What Is Plex?

Plex (plex.tv) is a streaming site with movies, TV shows, and live TV channels. plex.tv is a streaming website and app. The website can be accessed from a web browser via desktop or mobile device. The app is available on smart TV and smart TV services such as the Roku box. As of July 2023, the site plex.tv has an estimated 31.2 million monthly views, according to SimilarWeb. The Wayback Machine estimates plex.tv was founded on April 29, 2010. The Internet Archive has saved the domain plex.tv 9,798 times between April 29, 2010 and August 27, 2023.

Is Plex Safe?

I analyzed plex.tv for malware and malicious content to check if it was legit or a scam. Here are the results:

I checked the site plex.tv on the online malware scanner Sucuri and it returned with no issues. You can see the same here: Sucuri scan for the site plex.tv.

plex.tv Sucuri results

See also: How To Stay Safe Online

Sucuri says the site plex.tv doesn’t have malware or any important security issues and is a low security risk.

Some hardening improvements can be made:

  • Missing security header for ClickJacking Protection. Alternatively, you can use Content-Security-Policy: frame-ancestors 'none'. Affected pages:
    https://www.plex.tv/wp-admin/css/common.css
    https://www.plex.tv/wp-content/themes/plex/
    https://www.plex.tv/wp-includes/css/dist/edit-post/style.css
    https://www.plex.tv/wp-includes/js/quicktags.js
  • Missing security header to prevent Content Type sniffing. Affected pages:
    https://www.plex.tv/ for Google’s UA
    https://www.plex.tv/watch-free-tv/
    https://www.plex.tv/wp-admin/css/common.css
    https://www.plex.tv/wp-content/themes/plex/
    https://www.plex.tv/wp-includes/css/dist/edit-post/style.css
    https://www.plex.tv/wp-includes/js/quicktags.js
  • Missing Strict-Transport-Security security header. Affected pages:
    https://www.plex.tv/ for Google’s UA
    https://www.plex.tv/watch-free-tv/
    https://www.plex.tv/wp-admin/css/common.css
    https://www.plex.tv/wp-content/themes/plex/
    https://www.plex.tv/wp-includes/css/dist/edit-post/style.css
    https://www.plex.tv/wp-includes/js/quicktags.js
  • Missing Content-Security-Policy directive. We recommend to add the following CSP directives (you can use default-src if all values are the same): script-src, object-src, base-uri, frame-src. Affected pages:
    https://plex.tv/404javascript.js
    https://plex.tv/404testpage4525d2fdc
    https://www.plex.tv/ for Google’s UA
    https://www.plex.tv/watch-free-tv/
    https://www.plex.tv/wp-admin/css/common.css
    https://www.plex.tv/wp-content/themes/plex/
    https://www.plex.tv/wp-includes/css/dist/edit-post/style.css
    https://www.plex.tv/wp-includes/js/quicktags.js
  • The ‘unsafe-inline’ keyword in Content-Security-Policy is not recommended. Consider using unsafe-hashes or nonces instead.

However, these hardening improvements don’t impact the Sucuri grade.

To check this further I ran a parasite scan with Unmask Parasites on the site plex.tv and it says the page is clean. You can see the same here: Unmask Parasites scan for the site plex.tv.

I also checked the site plex.tv on VirusTotal and it isn’t malicious. You can see the same here: VirusTotal scan for the site plex.tv.

plex.tv VirusTotal results

Further, the site plex.tv passed all blocklist engines on URLVoid. You can see the same here: URLVoid scan for the site plex.tv.

In conclusion, Sucuri says the site plex.tv doesn’t have malware. Unmask Parasites says the site plex.tv is clean of parasites. VirusTotal and Sucuri say the domain plex.tv isn’t malicious or blacklisted. Overall grade: Safe.

Links and Profiles

Website: plex.tv

References

1. SimilarWeb – plex.tv

2. Wayback Machine – plex.tv