-icon" href="favicon.ico">
  <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
  <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js"></script>
<link rel="stylesheet" href="styles.44073babac73b5607ad2.css"></head>
<body>
  <app-root></app-root>
<script src="runtime.bfed3c62fc41ad8cb64c.js" defer></script><script src="polyfills.c8b240ace00dc00d1dd0.js" defer></script><script src="scripts.2177cda8e82260b3b896.js" defer></script><script src="main.94d8f86a34eaa11193f3.js" defer></script></body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 172.217.208.121:443 · mk.plar.app

2025-12-20 23:11

HTTP/1.1 200 OK
content-type: text/html
last-modified: Mon, 15 Dec 2025 18:42:23 GMT
accept-ranges: bytes
etag: "1dc6df28d0992cb"
x-miniprofiler-ids: ["bda10193-4f4d-472b-9ab6-e25db45d8458","4ec24501-6d35-4faa-aa1c-a9821766cad5","a6fa7c1c-605d-4a14-9fe6-cfd77f410507","6ebae8a2-6d1b-442c-85b1-67eeb62c4ae7","ddc54dbf-89b1-4a94-b4f1-ec499fa57c21","96aaa4a2-463b-498c-83fe-c054e6757869","2ba73088-204b-4efd-ba68-2e1117b5c73d","6d39e272-51e1-4c93-ab71-c121f5dc1237","2d39f7ac-6f5e-4e61-8ca8-10bb4bbc4b7b","c7c98068-65d4-433a-8ab9-5a25f524fa46","47d5c449-79bf-4421-991d-019bdd16c5a8","4e5daf7d-6077-471e-a36f-9bee7ae33e71","80a70498-2ae2-431c-a152-da69f9c8381d","be1081c4-988e-4cdb-a1a8-7278ec7b935c","62b97a7b-18d0-45a1-8042-d8d870faa3b4","abdee666-6803-4aea-8ac1-22843828fa86","f92e2d88-b524-4c24-bfe8-5201d7df0de4","0c2c811f-9be1-492f-8628-001fbb9d812d","864f7a07-478b-4b61-969d-4377605273f9","69f51f21-596c-4bce-8081-4c1f513be000","c7f4b013-eb2d-4c48-a7db-83e40cfa1424","0a8814bb-60ba-47c2-b5d5-fa9f92e3a2bd"]
x-cloud-trace-context: f5b4053581b29e59b36341257a830c0e
date: Sat, 20 Dec 2025 23:11:22 GMT
server: Google Frontend
Content-Length: 843
Connection: close

Page title: Software for Effective Organizational Execution

<!doctype html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>Software for Effective Organizational Execution</title>
  <base href="/plar/">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link rel="icon" type="image/x-icon" href="favicon.ico">
  <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
  <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js"></script>
<link rel="stylesheet" href="styles.44073babac73b5607ad2.css"></head>
<body>
  <app-root></app-root>
<script src="runtime.bfed3c62fc41ad8cb64c.js" defer></script><script src="polyfills.c8b240ace00dc00d1dd0.js" defer></script><script src="scripts.2177cda8e82260b3b896.js" defer></script><script src="main.94d8f86a34eaa11193f3.js" defer></script></body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

Open service 172.217.208.121:443 · mk.plar.app

2025-12-19 01:30

HTTP/1.1 200 OK
content-type: text/html
last-modified: Mon, 15 Dec 2025 18:42:23 GMT
accept-ranges: bytes
etag: "1dc6df28d0992cb"
x-miniprofiler-ids: ["aec20338-5e26-43a4-8b03-b1a99af6470b","37fe9f52-1ebf-4f70-9827-ace39ba813f5","79cea618-0b8f-49fd-9f23-05e9ee75e3a3","b5e664c4-9821-4a59-b38a-e242fed68b88","1e4db65b-9494-4f0a-8022-ca2588a7fec8","174a1000-4b82-4ab7-9de9-b2c6038d3237","ff1aa199-aed9-439b-bc0f-c0662fa6bdcb","7bc1eff2-a2f9-4d83-b166-cbe3bd83e224","51d08119-516d-4842-9472-65d8e19473f9","c988080b-238c-4a38-8596-592bdee1cf35","8c658bd6-57b3-45c3-9f38-eb7f02facd91","cac52aae-65f0-45c2-a7ae-6fe3161effa9","06aba4c8-333e-489d-917c-d444f965c002","15e73f2f-4a9b-4b24-897e-0d05c3d908a8","74f2c497-8cc2-4b44-9f7d-ac3b034f47b5","a2a18c91-37f8-402c-a950-53cd6cfd0c4a","39296913-0bfa-4858-a543-b2d445b59d08","317561a4-55a9-4d4d-94ee-4c0e69b53629","94cfec26-9c89-41d0-8f8d-46e74ecf0f02","a2cd1504-7d1f-4948-89d8-f447a44602d9","fdb77b8f-f6f3-4574-add8-70ba21ac421d","81b1f457-8ac8-4011-8e8a-a668a642237f"]
x-cloud-trace-context: 5645f34ac323994c40138f454c6262a2
date: Fri, 19 Dec 2025 01:30:42 GMT
server: Google Frontend
Content-Length: 843
Connection: close

Page title: Software for Effective Organizational Execution

<!doctype html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>Software for Effective Organizational Execution</title>
  <base href="/plar/">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link rel="icon" type="image/x-icon" href="favicon.ico">
  <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
  <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js"></script>
<link rel="stylesheet" href="styles.44073babac73b5607ad2.css"></head>
<body>
  <app-root></app-root>
<script src="runtime.bfed3c62fc41ad8cb64c.js" defer></script><script src="polyfills.c8b240ace00dc00d1dd0.js" defer></script><script src="scripts.2177cda8e82260b3b896.js" defer></script><script src="main.94d8f86a34eaa11193f3.js" defer></script></body>
</html>

Found 2025-12-19 by HttpPlugin

Create report

mk.plar.app

Fingerprint:

9bf7839ec8f09689988bcefd892f4be4e6ed593eb8d0aff561ae24db669d6ac5

CN:

mk.plar.app

Key:

RSA-2048

Issuer:

WR3

Not before:

2025-12-04 15:27

Not after:

2026-03-04 16:14

Domain summary

mk.plar.app 6

1 recorded

IP summary

172.217.208.121 2

1 recorded