===== HOST infoportal.baloise.de ===== # http://infoportal.baloise.de in_scope host_id=f8e1bc7b25bb0984528660fef0381500 last_seen=2026-11-14 16:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:10:55) Plain-HTTP Apache redirect edge for Infoportal. Root and application paths, including `/api/jsonws`, preserve their path while redirecting to HTTPS. The Liferay portal and Airlock IAM application are exposed on the canonical HTTPS origin. ## tech technology version checked_at Airlock IAM 2026-11-09 19:19:18 Apache HTTP Server 2026-11-09 19:19:18 ## paths method status size path exchange_id GET 301 278 / 01a1dad1-d6bf-777e-9de9-85f7d9b7a600 GET 301 288 /api/jsonws 01a1d284-3226-71cd-893c-d373b95271f4 POST 301 292 /api/liferay/do 01a1dad2-3485-71d9-9dc8-11f59d1e42d1 POST 301 295 /api/spring/portal 01a1dad2-138c-76a9-b1bc-9e1e65bc6326 GET 301 289 /auth/ui/app 01a1dad1-f549-71d5-a05b-47903a9fd2fc # http://infoportal.baloise.de:6379 in_scope host_id=38a5051f19558f6ad6383f1e695ca55c last_seen=2026-11-14 05:04:12 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:10:58) Unavailable alternate plain-HTTP listener. Captured requests return only provider-generated gateway failures, with no target response, application route graph or identifiable server-side product. ## paths method status size path exchange_id GET / 01a1d871-3f3c-7f6e-916e-bfbfbc93f13c # http://infoportal.baloise.de:8009 in_scope host_id=6a1b6540bc00f2c2e1a5429ddf1fac1e last_seen=2026-11-14 16:09:51 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:14:15) Alternate plain-HTTP Apache listener; / permanently redirects to the canonical https://infoportal.baloise.de/ Liferay/Airlock IAM portal. ## tech technology version checked_at Apache HTTP Server 2026-11-14 23:17:30 ## paths method status size path exchange_id GET 502 0 / 01a1dad2-5350-7ce3-859b-8f38f3195e20 POST 0 /api/spring/portal 01a1dad2-869e-783e-a36a-45fb9d13ec6f GET 0 /auth/ui/app 01a1dad2-7359-7fb7-ac65-1087edeef291 # http://infoportal.baloise.de:8080 in_scope host_id=a6b639d8e0ef57ac708343ac39e81774 last_seen=2026-11-14 20:46:52 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:11:00) Unavailable candidate direct Liferay HTTP listener. Direct and configured-route requests time out or return only provider failures, including `/api/jsonws`; no backend response, application content or identifiable server-side product is exposed. ## paths method status size path exchange_id GET 303 210 /api/jsonws 01a1dbd0-2052-7bcf-bf69-bd5e60d928a3 GET / 01a1d871-3f5b-70c2-b99f-0ad2e1152030 # http://infoportal.baloise.de:8999 in_scope host_id=6b9648c7ddd234943d642dea735d2ee7 last_seen=2026-11-14 05:04:12 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:11:01) Unavailable alternate plain-HTTP listener. Direct transport times out and configured routes return only provider-generated gateway failures, with no target response, application route graph or identifiable server-side product. ## paths method status size path exchange_id GET / 01a1d871-3f74-78f7-9860-0646277e15bf # http://infoportal.baloise.de:11311 in_scope host_id=4b949a5eacc1c8131aafd161c806bb48 last_seen=2026-11-14 16:10:00 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:11:03) Unavailable alternate plain-HTTP listener. Captured requests return only provider-generated gateway failures, with no target response, application route graph or identifiable server-side product. ## paths method status size path exchange_id GET 0 / 01a1dad2-a6e9-7658-b09d-04eaba4080b1 POST 0 /api/spring/portal 01a1dad2-ad41-79fa-9bd3-88a6dd4da43c # https://infoportal.baloise.de:80 in_scope host_id=c5ae959d3e6f57d044d85ab00a644e66 last_seen=2026-11-14 16:18:23 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:01:54) Directly reachable TLS listener on TCP port 80 for the Infoportal Apache/Airlock Gateway and Airlock IAM boundary, backed by the same Liferay Portal application and Jersey 3.1.10 REST layer as canonical HTTPS. `/api/jsonws` enters the same application-access handoff while retaining this listener in the encoded return target. It shares the canonical route inventory and server-side stack; no separate frontend graph is exposed on this listener. ## tech technology version checked_at Airlock Gateway 2026-11-13 18:00:58 Airlock IAM 2026-11-10 06:14:31 Apache HTTP Server 2026-11-10 06:14:32 Jersey 3.1.10 2026-11-13 18:01:00 Liferay Portal 2026-11-10 06:14:33 ## paths method status size path exchange_id POST 303 186 /%2E%2E;/api/spring/portal 01a1dada-5192-7b1c-b32c-5c2b9984d1bb POST 303 186 /..;/api/spring/portal 01a1dad8-12cd-7a54-8d9c-4aad5b1f44e0 POST 303 183 //api/spring/portal 01a1dad8-131a-7f01-b992-40f44f67c12d POST 303 174 /CSRFT759.js/../api/spring/portal 01a1dada-516f-7df6-b952-ec0296fb94df POST 303 202 /CSRFT759.js/..;/api/spring/portal 01a1dada-514e-7abb-8e8a-0b8781d9aea4 POST 303 177 /api//spring/portal 01a1dad8-1356-7e28-9c30-6982e6d889ad GET 303 170 /api/jsonws 01a1c416-1f7a-70e2-86da-11a3f542da2d POST 303 171 /api/liferay/do 01a1dada-5169-7517-85d5-55261c94efdf POST 303 174 /api/spring/portal 01a1dada-5203-711d-8c1f-d9d7d986787d POST 303 123 /auth/ui/api/spring/portal 01a1dad8-1249-7d20-85f0-37a1b6725275 POST 303 179 /c/portal/portlet_url 01a1dada-51ac-79f9-a9e4-ff1f4348cb50 # https://infoportal.baloise.de in_scope host_id=d55f54dcb5913d597a7c029898d6aa13 last_seen=2026-11-15 00:56:24 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 13:37:46) Liferay Portal is protected by Apache HTTP Server, Airlock Gateway and Airlock IAM. Root redirects to `/group/ao`; both `/group/ao` and `/group/infoportal` enter `/auth/ui/app/auth/application/access?Location=...`. Direct `/auth` redirects to `/auth/`, which creates Airlock session and CSRF state before redirecting relatively to `ui/app`; `/auth/ui` similarly canonicalizes through `/auth/ui/` to `./app`. `/auth/login` creates the same state and redirects directly to `/auth/ui/app/auth/application/access`. Liferay families including `/api/jsonws`, Axis, upload, OSGi console, Gogo shell, editor connectors and Spring remoting remain behind the same application-access handoff. Airlock state uses `AL_SESS-S`, `CSRFT759-S`, mirrored `X-CSRFT759` and `X-Same-Domain: 1`. Selector `portal_ao` starts a `PASSWORD_REQUIRED` flow using `default-username-password` and can advertise the optional `portal-redirect` step. Other installed selectors include `portal_mo`, `portal_si`, `venta`, `sas_va`, `antragsfreigabe` and `bsi_crm`; historical `portal_bvs` and `portal_zeus` return JSON:API 404. The IAM inventory contains 380 normalized REST templates and 390 method/path bindings. The complete REST method matrix and 213 requestable shared UI templates are represented once on `mein-portal-registrierung.baloise.de`. It spans authentication, registration, Airlock 2FA, Cronto, OTP, FIDO, OATH/VASCO and matrix flows; password, SSI, selection and identity handlers; protected account-link, token/device, OAuth consent/session, remember-me and representation operations; and public migration, password-only, secret-question and language handlers. Installed method-bound handlers include technical-client registration, registration-data submission and authentication-data editing. Previously served application WADLs identify Jersey 3.1.10 and document public, OAuth2, authentication, self-service, registration and technical-client families. Current GET requests to `/auth/rest/public/application.wadl` and `/auth/rest/oauth2/application.wadl` return empty HTTP 500 responses. The current IAM shell links `/auth/ui/styles.aa4c4328f9bb7e9b.css` and `/auth/ui/assets/custom/js/iam-custom.af5b4c4473394040.js`. `/auth/ui/3rdpartylicenses.txt` is also public and returns the shell’s 32,193-byte third-party license inventory. Its runtime defines 180 lazy chunks and 214 Angular route entries; the shared router composes to 199 concrete paths below `/auth/ui/app`; its requestable route templates are mapped once on the registration tenant. The host-specific export has 44 text files. Thirty-nine are byte-identical to the canonical Mein Portal frontend, whose complete 193-file shared graph represents this common IAM application once. `/auth/ui/app/8198.2b7ccc8631d43ce6.js` and `/auth/ui/app/auth/application/assets/airlock/i18n/en.json` are 3,307-byte HTML shell responses rather than JavaScript or JSON. No usable source maps are published. Real gateway content also exists below `/error_path/`: `/error_path/404.html` is a multilingual branded 404 page; `/error_path/maintenance.html` is a distinct German maintenance notice with support contact details and loads `/error_path/maintenance_image001.png`; `/error_path/img/favicon.ico` is the shared favicon. Alternate TLS listeners expose the same portal/IAM boundary through CloudFront origin-facing addresses. Airlock prevents disclosure of a Liferay release string. The formerly public authentication, self-service, tech-client-registration and user-self-registration WADL routes now return empty HTTP 500 responses. Jersey 3.1.10 remains identified from the retained prior WADLs. ## tech technology version checked_at Airlock Gateway 2026-11-13 11:42:07 Airlock IAM 2026-11-13 11:42:06 Apache HTTP Server 2026-11-13 11:42:09 Jersey 3.1.10 2026-11-10 07:59:05 Liferay Portal 2026-11-13 00:10:40 ## paths (50 of 969; toadcli paths) method status size path exchange_id GET 303 285 / 01a1dc95-8f74-719d-bf0a-54dd0bef7060 GET 303 181 /%2E%2E;/api/jsonws 01a1c014-5716-774e-ad28-fa86310bbe02 POST 303 186 /%2E%2E;/api/spring/portal 01a1dada-5214-7487-b944-0126db5e1957 GET 303 173 /%2e/api/jsonws 01a0f9da-3f68-7094-a2b5-4d46c5055c3d POST 303 183 /%5capi%5cjsonws%5cinvoke 01a0fa3d-fcaa-71c6-abea-2827d753ef08 GET 303 202 /%61pi/%61xis/Portal_ImageService 01a1ae52-909e-768f-954f-f5d7b062003c GET 303 198 /%61pi/axis/Portal_ImageService 01a1ae52-89f1-77c8-b716-ec6ae6c08872 GET 303 183 /%63/portal/portlet_url 01a1b492-5ce4-7023-ad12-95d9c4b6ddd6 POST 303 123 /%C0%AE/api/spring/portal 01a1c5ab-5107-7379-9909-798723081e4e POST 303 123 /%E0%80%AE/api/spring/portal 01a1c5ab-5199-7041-baec-1c8e4d31f963 GET 303 180 /%EF%BB%BFapi/jsonws 01a1c334-3f2b-7486-9b44-f5b9537dd285 OPTIONS 200 0 /* 01a1dbd0-20e9-7c86-bec9-30a8bf6ec9c1 GET 303 173 /.