LeakIX - Host tales.pw

Domain tales.pw

Russia

Domain names registrar REG.RU, Ltd

Software information

nginx nginx

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 89.108.100.89
Domain: system.services.utopia.tales.pw
Port: 443
URL: https://system.services.utopia.tales.pw

First seen 2025-10-24 16:39
Last seen 2026-02-15 22:51
Open for 114 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549cb3dc06bbddd42b2545122b420739bcff4ad60be

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/ExpHistory/{id}
DELETE /api/{charId}/Abilities/{id}
GET /api/Characters/{id}
GET /api/ExpHistory/character/{id}
GET /api/Info/abilities
GET /health_check
PATCH /api/Props/{id}/attributes
PATCH /api/Props/{id}/defences
PATCH /api/Props/{id}/dmg-sensitivity
PATCH /api/Props/{id}/other-props
PATCH /api/Props/{id}/skills
POST /api/Characters
POST /api/ExpHistory
POST /api/Hp/{id}/hp/damage
POST /api/Hp/{id}/hp/heal
POST /api/{charId}/Abilities
PUT /api/Rolls/skill-check

Found on 2026-02-15 22:51

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549cb3dc06bbddd42b2545122b420739bcfabc29556

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/ExpHistory/{id}
DELETE /api/{charId}/Abilities/{id}
GET /api/Characters/{id}
GET /api/ExpHistory/character/{id}
GET /api/Info/abilities
GET /health_check
PATCH /api/Props/{id}/attributes
PATCH /api/Props/{id}/defences
PATCH /api/Props/{id}/dmg-sensitivity
PATCH /api/Props/{id}/other-props
PATCH /api/Props/{id}/skills
POST /api/Characters
POST /api/ExpHistory
POST /api/Hp/{id}/hp/damage
POST /api/Hp/{id}/hp/heal
POST /api/{charId}/Abilities

Found on 2026-02-02 02:16

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-12-23 15:41

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 31.31.196.141
Domain: auth.tales.pw
Port: 80
URL: http://auth.tales.pw

First seen 2022-06-26 00:16
Last seen 2024-05-29 21:57
Open for 703 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522cb6f32da
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/tales-pw/tales_auth_service
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX0YxMU9nNGVjTHliNTlPeTRNYjY3OXFkQk9lOGc2dzRja1oxeg==
[branch "deploy"]
	remote = origin
	merge = refs/heads/deploy
```
  Found on 2024-05-29 21:57
  
  428 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 31.31.196.141
Domain: www.auth.tales.pw
Port: 443
URL: https://www.auth.tales.pw

First seen 2022-06-26 00:16
Last seen 2024-05-29 21:48
Open for 703 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522cb6f32da
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/tales-pw/tales_auth_service
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX0YxMU9nNGVjTHliNTlPeTRNYjY3OXFkQk9lOGc2dzRja1oxeg==
[branch "deploy"]
	remote = origin
	merge = refs/heads/deploy
```
  Found on 2024-05-29 21:48
  
  428 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 31.31.196.141
Domain: auth.tales.pw
Port: 443
URL: https://auth.tales.pw

First seen 2022-06-26 00:16
Last seen 2024-05-29 21:23
Open for 703 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522cb6f32da
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/tales-pw/tales_auth_service
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX0YxMU9nNGVjTHliNTlPeTRNYjY3OXFkQk9lOGc2dzRja1oxeg==
[branch "deploy"]
	remote = origin
	merge = refs/heads/deploy
```
  Found on 2024-05-29 21:23
  
  428 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 31.31.196.141
Domain: www.auth.tales.pw
Port: 80
URL: http://www.auth.tales.pw

First seen 2022-06-26 00:16
Last seen 2024-05-29 21:02
Open for 703 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522cb6f32da
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/tales-pw/tales_auth_service
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX0YxMU9nNGVjTHliNTlPeTRNYjY3OXFkQk9lOGc2dzRja1oxeg==
[branch "deploy"]
	remote = origin
	merge = refs/heads/deploy
```
  Found on 2024-05-29 21:02
  
  428 Bytes
Create report

Open service 2a00:f940:2:2:1:1:0:117:443 · www.tales.pw

2026-01-25 00:11

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Jan 2026 00:11:33 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding

Page title: Вселенные tales.pw

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <link rel="icon" type="image/x-icon" href="favicon.ico">
    <title>Вселенные tales.pw</title>
    <style>
        * {
            margin: 0;
            padding: 0;
            box-sizing: border-box;
        }

        body {
            font-family: 'Arial', sans-serif;
            background-color: #2b2d31;
            color: #c8ccd4;
            display: flex;
            justify-content: center;
            align-items: center;
            height: 100vh;
        }

        .container {
            text-align: center;
            display: flex;
            flex-direction: column;
            align-items: center;
        }

        .logo {
            width: 150px;
            height: auto;
            margin-bottom: 1.5rem;
        }

        h1 {
            font-size: 2rem;
            margin-bottom: 1.5rem;
            color: #c8ccd4;
        }

        .portal-links {
            display: flex;
            flex-direction: column;
            gap: 1rem;
        }

        .portal-link {
            text-decoration: none;
            color: #c8ccd4;
            background-color: #40444b;
            padding: 0.8rem 1.5rem;
            font-size: 1.2rem;
            border-radius: 8px;
            transition: background-color 0.3s, transform 0.2s;
        }

        .portal-link:hover {
            background-color: #5865f2;
            transform: scale(1.05);
        }

        .portal-link:active {
            transform: scale(0.95);
        }

        .portal-link-disabled {
            display: block;
            color: #c8ccd4;
            background-color: #40444b;
            padding: 0.8rem 1.5rem;
            font-size: 1.2rem;
            border-radius: 8px;
            text-align: center;
            opacity: 0.6;
        }
    </style>
</head>
<body>
    <div class="container">
        <img class="logo" src="/hez.png" alt="Tales PW Logo">
        <h1>Вселенные tales.pw</h1>
        <div class="portal-links">
            <!--<div class="portal-link-disabled">???</div>-->
            <a class="portal-link" href="https://utopia.tales.pw" target="_blank" rel="noopener noreferrer">Tales of Utopia</a>
            <a class="portal-link" href="https://fairy.tales.pw" target="_blank" rel="noopener noreferrer">Fairy Tales: Хезерфорт</a>
        </div>
    </div>
</body>
</html>

Found 2026-01-25 by HttpPlugin

Domain tales.pw

Russia

Software information

Swagger API description is publicly available

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

tales.pwwww.tales.pw

painmed.tales.pwwww.painmed.tales.pw

sheet.utopia.tales.pwwww.sheet.utopia.tales.pw

wiki.utopia.tales.pwwww.wiki.utopia.tales.pw

Domain summary

IP summary