LeakIX - Host plazatv.org

Domain plazatv.org

Hong Kong

Kaopu Cloud HK Limited

Software information

cloudflare

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.198.203.46
Domain: plazatv.org
Port: 443
URL: https://plazatv.org

First seen 2025-10-16 18:53
Last seen 2025-11-10 13:32
Open for 24 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2025-11-10 13:32
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.198.203.46
Domain: plazatv.org
Port: 80
URL: http://plazatv.org

First seen 2025-10-16 18:53
Last seen 2025-11-10 13:21
Open for 24 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2025-11-10 13:21
Create report

Open service 2606:4700::6812:1540:443 · plazatv.org

2025-12-22 10:31

HTTP/1.1 302 Found
Date: Mon, 22 Dec 2025 10:31:52 GMT
Content-Length: 0
Connection: close
CF-RAY: 9b1ef3b8cfc86c48-SJC
location: /forbiddenPc?null
cf-cache-status: DYNAMIC
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
alt-svc: h3=":443"; ma=86400

Found 2025-12-22 by HttpPlugin

Create report

Open service 104.18.20.64:80 · plazatv.org

2025-12-22 10:31

HTTP/1.1 301 Moved Permanently
Date: Mon, 22 Dec 2025 10:31:51 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Mon, 22 Dec 2025 11:31:51 GMT
Location: https://plazatv.org/
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 9b1ef3b57f4af8d3-SIN
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 104.18.21.64:8443 · plazatv.org

2025-12-22 10:31
Found 2025-12-22 by HttpPlugin
Create report

Open service 2606:4700::6812:1540:80 · plazatv.org

2025-12-22 10:31

HTTP/1.1 301 Moved Permanently
Date: Mon, 22 Dec 2025 10:31:51 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Mon, 22 Dec 2025 11:31:51 GMT
Location: https://plazatv.org/
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 9b1ef3b5392bea5b-EWR
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 104.18.21.64:80 · plazatv.org

2025-12-22 10:31

HTTP/1.1 301 Moved Permanently
Date: Mon, 22 Dec 2025 10:31:51 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Mon, 22 Dec 2025 11:31:51 GMT
Location: https://plazatv.org/
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 9b1ef3b50b7503f0-FRA
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 104.18.20.64:443 · plazatv.org

2025-12-22 10:31

HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 10:31:52 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
CF-RAY: 9b1ef3b618d7dcd1-FRA
vary: Accept-Encoding
accept-charset: utf-8
gc: 1.0.0.46
gv: 2.0.11.44
gt: 7
cf-cache-status: DYNAMIC
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
alt-svc: h3=":443"; ma=86400