%2fapi/jsonws 01a0f9da-3684-7733-a59d-8d6809737a88 POST 303 186 /..;/api/spring/portal 01a1dad8-15fb-7d45-93e3-b765ba6c792c GET 303 200 /./api/axis/Portal_ImageService 01a1ae89-5d23-7589-97f1-db96138ee5fe GET 303 174 /.;/api/jsonws 01a1c2a2-e346-72f8-9af0-e292035dabcc GET 303 193 /.well-known/openid-configuration 01a103b1-68eb-753c-9cf0-3f7ae1752cb2 GET 303 197 //api/axis/Portal_ImageService 01a1ae52-984c-7325-980c-43decfc73c02 GET 303 168 //api/jsonws 01a0f9da-2def-766d-af23-c2f61c3b9ad0 POST 303 183 //api/spring/portal 01a1dad8-1630-7bbd-81b2-db1dfe2894f4 GET 303 235 //auth-servicecontainer/startTask/ 01a1da03-427e-7e6a-8862-24f6b8f692e7 GET 303 182 //c/portal/portlet_url 01a1b492-5a61-7509-ba58-0ad8906731e4 GET 303 196 //infoportal.baloise.de/api/jsonws 01a1c1a1-441e-72a3-a644-483a1760ec61 GET 303 171 /;/api/jsonws 01a1c2a2-df28-777c-bad6-6f3f632e8e2a POST 200 9085 /CSRFT759.js 01a1db7c-e794-7942-a884-1c73b48fbaf4 GET 303 196 /CSRFT759.js%2F..%2Fapi%2Fjsonws 01a1c219-825c-71dc-96de-ffc7300d2fd1 POST 303 204 /CSRFT759.js%3F/../api/spring/portal 01a1c5c9-16d7-77bc-b93b-acaebc8f6d20 GET 303 190 /CSRFT759.js/../api/jsonws 01a1c219-7eca-74d5-b9a9-b0afebf70bb8 POST 303 174 /CSRFT759.js/../api/spring/portal 01a1dada-515e-78c9-a9fb-cd0c4e62e8be GET 303 193 /CSRFT759.js/..;/api/jsonws 01a1c219-80a8-7022-9aae-9499f0fd7f36 POST 303 202 /CSRFT759.js/..;/api/spring/portal 01a1dadc-95ed-779d-9e85-804d294149f9 GET 303 215 /CSRFT759.js;jsessionid=bugbounty/../api/jsonws 01a1c580-0051-71e8-b8d6-086e99575b85 GET 303 173 /admin/rest/users 01a0f9f7-3bea-7467-94ff-dac3b1a544bd GET 303 163 /airlock/ 01a1c32c-1afd-7157-9325-12c151ef9e9a GET 303 5982 /airlock/alec_security_check 01a1da6c-3117-7751-9f38-15cfa56c0e99 POST 303 186 /airlock/rest/session/create 01a1dc65-442a-783d-9473-ef279474bd37 POST 303 178 /api%252fspring/portal 01a1c5ab-5349-70f8-8eab-feb35e955989 GET 303 172 /api%253B/jsonws 01a1c2a2-524b-7263-8879-03ed723f9bf7 POST 303 182 /api%255cjsonws%255cinvoke 01a0fa3e-058b-717d-98eb-3e4c7146f9f2 GET 303 167 /api%2fjsonws 01a0f9da-490d-7214-afcd-69c814d6f793 GET 303 170 /api%3B/jsonws 01a1c2a2-4e73-74c0-b789-c26b82723fe9 POST 303 176 /api%5cjsonws/invoke 01a0fa3e-0dff-72c5-80f5-75bdbb4d37e0 POST 303 123 /api%C0%AFspring/portal 01a1c5ab-4ede-7195-b2ed-87f7f7c4b20e POST 303 123 /api%E0%80%AFspring/portal 01a1c5ab-4f7b-760e-857a-64588a20b033 POST 303 186 /api%E2%88%95spring/portal 01a1c5ab-52b8-71a6-888e-2fe2287771c7 POST 303 186 /api%EF%BC%8Fspring/portal 01a1c5ab-5227-74ef-b918-df7e6f12640e POST 303 123 /api%F0%80%80%AFspring/portal 01a1c5ab-5014-7054-a091-b5dd21558f6f POST 303 208 /api-policy-service/rest/resolve-tech-client 01a1dbaf-23dd-705c-822e-a5e098f36c9d GET 303 173 /api/%2E/jsonws 01a1c014-54c3-73da-b211-88c7d7e890d8 GET 303 198 /api/%61xis/Portal_ImageService 01a1ae52-8c5a-7013-afa8-a5c70473ffd9 # https://infoportal.baloise.de:4401 in_scope whitelisting_bypass=cloudfront host_id=12b9a68f36d6c3302ac06a6ee7707862 last_seen=2026-11-14 23:29:14 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:27:10) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:27:13 Airlock IAM 2026-11-14 23:27:14 Apache HTTP Server 2026-11-14 23:27:11 Jersey 3.1.10 2026-11-13 17:48:49 Liferay Portal 2026-11-13 17:48:47 ## paths method status size path exchange_id GET 504 936 / 01a1daff-6a5e-7014-ae37-d35d847a17db POST 504 936 /%2E%2E;/api/spring/portal 01a1dada-c99d-722d-8138-960c02bb17a6 GET 200 9085 /CSRFT759.js 01a1cbb6-f92e-7296-90f4-c6fc2c7584ff POST 504 936 /CSRFT759.js/../api/spring/portal 01a1dada-c90c-72b9-87ba-bdb5ee0f4766 POST 504 936 /CSRFT759.js/..;/api/spring/portal 01a1dada-c993-7bf4-aad3-4ac54151e164 GET 303 165 /api/jsonws 01a1cbb6-fc26-7778-a3ef-b29dac076e0e POST 504 936 /api/liferay/do 01a1dada-c975-7646-905f-11051135c12c POST 504 936 /api/spring/portal 01a1dada-c8f5-7051-8c7b-73913917c4cc GET 302 1 /auth/ 01a1cbb6-f74e-77fa-ad54-5a93a7c5fb75 GET 302 0 /auth/login 01a1cbb6-f849-740a-a6d4-da30a355ecc1 GET 504 936 /auth/login-oneshot 01a1db9d-79b8-74c2-b355-d62d3603abfd GET 400 161 /auth/rest/protected/my/self 01a1cbb7-112e-75c3-a660-94581bb924e4 GET 500 0 /auth/rest/public/application.wadl 01a1ce03-fe01-7569-947e-a42d188d19e0 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d87e-2237-70c8-8458-aa936ec46a4e POST 504 936 /auth/ui/api/spring/portal 01a1dada-1261-732e-8124-793f072682e8 GET 504 936 /auth/ui/app 01a1dc65-3d96-73cc-b191-f8641282dab6 GET 303 279 /baloise-venta/a4j_3_2_1-SNAPSHOTorg/richfaces/renderkit/html/css/basic_classes.xcss/DATB/eAELXT5DOhSIAQ.sA18_.c1 01a1cb73-87a6-7485-a125-6300b8b42905 GET 303 171 /c/portal/login 01a1cbb6-fe27-708d-bee4-477b8f8439a7 POST 504 936 /c/portal/portlet_url 01a1dada-c8b5-7a45-83ae-153ad01a382f GET 303 196 /this-path-must-not-exist-14269251 01a1cbb7-132e-7719-aca3-68649740aa1b GET 303 164 /web/guest 01a1cbb6-fcff-73c5-b613-1ac1bfeb27a2 # https://infoportal.baloise.de:6379 in_scope whitelisting_bypass=cloudfront host_id=bc693dfa6d2d5a4fa17657391902332f last_seen=2026-11-14 16:18:24 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:01:58) CloudFront-origin-only alternate TLS listener for the Infoportal Apache/Airlock Gateway and Airlock IAM boundary, backed by the same Liferay Portal application and Jersey 3.1.10 REST layer as the canonical origin. Root retains the `/group/ao` portal entry, `/api/jsonws` and other Liferay families enter the canonical application-access handoff, and `/auth/ui/app` plus `/CSRFT759.js` expose the shared IAM frontend. Public WADL requests reach Jersey but return the canonical empty HTTP 500 response. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route and frontend graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-13 18:01:04 Airlock IAM 2026-11-10 06:23:43 Apache HTTP Server 2026-11-10 06:23:44 Jersey 3.1.10 2026-11-13 18:01:06 Liferay Portal 2026-11-10 06:23:45 ## paths method status size path exchange_id GET 303 285 / 01a1c41e-cfa9-73ac-b262-096688863139 POST 504 936 /%2E%2E;/api/spring/portal 01a1dada-ca21-7288-abd8-6a8f0186b8f5 GET 200 9085 /CSRFT759.js 01a1c41f-94c2-77d8-abb4-c5d1c4d77c43 POST 504 936 /CSRFT759.js/../api/spring/portal 01a1dada-c9bf-7929-8573-9082cc6b95aa POST 504 936 /CSRFT759.js/..;/api/spring/portal 01a1dada-c9fd-73fe-a843-033dd12e037f GET 303 165 /api/jsonws 01a1c420-16b6-7044-979e-308a84472f61 POST 504 936 /api/liferay/do 01a1dada-c988-7d48-ac0c-2c59dbeda748 POST 504 936 /api/spring/portal 01a1dada-c9af-7447-b614-f7f5ffb5d6ba POST 303 211 /api/spring/this-path-must-not-exist-14269251 01a1cb1e-e45f-71ac-bb60-ed74ba45f3dc GET 500 0 /auth/rest/public/application.wadl 01a1ce04-26f9-7238-aa74-8550d27c781e POST 504 936 /c/portal/portlet_url 01a1dada-c9c7-7a82-8173-e283f83818f8 # https://infoportal.baloise.de:7443 in_scope whitelisting_bypass=cloudfront host_id=f8ad6ea5fe2152e3112d84ca1ed65d1a last_seen=2026-11-14 19:51:03 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:27:15) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:27:18 Airlock IAM 2026-11-14 23:27:20 Apache HTTP Server 2026-11-14 23:27:17 Jersey 3.1.10 2026-11-13 18:01:14 Liferay Portal 2026-11-10 05:08:05 ## paths method status size path exchange_id GET 504 936 / 01a1daff-6a5e-7fee-8c8a-5eee16a0b900 POST 504 936 /%2E%2E;/api/spring/portal 01a1dadb-018f-7365-814c-4de4465ec5dd GET 200 9085 /CSRFT759.js 01a1c3d8-fdcd-7253-a505-4e73b268cccd POST 504 936 /CSRFT759.js/../api/spring/portal 01a1dadb-0175-719e-958f-c89b7bb843ad POST 504 936 /CSRFT759.js/..;/api/spring/portal 01a1dadb-01a4-71b5-883b-c65e38e1d688 GET 303 165 /api/jsonws 01a1c3d8-fe1f-779c-93c8-fb257eeec44b POST 504 936 /api/liferay/do 01a1dada-fff8-7e80-88eb-78e8b4a8c2cd POST 504 936 /api/spring/portal 01a1dada-ffb5-718c-be78-edf267cb49cc POST 303 211 /api/spring/this-path-must-not-exist-14269251 01a1cb1e-e655-75ee-9cdf-5f6a3c2afa41 GET 504 936 /auth/login-oneshot 01a1db9d-79fc-701c-b2d7-d4b3588abcc5 GET 500 0 /auth/rest/oauth2/application.wadl 01a1ce12-ea38-7589-8c50-f14781faa5c7 GET 500 0 /auth/rest/public/application.wadl 01a1ce04-4f8f-779b-8b1e-586a052bce9f GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29b-f6e2-7558-9a28-cb7b80862527 GET 200 3307 /auth/ui/app 01a1c3d1-96b6-71ab-a57e-fe250971046c POST 504 936 /c/portal/portlet_url 01a1dadb-0116-7d88-ab9f-1badb22fe997 GET 303 171 /group/infoportal 01a1c3d8-fe45-74af-ba8e-f943f2191135 # https://infoportal.baloise.de:7980 in_scope whitelisting_bypass=cloudfront host_id=5c3455e9d7fa2ca11bee39aa05267bef last_seen=2026-11-14 19:51:03 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:27:21) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:27:23 Airlock IAM 2026-11-14 23:27:24 Apache HTTP Server 2026-11-14 23:27:22 Jersey 3.1.10 2026-11-13 18:01:20 Liferay Portal 2026-11-10 05:08:06 ## paths method status size path exchange_id GET 504 936 / 01a1daff-6a61-7678-9208-142c1a9f14db POST 504 936 /%2E%2E;/api/spring/portal 01a1dadb-0276-7ef6-98af-840d281bdf4f GET 200 9085 /CSRFT759.js 01a1c3d8-fd8c-77ef-936c-fed1a5599588 POST 504 936 /CSRFT759.js/../api/spring/portal 01a1dadb-021c-7b8c-aa53-5bd77138ea50 POST 504 936 /CSRFT759.js/..;/api/spring/portal 01a1dadb-0252-703e-8b62-7682aae9d528 GET 303 165 /api/jsonws 01a1c3d8-fe47-76a5-a6cf-c69f532098fa POST 504 936 /api/liferay/do 01a1dadb-02cd-7d86-a269-8df5dbdd366e POST 504 936 /api/spring/portal 01a1dadb-02d2-7219-9b4a-47328517dd1e POST 303 211 /api/spring/this-path-must-not-exist-14269251 01a1cb1e-e7de-708b-b4e0-5e7d7f5da541 GET 303 123 /auth/login-oneshot 01a1db9d-0579-7ef3-bcbc-d5a7b0b059f2 GET 500 0 /auth/rest/public/application.wadl 01a1ce04-78b2-7347-9d54-149fdef1e425 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29b-f7c3-7378-b78f-bb93b35fdb3c GET 200 3307 /auth/ui/app 01a1c3d1-9691-72a8-8984-586343a829d8 POST 504 936 /c/portal/portlet_url 01a1dadb-0256-7eb2-9c16-5d4b4ce8dcc3 GET 303 171 /group/infoportal 01a1c3d8-fe46-75f8-8123-e4c5d6b60bd1 # https://infoportal.baloise.de:8080 in_scope whitelisting_bypass=cloudfront host_id=625d3bc484a762e5a3204f402008134d last_seen=2026-11-14 19:51:03 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:27:25) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:27:27 Airlock IAM 2026-11-14 23:27:29 Apache HTTP Server 2026-11-14 23:27:26 Jersey 3.1.10 2026-11-13 17:48:55 Liferay Portal 2026-11-13 17:48:53 ## paths method status size path exchange_id GET 504 936 / 01a1daff-6a53-7fbc-9e02-e530b74b45b7 POST 504 936 /%2E%2E;/api/spring/portal 01a1dadb-3ec1-7128-98b8-6dc75fb4cbee POST 504 936 /CSRFT759.js/../api/spring/portal 01a1dadb-3eae-787e-a8d9-22d61921e060 POST 504 936 /CSRFT759.js/..;/api/spring/portal 01a1dadb-3f36-7b4a-b0e4-b57e19ec0989 POST 504 936 /api/liferay/do 01a1dadb-3e31-7baf-bd05-7381762624e8 POST 504 936 /api/spring/portal 01a1dadb-3df0-7658-bac8-51b5988c2e5e POST 303 211 /api/spring/this-path-must-not-exist-14269251 01a1cb1e-e932-730a-92db-fec70c8115eb GET 303 168 /api;/jsonws 01a1c2a1-e26f-76ea-9256-8e402f93b8b3 GET 303 177 /api;bugbounty/jsonws 01a1c2a1-e37c-702a-b1d6-e009864cea64 GET 303 178 /auth-admin/editConfig 01a1c314-ffbd-7088-953e-17f7e3b1c49a GET 303 180 /auth-admin/rest/users 01a1c29f-1495-7597-a8e9-6bbfacc6a7b1 GET 303 193 /auth-servicecontainer/actuator/env 01a1c299-7260-7530-a5de-42ca68a05d13 GET 504 936 /auth/login-oneshot 01a1db9d-7a20-77ee-9653-daa863a68729 GET 500 0 /auth/rest/public/application.wadl 01a1ce04-a1cd-76ca-ac83-c0beee20ecac GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29b-fabd-76e5-bf57-5d3ddf98dad7 GET 200 3307 /auth/ui/app 01a1c2b0-93c8-74f5-8ab1-8fcd7c97ea8d PUT 303 123 /auth/ui/security-test-bugbounty-dwbzn-put8080-1794269970.txt 01a1c2d3-0347-733f-843d-334b64c9109e POST 504 936 /c/portal/portlet_url 01a1dadb-3e44-7ba9-b968-3dc8694297dd GET 303 179 /restman/1.0/services 01a1c299-7332-7213-9be9-fd3d15e33dc0 GET 0 /api%3B/jsonws 01a1c2a2-ce46-7405-9380-c2a8a6c00013 GET 0 /api/jsonws 01a1d88c-78da-7bbb-8e63-4febc73a3fd5 # https://infoportal.baloise.de:8343 in_scope whitelisting_bypass=cloudfront host_id=b3735174004399c346f370f60f85f9ea last_seen=2026-11-14 19:51:03 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:27:30) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:27:32 Airlock IAM 2026-11-14 23:27:35 Apache HTTP Server 2026-11-14 23:27:31 Jersey 3.1.10 2026-11-13 18:01:25 Liferay Portal 2026-11-10 05:08:10 ## paths method status size path exchange_id GET 504 936 / 01a1daff-6a59-748d-9c89-8faeec57b297 POST 504 936 /%2E%2E;/api/spring/portal 01a1dadb-3f5a-7e3d-925f-a09624746598 GET 200 9085 /CSRFT759.js 01a1c3d8-fe2b-76ed-ab7d-6f5d420e69c1 POST 504 936 /CSRFT759.js/../api/spring/portal 01a1dadb-3ef8-77e6-9678-8e433a2a4f89 POST 504 936 /CSRFT759.js/..;/api/spring/portal 01a1dadb-3f03-7d60-bb6b-67c0f2a104ca GET 303 165 /api/jsonws 01a1c3d8-fe47-76a5-a6cf-c69ecfa8039d POST 504 936 /api/liferay/do 01a1dadb-3ee7-73d1-8da4-9d9932d3f744 POST 504 936 /api/spring/portal 01a1dadb-3ece-740b-a68a-cb73d2a4f449 POST 303 211 /api/spring/this-path-must-not-exist-14269251 01a1cb1e-ea84-75c1-9279-28a870d62af4 GET 504 936 /auth/login-oneshot 01a1db9d-7add-7c9a-8258-03af550899b9 GET 500 0 /auth/rest/public/application.wadl 01a1ce04-cb23-7522-98ca-e6b6fee724c3 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29b-fbf2-7635-8032-5299b3ceb26f GET 200 3307 /auth/ui/app 01a1c3d1-9702-74ef-b578-61a5b02d8f5d POST 504 936 /c/portal/portlet_url 01a1dadb-3ed5-7bb1-94df-8347a4b3ef5e GET 303 171 /group/infoportal 01a1c3d8-fdff-723e-ba86-b40050df7d05 # https://infoportal.baloise.de:8443 in_scope whitelisting_bypass=cloudfront host_id=0d9cd454d1ec353b65e2dd350a76cd64 last_seen=2026-11-14 20:25:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:27:36) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:27:39 Airlock IAM 2026-11-14 23:27:40 Apache HTTP Server 2026-11-14 23:27:38 Jersey 3.1.10 2026-11-13 17:49:01 Liferay Portal 2026-11-13 17:48:59 ## paths (50 of 52; toadcli paths) method status size path exchange_id GET 504 936 / 01a1daff-6a66-7e9b-bfe2-6c1fedfaae30 POST 504 936 /%2E%2E;/api/spring/portal 01a1dadb-76db-72a3-8dc9-e3019aa7b6a6 POST 504 936 /CSRFT759.js/../api/spring/portal 01a1dadb-76ad-7b21-9ea4-318da466f385 POST 504 936 /CSRFT759.js/..;/api/spring/portal 01a1dadb-76c9-7e94-ab3f-8180b96aae09 GET 303 474 /airlock/alec_security_check 01a1c2b9-eb2d-7185-81a5-b0c57fe01f4b GET 303 186 /airlock/rest/session/create 01a1c328-299c-7348-ab8c-b1eca72507f2 GET 303 192 /airlock/rest/system/status/node 01a1c328-2875-73bc-9266-4d6c82ab327c GET 303 185 /airlock/rest/v3/api-docs 01a1c328-2726-70d6-9ed7-6917848204eb GET 303 165 /api/jsonws 01a1c4fe-9fb6-7066-a9d3-e6d1f63f4ea0 POST 504 936 /api/liferay/do 01a1dadb-7533-76e7-a63d-e10ebf550441 POST 504 936 /api/spring/portal 01a1dadb-74ef-7c6d-88c0-82c3fe94e685 POST 303 211 /api/spring/this-path-must-not-exist-14269251 01a1cb1e-ebd7-7442-93cc-a9242a92e75c GET 303 178 /auth-admin/editConfig 01a1c315-00aa-75c6-8764-4c4c4ba5514b GET 303 197 /auth-admin/rest/maintenance-messages 01a1c225-9610-72ef-af28-a7696ef37082 GET 303 180 /auth-admin/rest/users 01a1c4ba-0b53-777b-a9ae-a651ad76abb4 GET 303 183 /auth-admin;/rest/users 01a1c27c-a26b-7652-9dad-49167e9b74e8 GET 303 206 /auth-login/rest/public/maintenance-messages 01a1c344-fa1f-742d-ac2f-05763647c2b6 GET 303 197 /auth-servicecontainer%2Factuator%2Fenv 01a1c27c-a195-745d-8937-48951af9b5b4 GET 303 231 /auth-servicecontainer/..;/auth-servicecontainer/actuator/env 01a1c27c-9ed5-72d4-9e42-a6cbcb4f2ff7 GET 303 202 /auth-servicecontainer/.;/actuator/env 01a1c27c-9cac-7529-af9a-7c5413dc9c95 GET 303 196 /auth-servicecontainer//actuator/env 01a1c27c-a0c2-73c4-8f55-2b13e16d75a7 GET 303 193 /auth-servicecontainer/actuator/env 01a1c4ba-0c5c-76c6-a7ee-0c7efc64e6fd GET 303 186 /auth-servicecontainer/jolokia 01a1c225-93e7-72e6-916d-e6b7d3e76267 GET 303 195 /auth-servicecontainer/serviceContainer 01a1c317-c542-70da-978a-bc21c7daa602 GET 303 205 /auth-servicecontainer;bugbounty/actuator/env 01a1c27c-9bb7-7705-9e3b-1906bbd2ac05 GET 302 0 /auth/check-login 01a1bf94-1e3c-7123-9598-ad6caede6f79 GET 303 123 /auth/login-oneshot 01a1db9d-3f0e-7b89-8172-82db68a22d7c GET 401 132 /auth/rest/protected/my/tokens/device-tokens 01a1c430-23d3-74e0-b4cf-fbf6cc9b7aa6 GET 401 132 /auth/rest/protected/self-service/flows 01a1c224-aa90-7394-9baf-d9b275324eaa GET 500 0 /auth/rest/public/application.wadl 01a1ce04-f4cc-76e5-bd12-54650b71c485 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29b-fcef-74b8-9341-08983e3ec2d4 GET 200 3307 /auth/ui/app 01a1c430-1bd9-74f9-9d7b-49cfc420d142 GET 200 3307 /auth/ui/app/%252e%252e%253b/auth-servicecontainer/actuator/env 01a1c27b-ad04-7462-9837-46f3fc7d3e63 GET 303 123 /auth/ui/app/%2E%2E%2Fauth-servicecontainer/jolokia 01a1c27b-aff1-72d5-b45d-b6c204d6a0ec GET 303 123 /auth/ui/app/%2E%2E/%2E%2E/auth-servicecontainer/actuator/env 01a1c242-6adf-70c0-8b67-f62fb44647b1 GET 303 123 /auth/ui/app/..%2Fauth-servicecontainer/actuator/env 01a1c27b-adcb-73f0-ba3e-7e73bbda67ba GET 200 3307 /auth/ui/app/..