Page title: Plaza

<!doctype html>
<html lang="en">
 <head>
  <script src="/_version.js?v=1766317699640" type="e8fdcb179394d076dfb8adc3-text/javascript"></script>
  <meta version="2.0.17.10.01">
  <meta charset="UTF-8">
  <meta http-equiv="X-UA-Compatible" content="IE=Edge">
  <meta content="yes" name="apple-touch-fullscreen">
  <meta content="black" name="apple-mobile-web-app-status-bar-style">
  <meta content="telephone=no" name="format-detection">
  <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no,viewport-fit=cover">
  <meta name="HandheldFriendly" content="true">
  <meta name="format-detection" content="telephone=no, email=no">
  <meta name="msapplication-tap-highlight" content="no">
  <meta name="apple-mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black">
  <meta name="full-screen" content="yes">
  <meta name="x5-fullscreen" content="true">
  <meta name="apple-touch-fullscreen" content="YES">
  <meta name="google" value="notranslate">
  <meta name="theme-color" content="#fff">
  <meta name="mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black">
  <meta name="apple-mobile-web-app-title" content="Welcome">
  <meta name="name" content="Welcome">
  <meta name="short_name" content="Welcome">
  <meta name="msapplication-TileImage" content="/icons/512x512-c.png">
  <meta name="msapplication-TileColor" content="#0e90d2">
  <meta http-equiv="Content-Security-Policy" content="frame-ancestors 'none';">
  <script type="e8fdcb179394d076dfb8adc3-text/javascript">(function (w, d, s, l, i) {
      w[l] = w[l] || []; w[l].push({
        'gtm.start':
          new Date().getTime(), event: 'gtm.js'
      }); var f = d.getElementsByTagName(s)[0],
        j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src =
          'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f);
    })(window, document, 'script', 'dataLayer', 'GTM-MZ76NJ3W');</script>
  <script type="e8fdcb179394d076dfb8adc3-text/javascript">// 获取localStorage中名为'key'的数据
    var ac_theme_data = localStorage.getItem('ac-theme');
    if (!ac_theme_data) {
      localStorage.setItem('ac-theme', 'black');
    }</script>
  <style>#loading{text-align:center;width:100vw;height:100vh;background:#fff;position:fixed;left:0;top:0;z-index:9999}@-webkit-keyframes skeleton-blink{0%{opacity:.6}25%{opacity:1}50%{opacity:.6}75%{opacity:1}100%{opacity:.6}}@keyframes skeleton-blink{0%{opacity:.6}25%{opacity:1}50%{opacity:.6}75%{opacity:1}100%{opacity:.6}}#loading.black .home-skeleton-pc .top-nav{border-color:#2b3f5d}#loading .live-skeleton{width:100%;min-height:100vh;background:#192b45;display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-align:center;-webkit-align-items:center;align-items:center;-webkit-box-pack:center;-webkit-justify-content:center;justify-content:center}.live-skeleton .svg-ske-box{display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-align:center;-webkit-align-items:center;align-items:center;-webkit-box-pack:center;-webkit-justify-content:center;justify-content:center;margin-right:16Px}.live-skeleton .svg-ske-box svg{width:50Px;height:50Px}@-webkit-keyframes indexLoadingBounce{0%{-webkit-transform:translateY(0);transform:translateY(0)}50%{-webkit-transform:translateY(-30Px);transform:translateY(-30Px)}100%{-webkit-transform:translateY(0);transform:translateY(0)}}@keyframes indexLoadingBounce{0%{-webkit-transform:translateY(0);transform:translateY(0)}50%{-webkit-transform:translateY(-30Px);transform:translateY(-30Px)}100%{-webkit-transform:translateY(0);transform:translateY(0)}}</style>
  <script type="e8fdcb179394d076dfb8adc3-module" crossorigin src="/assets/index.bc086f52.js"></script>
  <link rel="modulepreload" crossorigin href="/js/__commonjsHelpers__/__commonjsHelpers__.a85a88a6.js">
  <link rel="modulepreload" crossorigin href="/js/utils-vendor/utils-ve

Found 2025-12-22 by HttpPlugin

Create report

Open service 104.18.21.64:443 · plazatv.org

2025-12-22 10:31

HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 10:31:52 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
CF-RAY: 9b1ef3b60f32d232-FRA
vary: Accept-Encoding
accept-charset: utf-8
gc: 1.0.0.46
gv: 2.0.11.44
gt: 8
cf-cache-status: DYNAMIC
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
alt-svc: h3=":443"; ma=86400