%3B/auth-servicecontainer/actuator/env 01a1c27b-ac31-72ff-bdf5-14ff61d19c91 GET 200 3307 /auth/ui/app//..;/../auth-admin/rest/users 01a1c27b-b237-73bc-8f37-aae29ae939c3 POST 504 936 /c/portal/portlet_url 01a1dadb-7652-7ce5-bc49-3baf4dc38146 GET 504 936 /ext-h2/ 01a1dbbd-37be-7fd4-884a-bb182092b76d GET 303 171 /group/infoportal 01a1bf94-1bca-72c1-8e57-0e50cfaae53d GET 303 169 /o/gogo/shell 01a1c410-463c-759f-a207-67878650579f GET 303 179 /restman/1.0/services 01a1c225-9854-7279-b92b-b626c3954ed1 GET 303 182 /restman;/1.0/services 01a1c27c-a47d-772b-83e9-b106de417320 GET 303 175 /server-info 01a1c41b-4044-719b-8d1b-18c6c5046d73 GET 303 175 /server-status 01a1c41b-3de8-7549-8756-8143bff80c17 GET 404 9101 /auth/ui/app/%2E%2E;/auth-servicecontainer/actuator/env 01a1c27b-ab5d-75bf-8818-976252c2b87a GET 404 9101 /auth/ui/app/..;/auth-servicecontainer/actuator/env 01a1c27b-aa71-72d4-966f-642c66196c83 GET 0 /airlock/ 01a1c32c-9fbb-765a-9407-cd8251da156b GET 0 /auth-admin/ui/app 01a1c225-b646-74ce-a532-cc3bc5fa34be # https://infoportal.baloise.de:8700 in_scope host_id=7e9994c5a15e24db3e8bbe7b18ac89c1 last_seen=2026-11-15 00:09:14 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:27:41) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:27:44 Airlock IAM 2026-11-14 23:27:45 Apache HTTP Server 2026-11-14 23:27:43 Jersey 3.1.10 2026-11-15 00:05:35 Liferay Portal 2026-11-15 00:03:05 ## paths method status size path exchange_id GET 504 936 / 01a1daff-df9d-7cba-8c9d-1fd89e378a6d GET 303 165 /api/jsonws 01a1dc83-5d97-7cd8-89a7-56096cb5202b GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-0e48-709d-b3fd-4c53867c7da5 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b021-7ba6-bf5d-52c787ced889 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-65ec-737c-87d5-755d6d464609 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-6861-7193-bf08-40c2341c8132 GET 501 0 /auth/rest/public/jwks 01a1dc87-d10e-7d22-bcf6-c6b3e4dc5a16 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-625a-7004-b8c3-de9e70ebc7ce GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5af1-71e1-8fdb-c900baaea26b GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5e74-720b-986c-33e56846a342 GET 200 3307 /auth/ui/app 01a1dc89-5679-7f53-9031-ca064f97d698 # https://infoportal.baloise.de:8701 in_scope host_id=90fe07963d3b2bb7590a2de48f813197 last_seen=2026-11-15 00:09:14 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:27:46) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:27:49 Airlock IAM 2026-11-14 23:27:50 Apache HTTP Server 2026-11-14 23:27:48 Jersey 3.1.10 2026-11-15 00:05:36 Liferay Portal 2026-11-15 00:03:06 ## paths method status size path exchange_id GET 504 936 / 01a1daff-df9a-7bd8-a73e-d449174d5c98 GET 303 165 /api/jsonws 01a1dc83-5da0-7289-8bb9-91c4c539bc9d GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-0ea8-7d46-a765-1ee30d1b2e7c GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b13c-7aea-ba8b-c8b7377ae164 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-65f6-73d0-bb9e-1e03512c07c9 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-6886-7125-b62a-354fc8d23506 GET 501 0 /auth/rest/public/jwks 01a1dc87-d23c-70b6-bc16-08fe5ce5d639 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-6277-737d-ac10-498b10919713 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5b02-7fc2-9259-c130ff35d4fc GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5efc-7291-8a72-18d216a4a633 GET 200 3307 /auth/ui/app 01a1dc89-5636-7b88-ad29-129124e1a47f # https://infoportal.baloise.de:8765 in_scope host_id=71dcba78420660929a223a0a961b21fd last_seen=2026-11-15 00:09:15 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:27:51) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:27:54 Airlock IAM 2026-11-14 23:27:55 Apache HTTP Server 2026-11-14 23:27:53 Jersey 3.1.10 2026-11-15 00:05:38 Liferay Portal 2026-11-15 00:03:07 ## paths method status size path exchange_id GET 504 936 / 01a1daff-e02b-7027-81d5-2cdb55fe6cf4 GET 303 165 /api/jsonws 01a1dc83-5d9e-755e-9a2b-26cbb13a1eb6 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-0ee7-7a85-bca9-d18139180b59 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b20a-7ef7-9326-18998e8d9559 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-6697-7b74-8439-a509c479a552 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-68f5-79c8-883a-92797c32e14e GET 501 0 /auth/rest/public/jwks 01a1dc87-d11a-77fc-98fd-4897f349f6e6 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-629a-7362-b339-7f2e67088f5e GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5ad5-7033-ac8e-22814edbd3da GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5f2a-733c-b66b-081a743d0d90 GET 200 3307 /auth/ui/app 01a1dc89-563c-7ad5-82f0-0c4c29d38494 # https://infoportal.baloise.de:8800 in_scope host_id=a2e5181e18bb4768f399260ed68cd065 last_seen=2026-11-15 00:09:14 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:27:57) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:28:00 Airlock IAM 2026-11-14 23:28:01 Apache HTTP Server 2026-11-14 23:27:59 Jersey 3.1.10 2026-11-15 00:05:40 Liferay Portal 2026-11-15 00:03:08 ## paths method status size path exchange_id GET 504 936 / 01a1daff-dfae-77ce-9651-f8aa083e5e06 GET 303 165 /api/jsonws 01a1dc83-5e2a-7020-ac80-244aff8bc8eb GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-0e55-75ff-9570-6535898f6c23 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b1f2-7c0e-8e8d-245ee0784122 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-6343-763d-8be1-e86673b15774 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-6636-7929-9f0f-7dd07b038acc GET 501 0 /auth/rest/public/jwks 01a1dc87-d212-7005-a6fb-9104fdbd6da0 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-6000-7dcc-a4e7-52f7c6d859c8 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-59ee-7ac1-980c-6ddbc279cc75 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5d2d-78b1-a267-fd0ca5a8064a GET 200 3307 /auth/ui/app 01a1dc89-5613-71b1-8ffb-e272806f27c6 # https://infoportal.baloise.de:8801 in_scope host_id=9fb66f3347be2c689db28043f82d0888 last_seen=2026-11-15 00:09:14 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:28:03) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:28:06 Airlock IAM 2026-11-14 23:28:08 Apache HTTP Server 2026-11-14 23:28:04 Jersey 3.1.10 2026-11-15 00:05:42 Liferay Portal 2026-11-15 00:03:09 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54be-7d2e-b10e-40bc7f53cf9d GET 303 165 /api/jsonws 01a1dc83-5dab-7a86-a97b-d500081ac2bc GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-0e3f-70c2-9a60-3aa9041b7468 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b182-76c5-b2ae-9eeecb7b7dfd GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-658e-7ada-b937-ba53e9439ac8 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-680b-7c78-8417-482bdfeee18f GET 501 0 /auth/rest/public/jwks 01a1dc87-d21b-7045-9313-7669721ca820 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-6091-7049-b958-1c9a6845613b GET 200 209 /auth/rest/public/ui/languages 01a1dc89-59bf-7b13-9612-792eb21b4d60 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5c80-7ebf-9f8b-aecf8d6dada1 GET 200 3307 /auth/ui/app 01a1dc89-5635-7bf0-ae71-68d3d16eb0aa # https://infoportal.baloise.de:8888 in_scope host_id=6b01a716f77f6da020544361bff52579 last_seen=2026-11-15 00:09:14 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:28:10) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:28:14 Airlock IAM 2026-11-14 23:28:15 Apache HTTP Server 2026-11-14 23:28:12 Jersey 3.1.10 2026-11-15 00:05:43 Liferay Portal 2026-11-15 00:03:11 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54bb-72ca-8650-18527cc83a02 GET 303 165 /api/jsonws 01a1dc83-5e00-7ead-87a5-33ad4f5c1751 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-0f8d-7894-a47b-28df832a46e8 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b1f5-791b-b83f-26dc52a6f844 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-6262-76ea-be4b-dfad5b612ce5 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-6515-72a7-9f2e-918e27a32295 GET 501 0 /auth/rest/public/jwks 01a1dc87-d1f0-76ac-ba75-3f8f54fc001e GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-5ef9-7efd-bbd9-990158f38616 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-56ec-7db5-a57b-112012197a03 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5b8c-725c-82ea-d8b08470ac6e GET 200 3307 /auth/ui/app 01a1dc89-55a6-7706-89dc-e051d91eb766 # https://infoportal.baloise.de:8999 in_scope host_id=c734da12a660a438d0e399987ea8bf1c last_seen=2026-11-15 00:09:14 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:28:17) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:28:20 Airlock IAM 2026-11-14 23:28:21 Apache HTTP Server 2026-11-14 23:28:19 Jersey 3.1.10 2026-11-15 00:05:45 Liferay Portal 2026-11-15 00:03:12 ## paths method status size path exchange_id GET 504 936 / 01a1daff-dfa1-7bb8-8c87-bdf410d1ef25 GET 303 165 /api/jsonws 01a1dc83-5dfb-7f13-b79e-56ee799ed3ce GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-0f51-733c-9d45-7c82ce7da0b4 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b258-7178-9f1c-8e986e6a7971 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-632b-71f2-8c43-06f998c68189 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-66fe-73b5-9878-f08faf28987b GET 501 0 /auth/rest/public/jwks 01a1dc87-d11f-70e7-9e31-6e471143371e GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-5f95-77ab-894a-cc16119e968e GET 200 209 /auth/rest/public/ui/languages 01a1dc89-570d-74a5-af76-8d26e3fec7f2 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5bb9-71f8-8d4e-092ac6986b3d GET 200 3307 /auth/ui/app 01a1dc89-5574-7c3a-9d5c-a1db1ddbf063 # https://infoportal.baloise.de:9000 in_scope host_id=f26a44ec563345cda8061034967c6cf8 last_seen=2026-11-15 00:09:14 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:28:22) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:28:24 Airlock IAM 2026-11-14 23:28:26 Apache HTTP Server 2026-11-14 23:28:23 Jersey 3.1.10 2026-11-15 00:05:47 Liferay Portal 2026-11-15 00:03:14 ## paths method status size path exchange_id GET 504 936 / 01a1daff-df9b-7804-ae9e-a4db10a1eca9 GET 303 165 /api/jsonws 01a1dc83-5da7-7b4a-bcb7-db06e6b5e5c8 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-0ff9-7e31-9a0f-fd7bd8af6e34 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b146-7870-8775-acba1222d1a5 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-653f-771b-8ef2-fb197ffea063 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-67e5-7ba8-9bf5-3b4e49b4911e GET 501 0 /auth/rest/public/jwks 01a1dc87-d265-789d-a4d8-2d0a72a2b5f5 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-61c5-78f5-a6de-df4cf27b7d21 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5aa1-774d-88a6-5d0af474cd24 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5dfc-7ebc-bb9e-34d29d530eb0 GET 200 3307 /auth/ui/app 01a1dc89-5605-7a3e-ade3-6b178c4bfe87 # https://infoportal.baloise.de:9080 in_scope host_id=439fba3b9b468cab30a938eaa35e443f last_seen=2026-11-15 00:09:14 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:28:27) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:28:31 Airlock IAM 2026-11-14 23:28:33 Apache HTTP Server 2026-11-14 23:28:29 Jersey 3.1.10 2026-11-15 00:05:48 Liferay Portal 2026-11-15 00:03:15 ## paths method status size path exchange_id GET 504 936 / 01a1daff-dfa3-7a34-b60d-ed87ca8eb3f6 GET 303 165 /api/jsonws 01a1dc83-5d5a-7f17-ab17-045606962a90 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-0f77-7889-8767-14f8acc8e348 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b1b0-7831-a812-a736afa70cc8 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-6556-75d8-94f2-84c03a069e22 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-6854-70cd-acfa-58fe6192d3e2 GET 501 0 /auth/rest/public/jwks 01a1dc87-d1f9-7f2c-9c24-134a991e449a GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-619b-7796-8e0a-550a5b17af82 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5a93-734d-b5d2-26bcf6929956 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5e02-7b0a-8396-1605f26a1d2e GET 200 3307 /auth/ui/app 01a1dc89-5677-7267-96de-d3a0ffac5e38 # https://infoportal.baloise.de:9443 in_scope whitelisting_bypass=cloudfront host_id=8b4208f46a1416c0a5e13f1b4ac71f18 last_seen=2026-11-14 20:25:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:28:34) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:28:36 Airlock IAM 2026-11-14 23:28:37 Apache HTTP Server 2026-11-14 23:28:35 Jersey 3.1.10 2026-11-13 17:49:08 Liferay Portal 2026-11-13 17:49:07 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54be-79b6-b52a-417b1a31357f POST 504 936 /%2E%2E;/api/spring/portal 01a1dadb-780a-771e-8937-c0a130f85341 POST 504 936 /CSRFT759.js/../api/spring/portal 01a1dadb-77ae-72a7-82fc-2447fd055561 POST 504 936 /CSRFT759.js/..;/api/spring/portal 01a1dadb-7804-79b7-8c42-c6f04116078c GET 303 165 /api/jsonws 01a1bf90-ce26-7511-8ba1-21985ff6df92 POST 504 936 /api/liferay/do 01a1dadb-7789-7f80-b6c1-d5594c93b336 POST 504 936 /api/spring/portal 01a1dadb-7755-76e1-84f2-f082886501f3 POST 303 211 /api/spring/this-path-must-not-exist-14269251 01a1cb1e-ed2c-703e-b7b5-a22ad6098f61 GET 303 178 /auth-admin/editConfig 01a1c315-018e-7110-badd-229f2d7379b3 GET 303 180 /auth-admin/rest/users 01a1c225-326c-77f6-a44e-be663890b459 GET 303 176 /auth-admin/ui/app 01a1c225-3047-704e-987c-9e05537148fc GET 302 0 /auth/check-login 01a1bf94-23f5-72ac-82a0-5edd5f4de51e GET 504 936 /auth/login-oneshot 01a1db9d-b3db-7c81-976a-f144c008d4c6 GET 500 0 /auth/rest/public/application.wadl 01a1ce05-1dd1-745f-a23b-b4555fa0c019 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29b-ff6d-7186-aaa7-825df952db92 GET 200 3307 /auth/ui/app 01a1bf93-9463-763b-b652-747741f0c521 POST 504 936 /c/portal/portlet_url 01a1dadb-778f-7ada-9934-34550944d1c4 GET 504 936 /ext-h2/ 01a1dbbd-3880-7f8c-a3a2-1bb6622072ac GET 303 171 /group/infoportal 01a1bf94-20a6-77a1-a7d7-61aab17c6294 GET 0 /airlock/rest/v3/api-docs 01a1c32c-4028-76bc-906d-f1a2fafcea0d # https://infoportal.baloise.de:9990 in_scope host_id=cf689e44091ce147b1d4e77a93e207a9 last_seen=2026-11-15 00:09:15 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:28:39) CloudFront-origin-facing alternate TLS listener for the canonical infoportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://infoportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:28:41 Airlock IAM 2026-11-14 23:28:43 Apache HTTP Server 2026-11-14 23:28:40 Jersey 3.1.10 2026-11-15 00:05:50 Liferay Portal 2026-11-15 00:03:17 ## paths method status size path exchange_id GET 504 936 / 01a1daff-df9f-7870-923c-8ff1122495b9 GET 303 165 /api/jsonws 01a1dc83-5e0a-7a22-be2d-703e59cf8a9c GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1022-796c-a3cc-a5ec24c598f5 GET 400 10158 /auth/rest/public/application.wadl 01a1dc85-aa22-720b-a5f4-b1398eb2d690 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-664a-7bfb-ba69-0f59cbdbf981 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-68fc-7e8c-9025-144c5e233b4a GET 501 0 /auth/rest/public/jwks 01a1dc87-d26e-799c-882c-47d006bfaf1b GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-6205-77ee-900e-d4290a06585c GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5a5e-7110-b191-4f55f11a5158 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5e76-7fa0-8a15-6691346038a8 GET 200 3307 /auth/ui/app 01a1dc89-561f-7d7f-8c2e-8a7ee612c1e4 # https://infoportal.baloise.de:12345 in_scope whitelisting_bypass=cloudfront host_id=d0bee17e636977099ab4b5be84935559 last_seen=2026-11-14 19:51:18 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:02:03) CloudFront-origin-only alternate TLS listener for the Infoportal Apache/Airlock Gateway and Airlock IAM boundary, backed by the same Liferay Portal application and Jersey 3.1.10 REST layer as the canonical origin. Root retains the `/group/ao` portal entry, `/api/jsonws` and other Liferay families enter the canonical application-access handoff, and `/auth/ui/app` plus `/CSRFT759.js` expose the shared IAM frontend. Public WADL requests reach Jersey but return the canonical empty HTTP 500 response. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route and frontend graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-13 18:01:29 Airlock IAM 2026-11-10 06:25:32 Apache HTTP Server 2026-11-10 06:25:33 Jersey 3.1.10 2026-11-13 18:01:31 Liferay Portal 2026-11-10 06:25:34 ## paths method status size path exchange_id GET 303 285 / 01a1c41e-f80e-722b-93a1-5208a8381d0e POST 504 936 /%2E%2E;/api/spring/portal 01a1dadb-b404-7d47-a41c-50ab2f353519 GET 200 9085 /CSRFT759.js 01a1c421-57a9-74f6-a9eb-2cd9e1cbe4ee POST 504 936 /CSRFT759.js/../api/spring/portal 01a1dadb-b3e6-7a70-891b-2ac91d34fd83 POST 504 936 /CSRFT759.js/..;/api/spring/portal 01a1dadb-b3f8-71bd-bcb2-bbebcfb59f8f GET 303 165 /api/jsonws 01a1c421-cb99-72c7-99eb-1e7f146dafc4 POST 504 936 /api/liferay/do 01a1dadb-b368-71ad-8ad2-e43222884e45 POST 504 936 /api/spring/portal 01a1dadb-b328-782a-849e-45ee4553f324 POST 303 211 /api/spring/this-path-must-not-exist-14269251 01a1cb1e-ee7c-71ba-ac12-2c6082f0df8f GET 303 123 /auth/login-oneshot 01a1db9d-3f34-70d7-b079-b163c8755629 GET 500 0 /auth/rest/public/application.wadl 01a1ce05-46c7-730e-8edc-33febd1bc5bc GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-00fb-75ea-8c4e-fb8a13a687f9 POST 504 936 /c/portal/portlet_url 01a1dadb-b37b-7c96-932c-0a96090047c5 ===== ORIGINS infoportal.baloise.de ===== address status size alike sources note by name 303 285 https://infoportal.baloise.de/group/ao ===== HOST maklerportal.baloise.de ===== # http://maklerportal.baloise.de in_scope host_id=5ccbdfbe4847f9aa0cf4b56940bcc383 last_seen=2026-11-11 13:36:27 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:14:08) Plain-HTTP Apache redirect edge for Maklerportal. Root, `/group/mo/`, IAM, CSRF-helper and Liferay paths preserve their path while redirecting to HTTPS. The portal and Airlock IAM application are represented on the canonical HTTPS origin. ## tech technology version checked_at Apache HTTP Server 2026-11-11 13:13:24 ## paths method status size path exchange_id GET 301 280 / 01a1cad2-fb16-76c6-b99e-b3f520453e7b GET 301 291 /CSRFT759.js 01a1cabd-13e8-7444-b204-63ea4bfb1a68 POST 301 290 /api/jsonws 01a1cad2-ff29-7575-a907-ecfacd38ab97 GET 301 291 /auth/ui/app 01a1cabd-10dd-776e-bbaa-aa63cdb97420 GET 301 289 /group/mo/ 01a1cabd-0f4d-75cd-99ef-c0f19fc67c39 # http://maklerportal.baloise.de:8080 in_scope host_id=f6238b0221bb736b59c602c82ba03bc7 last_seen=2026-11-14 05:04:12 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:14:10) Unavailable alternate plain-HTTP listener. Captured requests return only provider-generated gateway failures, including `/api/jsonws`, with no target response, application route graph or identifiable server-side product. ## paths method status size path exchange_id GET 504 936 /api/jsonws 01a1cb9a-4801-727f-84da-431b66afc3bf GET / 01a1d871-3f8f-77a5-9007-51e97ac84e95 # https://maklerportal.baloise.de:80 in_scope host_id=47be961f94c41aa857f3a55c12a747fa last_seen=2026-11-15 00:42:38 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 303 226 /auth-servicecontainer/startTask/ 01a1dca7-f884-717e-bf4b-3fe58f09609a GET 303 225 /ext-servicecontainer/startTask/ 01a1dca7-f91b-76d2-b58f-1d2c47e20820 # https://maklerportal.baloise.de in_scope host_id=c4ba12928e315edce8b0b4dfe73d8c63 last_seen=2026-11-15 01:14:06 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 13:38:36) Liferay broker portal behind Apache HTTP Server, Airlock Gateway and Airlock IAM. Root redirects to `/group/mo/`; the direct IAM selector `/auth` redirects to `/auth/`, which creates Airlock session and CSRF state before redirecting relatively to `ui/app`; `/auth/ui` similarly canonicalizes through `/auth/ui/` to `./app`. `/auth/login` creates the same state and redirects directly to `/auth/ui/app/auth/application/access`. It preserves `Location` and `lang` query state in that redirect; the corresponding access URLs with empty query values serve the same 3,307-byte Angular shell. The portal entry and Liferay families such as JSONWS, Axis, tunnel, OSGi, Gogo, Spring remoting and portal actions enter `/auth/ui/app/auth/application/access?Location=...