Page title: Plaza

<!doctype html>
<html lang="en">
 <head>
  <script src="/_version.js?v=1766317699640" type="78058e9158e4d16afb42026f-text/javascript"></script>
  <meta version="2.0.17.10.01">
  <meta charset="UTF-8">
  <meta http-equiv="X-UA-Compatible" content="IE=Edge">
  <meta content="yes" name="apple-touch-fullscreen">
  <meta content="black" name="apple-mobile-web-app-status-bar-style">
  <meta content="telephone=no" name="format-detection">
  <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no,viewport-fit=cover">
  <meta name="HandheldFriendly" content="true">
  <meta name="format-detection" content="telephone=no, email=no">
  <meta name="msapplication-tap-highlight" content="no">
  <meta name="apple-mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black">
  <meta name="full-screen" content="yes">
  <meta name="x5-fullscreen" content="true">
  <meta name="apple-touch-fullscreen" content="YES">
  <meta name="google" value="notranslate">
  <meta name="theme-color" content="#fff">
  <meta name="mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black">
  <meta name="apple-mobile-web-app-title" content="Welcome">
  <meta name="name" content="Welcome">
  <meta name="short_name" content="Welcome">
  <meta name="msapplication-TileImage" content="/icons/512x512-c.png">
  <meta name="msapplication-TileColor" content="#0e90d2">
  <meta http-equiv="Content-Security-Policy" content="frame-ancestors 'none';">
  <script type="78058e9158e4d16afb42026f-text/javascript">(function (w, d, s, l, i) {
      w[l] = w[l] || []; w[l].push({
        'gtm.start':
          new Date().getTime(), event: 'gtm.js'
      }); var f = d.getElementsByTagName(s)[0],
        j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src =
          'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f);
    })(window, document, 'script', 'dataLayer', 'GTM-MZ76NJ3W');</script>
  <script type="78058e9158e4d16afb42026f-text/javascript">// 获取localStorage中名为'key'的数据
    var ac_theme_data = localStorage.getItem('ac-theme');
    if (!ac_theme_data) {
      localStorage.setItem('ac-theme', 'black');
    }</script>
  <style>#loading{text-align:center;width:100vw;height:100vh;background:#fff;position:fixed;left:0;top:0;z-index:9999}@-webkit-keyframes skeleton-blink{0%{opacity:.6}25%{opacity:1}50%{opacity:.6}75%{opacity:1}100%{opacity:.6}}@keyframes skeleton-blink{0%{opacity:.6}25%{opacity:1}50%{opacity:.6}75%{opacity:1}100%{opacity:.6}}#loading.black .home-skeleton-pc .top-nav{border-color:#2b3f5d}#loading .live-skeleton{width:100%;min-height:100vh;background:#192b45;display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-align:center;-webkit-align-items:center;align-items:center;-webkit-box-pack:center;-webkit-justify-content:center;justify-content:center}.live-skeleton .svg-ske-box{display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-align:center;-webkit-align-items:center;align-items:center;-webkit-box-pack:center;-webkit-justify-content:center;justify-content:center;margin-right:16Px}.live-skeleton .svg-ske-box svg{width:50Px;height:50Px}@-webkit-keyframes indexLoadingBounce{0%{-webkit-transform:translateY(0);transform:translateY(0)}50%{-webkit-transform:translateY(-30Px);transform:translateY(-30Px)}100%{-webkit-transform:translateY(0);transform:translateY(0)}}@keyframes indexLoadingBounce{0%{-webkit-transform:translateY(0);transform:translateY(0)}50%{-webkit-transform:translateY(-30Px);transform:translateY(-30Px)}100%{-webkit-transform:translateY(0);transform:translateY(0)}}</style>
  <script type="78058e9158e4d16afb42026f-module" crossorigin src="/assets/index.bc086f52.js"></script>
  <link rel="modulepreload" crossorigin href="/js/__commonjsHelpers__/__commonjsHelpers__.a85a88a6.js">
  <link rel="modulepreload" crossorigin href="/js/utils-vendor/utils-ve

Found 2025-12-22 by HttpPlugin

Create report

Open service 2606:4700::6812:1540:8443 · plazatv.org

2025-12-22 10:31
Found 2025-12-22 by HttpPlugin
Create report

Open service 2606:4700::6812:1440:443 · plazatv.org

2025-12-22 10:31

HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 10:31:52 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
CF-RAY: 9b1ef3b63c56c48a-YYZ
vary: Accept-Encoding
accept-charset: utf-8
gc: 1.0.0.46
gv: 2.0.11.44
gt: 7
cf-cache-status: DYNAMIC
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
alt-svc: h3=":443"; ma=86400