` before reaching Liferay. Selector `portal_mo` starts a `PASSWORD_REQUIRED` flow using `default-username-password`, advertises an optional `portal-redirect` step and links to public password reset. Airlock state uses `AL_SESS-S`, `CSRFT759-S`, mirrored `X-CSRFT759` and `X-Same-Domain: 1`. The IAM inventory contains 380 normalized REST templates and 390 method/path bindings. It covers authentication, registration, 2FA/Cronto/OTP/FIDO/OATH/password/SSI families; protected account-link, token/device, OAuth consent/session, remember-me and representation operations; and public migration, password-only, secret-question and language handlers. Installed method-bound handlers include technical-client registration, registration-data submission and authentication-data editing. Previously served application WADLs identify Jersey 3.1.10 and document public, OAuth2, authentication, self-service, registration and technical-client families. Current GET requests to `/auth/rest/public/application.wadl` and `/auth/rest/oauth2/application.wadl` return empty HTTP 500 responses. The current shell links `/auth/ui/styles.aa4c4328f9bb7e9b.css` and `/auth/ui/assets/custom/js/iam-custom.af5b4c4473394040.js`. Its runtime defines 180 lazy chunks and 214 Angular route entries; the shared router composes to 199 concrete paths below `/auth/ui/app`, represented once on the canonical Mein Portal frontend. The host-specific export has 33 text entries: 16 shared IAM files, `/CSRFT759.js` and the maintenance page are legitimate; the remaining 15 encoded i18n-dispatcher paths are 2–312-byte dispatcher responses rather than frontend assets. The older `iam-custom.aae012b742199fe8.js` remains served and is byte-identical to the current customization module. No usable source maps are published. Real gateway content exists below `/error_path/`: `/error_path/404.html` is a multilingual branded 404 page; `/error_path/maintenance.html` is a German maintenance notice with support contact details and loads `/error_path/maintenance_image001.png`; `/error_path/img/favicon.ico` is the shared favicon. Alternate TLS listeners expose the same portal/IAM boundary through CloudFront origin-facing addresses. Airlock prevents disclosure of a Liferay or Airlock release string. The formerly public authentication, self-service, tech-client-registration and user-self-registration WADL routes now return empty HTTP 500 responses. Jersey 3.1.10 remains identified from the retained prior WADLs. ## tech technology version checked_at Airlock Gateway 2026-11-13 11:42:18 Airlock IAM 2026-11-13 11:42:16 Apache HTTP Server 2026-11-13 11:42:19 Jersey 3.1.10 2026-11-10 07:59:08 Liferay Portal 2026-11-13 00:13:51 ## paths (50 of 341; toadcli paths) method status size path exchange_id GET 303 288 / 01a1dc95-9927-742f-9cf3-6f12744b97c4 POST 303 184 /%2E/api/spring/portal 01a1ca8b-32b2-71a6-9864-601631eef8e7 GET 303 214 /%2F%2Fapx2--3ch.9b.au/security-test-dwbzn 01a1cb2c-1e80-720b-8fec-37132cd6e694 GET 303 204 /%61pi/%61xis/Portal_ImageService 01a1ae52-a1eb-71b4-93ce-30870bfa7798 GET 303 200 /%61pi/axis/Portal_ImageService 01a1ae52-9c75-7214-bb1b-11cc8a4ea684 POST 303 180 /%61pi/spring/portal 01a1cadc-6260-73ce-832e-cbf70b230f97 GET 303 883 /%61uth-admin/ui/app 01a1cb73-5a2f-73d5-a0e0-89e265095ad0 GET 303 202 /./api/axis/Portal_ImageService 01a1ae89-612d-7560-a240-ac4eb1f21bcb GET 303 230 /.well-known/acme-challenge/%2E%2E/%2E%2E/api/jsonws 01a1cbbb-8452-76ec-b3a1-7ef427fd711d GET 303 222 /.well-known/acme-challenge/../../api/jsonws 01a1cbbb-839d-7102-8bf8-3134c067df23 GET 303 228 /.well-known/acme-challenge/..;/..;/api/jsonws 01a1cbbb-84e6-77eb-839d-8e29bd4bf8c4 GET 303 227 /.well-known/acme-challenge/security-test-bugbounty-dwbzn 01a1cbbb-8317-7611-8082-5e644ef3d3a8 GET 303 199 //api/axis/Portal_ImageService 01a1ae52-a7ad-707e-ab63-9948df2bd42e POST 303 179 //api/spring/portal 01a1cadc-8cc9-77cb-859c-3003940c7f5c GET 303 207 //apx1--3ch.9b.au/security-test-dwbzn 01a1cb2b-c3bf-76de-803f-8543c9e27b0f GET 303 237 //auth-servicecontainer/startTask/ 01a1da03-4d44-781f-a2a1-fb5510ee55ac GET 200 9085 /CSRFT759.js 60c96f3c499a099725329dea8d3927a9 GET 303 211 /CSRFT759.js%23/../c/portal/portlet_url 01a1cb96-ce5c-725a-ac6e-f537cd871255 GET 303 236 /CSRFT759.js%252F..%252Fapi%252Faxis%252FPortal_UserService 01a1cc1c-226f-7312-981c-e2d652a1e805 GET 303 214 /CSRFT759.js%2F..%2Fc%2Fportal%2Fportlet_url 01a1cb96-cd1c-74e2-b013-fbdb88d434ec GET 303 211 /CSRFT759.js%3F/../c/portal/portlet_url 01a1cb96-cdb0-74e9-9481-92fb3d7baf99 GET 303 228 /CSRFT759.js/%252e%252e/api/axis/Portal_UserService 01a1cc1c-237c-723f-a4aa-84e6e0b7711f POST 303 205 /CSRFT759.js/%2E%2E/api/spring/portal 01a1cadc-8f17-7265-9733-dfd7a550283f POST 303 201 /CSRFT759.js/../api/spring/portal 01a1cadc-8dfc-7424-ad2c-f5a5311e4230 POST 303 204 /CSRFT759.js/..;/api/spring/portal 01a1cadc-8e86-7197-9574-c3b2cf59984b GET 303 197 /WEB-INF/classes/logging.properties 01a1cc5c-dd93-75a4-a882-7025c26e3593 GET 303 175 /admin/rest/users 01a103c9-ae44-75b1-ba6a-531994c5b9e7 GET 303 724 /admin/ui/app 01a1cb52-ca03-7034-9beb-3f90c6dd996f POST 303 188 /airlock/rest/session/create 01a1dc65-44a7-7398-9bf5-58c99f0cab4e GET 303 187 /airlock/rest/v3/api-docs 01a1cb2d-c3da-7436-a216-a74017d7602b GET 303 211 /api%25%32Faxis%25%32FPortal_UserService 01a1cc1b-c037-772c-876f-2a951ba10406 GET 303 203 /api%252Faxis%252FPortal_UserService 01a1cc1b-bd88-71b5-82a8-ad97f22c91b5 GET 303 199 /api%252Faxis/Portal_UserService 01a1cc1b-be44-74e6-875a-86a7d7f33953 GET 303 203 /api%255Caxis%255CPortal_UserService 01a1cc1b-bf79-7553-9c58-f73f2c6d0b22 GET 303 200 /api/%61xis/Portal_ImageService 01a1ae52-9e8b-725b-b32f-fd7764a2e621 POST 303 180 /api/%73pring/portal 01a1cadc-62ef-7600-ae72-7cfd1743e277 POST 303 182 /api/./spring/portal 01a1cadc-8d6d-753f-a5cf-06371520766f GET 303 199 /api/axis%252FPortal_UserService 01a1cc1b-bee5-749f-b5cc-e9b12ddd25b8 GET 303 196 /api/axis/Portal_ImageService 01a1ae4b-d0ff-7005-a40d-5444a0280176 GET 303 201 /api/axis/Portal_UserService 01a1d9c7-e751-74c8-8f73-9435657de2c7 GET 303 209 /api/axis/d023bab6e42b59a61980baca-control 01a1ae4b-cc3a-773b-bfeb-99af1c53c167 GET 303 199 /api/axis;/Portal_ImageService 01a1ae52-a543-7217-8aec-a2d2ddf67798 GET 303 167 /api/jsonws 01a1dc39-b928-7e2e-82d6-248c37756079 GET 303 176 /api/jsonws/invoke 01a0faf0-498d-77e8-801f-f5b061a57d8d GET 303 176 /api/jsonws;.css 01a1cab0-219d-7130-a796-6bc61a7e00e4 OPTIONS 303 173 /api/liferay/do 01a1cb08-395c-7505-b25d-397708fe0cb8 POST 303 185 /api/secure/spring/portal 01a1c103-e1bc-7609-ae5d-32373feb85ff POST 303 184 /api/spring/%2E/portal 01a1ca8b-247d-76ca-8a36-ba9a58337e52 POST 303 197 /api/spring/..;/spring/portal 01a1ca8b-293d-76c9-a895-160ecb146846 POST 303 182 /api/spring/./portal 01a1ca8b-1f16-7590-a099-50ccabee536d # https://maklerportal.baloise.de:4401 in_scope whitelisting_bypass=cloudfront host_id=c006774c784edaffb8096b9bb467cc17 last_seen=2026-11-15 01:14:09 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:28:44) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:28:48 Airlock IAM 2026-11-14 23:28:50 Apache HTTP Server 2026-11-14 23:28:46 Jersey 3.1.10 2026-11-13 17:54:34 Liferay Portal 2026-11-11 13:13:20 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54d5-70f8-aa5f-bc280858e4c0 GET 200 9085 /CSRFT759.js 01a1cabc-40ac-743d-8bc1-35ffedd08b90 GET 303 174 /api/jsonws 01a1cba3-002d-74dc-acf8-3157187c4e7a GET 303 180 /auth-admin/editConfig 01a1cb1f-6b4f-70a5-b4d6-2b73c4f48a60 GET 303 178 /auth-admin/ui/app 01a1cb1f-6ba7-708e-b334-08c76b899e68 GET 303 226 /auth-servicecontainer/startTask/ 01a1dca7-fb36-723b-9d36-218255a2a934 GET 504 936 /auth/ 01a1dcc5-4862-7080-bdf4-6ae01add0286 GET 504 936 /auth/login-oneshot 01a1db9d-b3f5-762f-9350-91d475789c27 GET 500 0 /auth/rest/oauth2/application.wadl 01a1cabc-e032-7050-96a6-b4a37a093682 POST 400 10158 /auth/rest/public/%252e%252e/%252e%252e/%252e%252e/api/spring/portal 01a1cb1e-2b5b-7319-b39f-78b37beced53 POST 303 176 /auth/rest/public/../../../api/spring/portal 01a1cb1e-2ac6-7180-a955-49f92352b3a9 GET 500 0 /auth/rest/public/application.wadl 01a1ce06-bf9a-738b-b60a-01fc597968a8 GET 303 123 /auth/saml2/sp/sso/metaAlias/Easylogin 01a1dc8a-1d0d-7cff-8e7e-479daf235a46 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-859e-7210-9f33-0ef2b23430e3 GET 504 936 /auth/ui/app 01a1dc94-a0ee-7e2a-b5b5-7c9e498584a0 GET 303 123 /auth/ui/assets/custom/manifest/%252e%252e/%252e%252e/%252e%252e/%252e%252e/WEB-INF/web.xml 01a1cc06-e747-744b-907e-c65b91d53b87 GET 303 886 /ext-admin/admin/ui/app 01a1cb6f-5c27-76d7-ba09-f1b9d9f76291 GET 303 179 /ext-admin/editConfig 01a1cb1f-6a9c-7344-bea9-9593844765f6 GET 303 181 /ext-admin/rest/users 01a1cb1a-bf8d-7222-a0e6-b31efb3a0c58 GET 303 212 /ext-admin/this-path-must-not-exist-14269251 01a1cb1a-c03e-7365-80f7-1735c7e9c327 GET 303 177 /ext-admin/ui/app 01a1cb1f-6af9-730e-8ff7-f0695dabc2d2 GET 303 177 /ext-login/actuator 01a1cb1a-bdf8-761c-98b5-76aaa121f9d8 GET 303 206 /ext-login/rest/protected/application.wadl 01a1cb1a-bd2b-73ed-96a9-c92cdb0b2c1b GET 303 203 /ext-login/rest/public/application.wadl 01a1cb1a-bc60-71aa-9722-81bc115afd23 OPTIONS 303 212 /ext-login/rest/public/baloise/saml2/transform 01a1cb1b-03f7-76d4-9c72-523adb1e9529 GET 504 936 /ext-login/saml2/jsp/exportmetadata.jsp 01a1dc8a-92be-763e-bfa6-d73b555a75b9 GET 504 936 /ext-login/saml2/sp/sso/metaAlias/Easylogin 01a1dc8a-1c59-70b9-99a9-7ecc1f8f8236 GET 303 212 /ext-login/this-path-must-not-exist-14269251 01a1cb1a-bec2-754b-a6f0-65a14f69d3de GET 303 177 /ext-login/ui/app 01a1cb1a-bb95-71a9-82f1-42dba4db8d9c GET 303 180 /ext-servicecontainer/ 01a1cb25-b9d5-7613-ab93-0c9f34f50768 GET 303 194 /ext-servicecontainer/actuator/env 01a1cb25-be04-706e-afde-d35f23b22fb7 GET 303 197 /ext-servicecontainer/actuator/health 01a1cb25-bbcb-7044-838d-52df020c0da2 GET 303 196 /ext-servicecontainer/serviceContainer 01a1cb25-ba7c-71de-9ee2-e01f77b1d27d GET 303 225 /ext-servicecontainer/startTask/ 01a1dca7-fb4f-7bf7-b559-4fe6df56d590 GET 303 223 /ext-servicecontainer/this-path-must-not-exist-14269251 01a1cb25-bfdb-7575-b838-902fd7ae2791 GET 303 168 /group/mo/ 01a1caba-806b-72c1-bdaa-d5aaad95c08f GET 303 178 /osgi/system/console 01a1caba-8016-7126-ba57-4f46d9f96c43 GET 303 198 /this-path-must-not-exist-14269251 01a1cb1a-c0ef-76b5-a165-2da5c1533ef9 TRACE 0 /auth/rest/public/maintenance-messages 01a1cc4a-6779-7003-80ac-6c9978f87934 # https://maklerportal.baloise.de:7443 in_scope whitelisting_bypass=cloudfront host_id=02a68cdf31ec032e2df97e04c0373083 last_seen=2026-11-15 01:14:24 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:28:51) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:28:55 Airlock IAM 2026-11-14 23:28:56 Apache HTTP Server 2026-11-14 23:28:53 Jersey 3.1.10 2026-11-13 17:54:40 Liferay Portal 2026-11-10 05:08:12 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54d0-74c4-a551-ee2ade31d6ce GET 200 9085 /CSRFT759.js 01a1c3d8-fd74-7162-94cb-c691dd36874c GET 303 167 /api/jsonws 01a1c3d8-fdab-75a6-953e-896e3d8eba72 GET 303 226 /auth-servicecontainer/startTask/ 01a1dca7-fbef-78b5-9b2c-3ec3e79b8f43 GET 504 936 /auth/ 01a1dcc5-8324-7e77-a08c-aab3633c20f0 GET 303 123 /auth/login-oneshot 01a1db9d-4218-7073-85a2-b94c14be974e GET 500 0 /auth/rest/oauth2/application.wadl 01a1ce12-fc92-76d8-a87b-6ba2d991bc06 GET 500 0 /auth/rest/public/application.wadl 01a1ce06-e86f-77d2-a006-8c1d1246486e GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-868a-74d9-9642-64c4c8df0504 GET 504 936 /auth/ui/app 01a1dc95-71cf-7262-9135-17dc0ecf01c9 GET 303 225 /ext-servicecontainer/startTask/ 01a1dca7-fbcc-7f0c-b7af-12a4a20fe5e7 GET 303 168 /group/mo/ 01a1c3d8-fdf9-70ea-81ea-b6038388089a # https://maklerportal.baloise.de:7980 in_scope whitelisting_bypass=cloudfront host_id=e506ffb747ba5c21ed7aee4e4212df05 last_seen=2026-11-15 01:14:39 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:28:58) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:29:01 Airlock IAM 2026-11-14 23:29:02 Apache HTTP Server 2026-11-14 23:28:59 Jersey 3.1.10 2026-11-13 17:54:44 Liferay Portal 2026-11-10 05:08:12 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54df-7e74-9902-aa2c0c60eef9 GET 200 9085 /CSRFT759.js 01a1c3d8-fd8a-7536-8958-e237aa1a7000 GET 303 167 /api/jsonws 01a1c3d8-fdf4-76dd-a1c0-1852593c171a GET 504 936 /auth-servicecontainer/startTask/ 01a1dca8-7141-75ad-b33f-6c0d06acd7c7 GET 504 936 /auth/ 01a1dcc5-bd90-7b4c-8266-19938ef40438 GET 303 123 /auth/login-oneshot 01a1db9d-41a9-763d-b28b-549d0c4d0d7f GET 400 10158 /auth/rest/public/application.wadl 01a1ce07-092c-70a6-b186-f6b577a49b0a GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-8967-73ca-b5b7-829851df8c09 GET 504 936 /auth/ui/app 01a1dc95-e7ef-7ba6-bb31-cd4de62475cb GET 303 225 /ext-servicecontainer/startTask/ 01a1dca7-fc66-7f42-8753-2fbc675e9dfd GET 303 168 /group/mo/ 01a1c3d8-fe18-7764-874d-7db978ee6a3c # https://maklerportal.baloise.de:8080 in_scope whitelisting_bypass=cloudfront host_id=570cc0a466098bca86d67841b8f614b2 last_seen=2026-11-15 01:14:54 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:29:04) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:29:06 Airlock IAM 2026-11-14 23:29:07 Apache HTTP Server 2026-11-14 23:29:05 Jersey 3.1.10 2026-11-13 17:54:48 Liferay Portal 2026-11-10 04:43:04 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54d4-7d79-beac-1d996985220d GET 200 9085 /CSRFT759.js 01a1c3c2-a32c-7515-a89b-17385f679e87 GET 303 174 /api/jsonws 01a1cba3-00e4-7719-a6d3-bc04ba7c2b4a POST 303 176 /api/spring/portal 01a1c800-351a-7518-a05a-984a637e1fe6 GET 303 226 /auth-servicecontainer/startTask/ 01a1dca7-fd25-7576-9cce-084cce358cf4 GET 504 936 /auth/ 01a1dcc5-f820-71c0-bb93-1bcf36ab7e21 GET 303 123 /auth/login-oneshot 01a1db9d-40f2-7971-8066-31200dc8b977 GET 500 0 /auth/rest/public/application.wadl 01a1ce07-3205-713a-b53d-dc8783fe0a0b GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-8a5f-744c-95b8-0e208d108ecc GET 504 936 /auth/ui/app 01a1dc96-604f-78af-b285-c15474608f86 GET 303 225 /ext-servicecontainer/startTask/ 01a1dca7-fd55-769e-ad36-91f522ecd94f GET 303 168 /group/mo/ 01a1c3c2-a0dd-7171-8d9a-d7804e2218f6 GET 303 178 /osgi/system/console 01a1c3c2-a54b-706a-b0c4-f78c02850f5f # https://maklerportal.baloise.de:8180 in_scope host_id=fb4fe734d769fad94a26742ca008c53a last_seen=2026-11-15 00:42:39 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 303 226 /auth-servicecontainer/startTask/ 01a1dca7-fe38-7a0a-889a-67ba5c14bde3 GET 303 225 /ext-servicecontainer/startTask/ 01a1dca7-fe1e-7e05-a4b0-5ca72f55bf90 # https://maklerportal.baloise.de:8343 in_scope whitelisting_bypass=cloudfront host_id=5076a9775326e4c8d7ca9314e0f6a4ab last_seen=2026-11-15 01:15:09 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:29:08) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:29:11 Airlock IAM 2026-11-14 23:29:12 Apache HTTP Server 2026-11-14 23:29:10 Jersey 3.1.10 2026-11-13 17:54:52 Liferay Portal 2026-11-10 05:08:19 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54d8-7b44-aa6d-9fc70c3fb2ae GET 200 9085 /CSRFT759.js 01a1c3d9-0132-7172-bd71-89b226d99fdf GET 303 167 /api/jsonws 01a1c3d9-0063-7165-85e9-74089b5f30dd GET 303 226 /auth-servicecontainer/startTask/ 01a1dca7-fea5-7396-8f84-049bfe8ded2f GET 504 936 /auth/ 01a1dcc6-32b9-739b-80e5-13682a39b744 GET 303 123 /auth/login-oneshot 01a1db9d-4268-77a7-a881-8887d7b5e78c GET 500 0 /auth/rest/public/application.wadl 01a1ce07-5ab7-713b-8857-ecd5a84c2c5b GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-8b80-7345-a907-f24a2b1b8807 GET 504 936 /auth/ui/app 01a1dc96-d64b-744a-9bd3-e0381e8cb64a GET 303 225 /ext-servicecontainer/startTask/ 01a1dca7-fed7-7539-8d7e-be0fc5ffc9d2 GET 303 168 /group/mo/ 01a1c3d9-004e-713b-bcc9-da9220f4167b # https://maklerportal.baloise.de:8443 in_scope whitelisting_bypass=cloudfront host_id=bf7ead13d942f632052f7f745171702f last_seen=2026-11-15 01:15:24 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:29:13) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:29:15 Airlock IAM 2026-11-14 23:29:17 Apache HTTP Server 2026-11-14 23:29:14 Jersey 3.1.10 2026-11-13 17:54:55 Liferay Portal 2026-11-10 03:42:23 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54d4-7046-ad24-35cf0e9f7392 GET 200 9085 /CSRFT759.js 01a1c37b-b1c9-76b6-9e1d-45b201fd11c2 GET 303 187 /airlock/rest/v3/api-docs 01a1cb2d-c464-7576-8bdf-8e69218e9b7b GET 303 174 /api/jsonws 01a1cba3-018b-70ac-b990-b1be26249bab POST 303 176 /api/spring/portal 01a1c800-363c-768c-9b9e-fe189202d1f0 GET 303 226 /auth-servicecontainer/startTask/ 01a1dca7-ffb5-7158-9960-6de5ee106fe7 GET 504 936 /auth/ 01a1dcc6-6d53-76be-b68a-6cebf52b613b GET 504 936 /auth/login-oneshot 01a1db9d-b3f5-7617-ad12-793fa5a0be40 GET 500 0 /auth/rest/public/application.wadl 01a1ce07-8381-73d0-8cf0-284dc8f22a29 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-8d69-7058-8b5a-050f299826cf GET 504 936 /auth/ui/app 01a1dc97-4c2a-7485-b9ee-82144ad3f438 GET 504 936 /ext-h2/ 01a1dbbd-ad5e-795b-826c-19037ae8ec47 GET 303 225 /ext-servicecontainer/startTask/ 01a1dca8-0063-73eb-90b0-beaa1504fd84 GET 303 168 /group/mo/ 01a1c37b-abcb-71f6-8c19-1a1a1327206c GET 303 178 /osgi/system/console 01a1c37b-b343-774f-b62a-bdf029c4947a # https://maklerportal.baloise.de:8580 in_scope host_id=e9ad74084610bbf857ac5a6fa9b14a29 last_seen=2026-11-15 01:15:39 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 303 226 /auth-servicecontainer/startTask/ 01a1dca8-021c-723c-8505-b93db1acfcf6 GET 504 936 /auth/ 01a1dcc6-a80f-7156-aa56-0d790aa01239 GET 303 225 /ext-servicecontainer/startTask/ 01a1dca8-02d7-7297-aedb-5277a12dc2cc # https://maklerportal.baloise.de:8700 in_scope host_id=3b1259147f6fa95930a3443704876f97 last_seen=2026-11-15 01:15:54 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:29:18) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:29:21 Airlock IAM 2026-11-14 23:29:23 Apache HTTP Server 2026-11-14 23:29:20 Jersey 3.1.10 2026-11-15 00:05:51 Liferay Portal 2026-11-15 00:03:18 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54d7-754a-ab44-59acbf10f3e7 GET 303 167 /api/jsonws 01a1dc83-5d98-7229-9dd3-1a4d220225d0 GET 303 226 /auth-servicecontainer/startTask/ 