Page title: Plaza

<!doctype html>
<html lang="en">
 <head>
  <script src="/_version.js?v=1766317699640" type="36548e67794ec18fc677242d-text/javascript"></script>
  <meta version="2.0.17.10.01">
  <meta charset="UTF-8">
  <meta http-equiv="X-UA-Compatible" content="IE=Edge">
  <meta content="yes" name="apple-touch-fullscreen">
  <meta content="black" name="apple-mobile-web-app-status-bar-style">
  <meta content="telephone=no" name="format-detection">
  <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no,viewport-fit=cover">
  <meta name="HandheldFriendly" content="true">
  <meta name="format-detection" content="telephone=no, email=no">
  <meta name="msapplication-tap-highlight" content="no">
  <meta name="apple-mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black">
  <meta name="full-screen" content="yes">
  <meta name="x5-fullscreen" content="true">
  <meta name="apple-touch-fullscreen" content="YES">
  <meta name="google" value="notranslate">
  <meta name="theme-color" content="#fff">
  <meta name="mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black">
  <meta name="apple-mobile-web-app-title" content="Welcome">
  <meta name="name" content="Welcome">
  <meta name="short_name" content="Welcome">
  <meta name="msapplication-TileImage" content="/icons/512x512-c.png">
  <meta name="msapplication-TileColor" content="#0e90d2">
  <meta http-equiv="Content-Security-Policy" content="frame-ancestors 'none';">
  <script type="36548e67794ec18fc677242d-text/javascript">(function (w, d, s, l, i) {
      w[l] = w[l] || []; w[l].push({
        'gtm.start':
          new Date().getTime(), event: 'gtm.js'
      }); var f = d.getElementsByTagName(s)[0],
        j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src =
          'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f);
    })(window, document, 'script', 'dataLayer', 'GTM-MZ76NJ3W');</script>
  <script type="36548e67794ec18fc677242d-text/javascript">// 获取localStorage中名为'key'的数据
    var ac_theme_data = localStorage.getItem('ac-theme');
    if (!ac_theme_data) {
      localStorage.setItem('ac-theme', 'black');
    }</script>
  <style>#loading{text-align:center;width:100vw;height:100vh;background:#fff;position:fixed;left:0;top:0;z-index:9999}@-webkit-keyframes skeleton-blink{0%{opacity:.6}25%{opacity:1}50%{opacity:.6}75%{opacity:1}100%{opacity:.6}}@keyframes skeleton-blink{0%{opacity:.6}25%{opacity:1}50%{opacity:.6}75%{opacity:1}100%{opacity:.6}}#loading.black .home-skeleton-pc .top-nav{border-color:#2b3f5d}#loading .live-skeleton{width:100%;min-height:100vh;background:#192b45;display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-align:center;-webkit-align-items:center;align-items:center;-webkit-box-pack:center;-webkit-justify-content:center;justify-content:center}.live-skeleton .svg-ske-box{display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-align:center;-webkit-align-items:center;align-items:center;-webkit-box-pack:center;-webkit-justify-content:center;justify-content:center;margin-right:16Px}.live-skeleton .svg-ske-box svg{width:50Px;height:50Px}@-webkit-keyframes indexLoadingBounce{0%{-webkit-transform:translateY(0);transform:translateY(0)}50%{-webkit-transform:translateY(-30Px);transform:translateY(-30Px)}100%{-webkit-transform:translateY(0);transform:translateY(0)}}@keyframes indexLoadingBounce{0%{-webkit-transform:translateY(0);transform:translateY(0)}50%{-webkit-transform:translateY(-30Px);transform:translateY(-30Px)}100%{-webkit-transform:translateY(0);transform:translateY(0)}}</style>
  <script type="36548e67794ec18fc677242d-module" crossorigin src="/assets/index.bc086f52.js"></script>
  <link rel="modulepreload" crossorigin href="/js/__commonjsHelpers__/__commonjsHelpers__.a85a88a6.js">
  <link rel="modulepreload" crossorigin href="/js/utils-vendor/utils-ve

Found 2025-12-22 by HttpPlugin

Create report

Open service 2606:4700::6812:1440:8443 · plazatv.org

2025-12-22 10:31
Found 2025-12-22 by HttpPlugin
Create report

Open service 2606:4700::6812:1440:80 · plazatv.org

2025-12-22 10:31

HTTP/1.1 301 Moved Permanently
Date: Mon, 22 Dec 2025 10:31:51 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Mon, 22 Dec 2025 11:31:51 GMT
Location: https://plazatv.org/
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 9b1ef3b48ef22af7-SJC
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 104.18.20.64:8443 · plazatv.org

2025-12-22 10:31
Found 2025-12-22 by HttpPlugin
Create report

plazatv.org*.plazatv.org

Fingerprint:

bdab7a486b7ad9ed84dbbb3f968f9751789934dddade139b73bca5eff52ad025

CN:

plazatv.org

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-12-07 18:06

Not after:

2026-03-07 19:05

Domain summary

plazatv.org 13

1 recorded

IP summary

2606:4700::6812:1540 1 104.18.20.64 1 104.18.21.64 1 2606:4700::6812:1440 1 103.198.203.46 1

5 recorded

Domain plazatv.org

Hong Kong

Software information

Swagger API description is publicly available

Swagger API description is publicly available

plazatv.org*.plazatv.org

Domain summary

IP summary