01a1dca8-0382-7221-80a3-c332da6feb3d GET 504 936 /auth/ 01a1dcc6-e286-7069-a1e3-fba4d2624c5d GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-0f98-7d7e-81b7-adc4eed52110 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b284-7ef9-9adc-a99dd7e8e377 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-64d8-769f-be78-fecd653310ca GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-6788-70a4-8fea-ec1cf105471c GET 501 0 /auth/rest/public/jwks 01a1dc87-d199-727f-a7f6-ad11147b2edb GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-614b-7742-b4e8-301da52ff8c7 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5928-7306-b2d4-2748ace8c373 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5c09-768e-9511-d53075acfb52 GET 200 3307 /auth/ui/app 01a1dc89-55ca-72c0-9806-3dcf5efb2b3b GET 303 225 /ext-servicecontainer/startTask/ 01a1dca8-03f5-7d1a-bc77-70d1cec77c28 # https://maklerportal.baloise.de:8701 in_scope host_id=fed5312b491c54f808a12ccce721fbaa last_seen=2026-11-15 01:16:09 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:29:25) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:29:27 Airlock IAM 2026-11-14 23:29:28 Apache HTTP Server 2026-11-14 23:29:26 Jersey 3.1.10 2026-11-15 00:05:54 Liferay Portal 2026-11-15 00:03:20 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54e6-7571-9bd9-d19f71877ead GET 303 167 /api/jsonws 01a1dc83-5de4-70c9-8c19-db153ac0aee9 GET 303 226 /auth-servicecontainer/startTask/ 01a1dca8-048e-7ddd-9d78-a6b3062826ca GET 504 936 /auth/ 01a1dcc7-1d28-7c45-93a6-c53f6d3be037 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-3db6-7f2f-9bfd-f39e84754a25 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b31a-7fbb-9ea4-d3b0b735bc1f GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-6767-762d-bce8-909893b0eff3 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-6918-76b2-a990-7c9f40f15b4a GET 501 0 /auth/rest/public/jwks 01a1dc87-d13a-79a2-b7c6-239e99a3fbc2 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-620a-7aa9-951f-43f02e074882 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5afa-71e1-9e94-b342ca0d655b GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5e98-7a58-a158-36e2f107e96f GET 200 3307 /auth/ui/app 01a1dc89-5652-7422-9e41-d142eb0f50d3 GET 303 225 /ext-servicecontainer/startTask/ 01a1dca8-04ac-7765-bae9-d4e7587cfd15 # https://maklerportal.baloise.de:8765 in_scope host_id=427e092de19d68a1dce50f617ac4e20f last_seen=2026-11-15 01:16:24 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:29:29) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:29:33 Airlock IAM 2026-11-14 23:29:34 Apache HTTP Server 2026-11-14 23:29:31 Jersey 3.1.10 2026-11-15 00:05:56 Liferay Portal 2026-11-15 00:03:21 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54dc-724e-98ca-2eac61d91d51 GET 303 167 /api/jsonws 01a1dc83-5fe7-7e67-adb4-3930d14b3474 GET 303 226 /auth-servicecontainer/startTask/ 01a1dca8-0642-7d76-a278-4b4c6b9b06bf GET 504 936 /auth/ 01a1dcc7-57d7-7dc2-97b1-c2fbb9d643ea GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1015-7c0a-8be0-23878396ea2b GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b335-707b-aae0-e230ec1c3cbc GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-662d-752c-9cbf-b1efcbfcc700 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-68c0-754e-b1eb-4aafc6350fa1 GET 501 0 /auth/rest/public/jwks 01a1dc87-d319-7498-8481-2a0971c1e3bb GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-62a5-7c2f-9c0c-f2a3aaecc908 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5ae7-75d8-96fc-668f20db5daf GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5ed0-79e6-9c13-8ad6adf751d9 GET 200 3307 /auth/ui/app 01a1dc89-5690-7ea4-9fdf-0f64c9b553bd GET 303 225 /ext-servicecontainer/startTask/ 01a1dca8-062d-781b-a21e-4041faca977b # https://maklerportal.baloise.de:8800 in_scope host_id=421d26225e2ac7ac547eec4db2a992d4 last_seen=2026-11-15 00:42:41 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:29:36) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:29:40 Airlock IAM 2026-11-14 23:29:41 Apache HTTP Server 2026-11-14 23:29:38 Jersey 3.1.10 2026-11-15 00:05:57 Liferay Portal 2026-11-15 00:03:23 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54de-76d7-af89-fb1f3ce7cc41 GET 303 167 /api/jsonws 01a1dc83-5da5-7fb4-bdc2-0b0fd0b19560 GET 303 226 /auth-servicecontainer/startTask/ 01a1dca8-05e9-75bf-94dc-52de40d8e7e2 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1091-7f2d-aded-bbc806d09c72 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b2b0-7a7b-ba62-eb84725ed26f GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-641b-7b55-afd9-73f2415da75e GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-66d9-71d5-b112-8d0222f5d17e GET 501 0 /auth/rest/public/jwks 01a1dc87-d21a-7342-9a34-56ef141e8d69 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-612b-7d53-995a-a94cc1531568 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5a5e-71c8-b63e-57e7a0d38925 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5de9-7593-be6f-aa43f70c789b GET 200 3307 /auth/ui/app 01a1dc89-5682-7e2a-9160-599ed29723ec GET 303 225 /ext-servicecontainer/startTask/ 01a1dca8-0673-775b-ba60-67bb7161b218 # https://maklerportal.baloise.de:8801 in_scope host_id=2b5f6e23f636854c5dabc1e7aa6c9ac8 last_seen=2026-11-15 00:42:41 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:29:43) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:29:45 Airlock IAM 2026-11-14 23:29:46 Apache HTTP Server 2026-11-14 23:29:44 Jersey 3.1.10 2026-11-15 00:05:59 Liferay Portal 2026-11-15 00:03:25 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54de-720c-a2ee-20b0f6a3011c GET 303 167 /api/jsonws 01a1dc83-5dcf-7d77-bf3d-daf7b754c8f8 GET 303 226 /auth-servicecontainer/startTask/ 01a1dca8-0747-758f-bdb2-fb43569550a8 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-0fc0-7764-b382-3f9b49398484 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b24a-7712-a63e-918b1fed7469 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-67cd-7694-aa85-887edce55e30 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-6a32-764e-a8c4-e45fe8f915de GET 501 0 /auth/rest/public/jwks 01a1dc87-d1f8-7e20-835d-77c05a9e96f2 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-629c-7ab6-80f2-24ed4915936f GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5a37-7033-9041-7e9e716fc4c5 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5e63-735e-97f8-a9be9e18a25b GET 200 3307 /auth/ui/app 01a1dc89-565d-7f04-8150-b2a0ca279e72 GET 303 225 /ext-servicecontainer/startTask/ 01a1dca8-0748-7060-a5d7-6a4fb733fbb6 # https://maklerportal.baloise.de:8888 in_scope host_id=e6223a2a47c35583faca8a27e0e68fdb last_seen=2026-11-15 00:42:42 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:29:47) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:29:49 Airlock IAM 2026-11-14 23:29:51 Apache HTTP Server 2026-11-14 23:29:48 Jersey 3.1.10 2026-11-15 00:06:00 Liferay Portal 2026-11-15 00:03:26 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54e0-759f-b515-2d70acd4b420 GET 303 167 /api/jsonws 01a1dc83-5e22-7868-a34c-4619f768294f GET 303 226 /auth-servicecontainer/startTask/ 01a1dca8-085f-79f2-8448-4b8927ff0862 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-0fee-7e90-9c32-fd94b193f45f GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b2a5-744e-a191-6572af194329 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-659d-7085-88f3-903d05144469 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-6829-722c-902a-680cba613669 GET 501 0 /auth/rest/public/jwks 01a1dc87-d315-7b69-9986-fc8872ac3e33 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-6204-791c-a914-32e7d7b10103 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5a5c-7cbd-8119-aa84637ab526 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5dad-7455-a292-cf57045fbe51 GET 200 3307 /auth/ui/app 01a1dc89-569b-7b44-a316-20e6c0c1868d GET 303 225 /ext-servicecontainer/startTask/ 01a1dca8-0854-7c03-a9e9-a8ad6a7220ed # https://maklerportal.baloise.de:8999 in_scope whitelisting_bypass=cloudfront host_id=78a7cfef7be884ec56099c138c42f7c3 last_seen=2026-11-15 00:42:42 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:29:52) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:29:56 Airlock IAM 2026-11-14 23:29:57 Apache HTTP Server 2026-11-14 23:29:54 Jersey 3.1.10 2026-11-13 17:54:59 Liferay Portal 2026-11-11 13:13:23 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54d5-7aa4-b500-73c87071482c GET 200 9085 /CSRFT759.js 01a1cabc-4084-75fc-937a-ad86d14c3edc GET 303 187 /airlock/rest/v3/api-docs 01a1cb2d-c4db-76f2-be1e-467c9da7178e GET 303 174 /api/jsonws 01a1cba3-0224-718c-b676-c0477e4b8477 GET 303 226 /auth-servicecontainer/startTask/ 01a1dca8-0963-75e3-930b-27fd31bc3818 GET 500 0 /auth/rest/oauth2/application.wadl 01a1cabc-ec72-73b8-8651-de636e50953a GET 500 0 /auth/rest/public/application.wadl 01a1ce07-ad57-71e6-8da5-69a5edf24d73 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-9055-76a9-b49c-50299d9326c3 GET 200 3307 /auth/ui/app 01a1caba-829d-72b7-9342-f959e30616d3 GET 303 181 /ext-admin/rest/users 01a1cb1a-c526-7292-9c9d-7fb8c523daff GET 303 212 /ext-admin/this-path-must-not-exist-14269251 01a1cb1a-c5d5-7381-be22-d0f41144df61 GET 303 177 /ext-login/actuator 01a1cb1a-c3b8-7542-83b6-9388db94c976 GET 303 206 /ext-login/rest/protected/application.wadl 01a1cb1a-c300-73e7-9a58-179ad1d0fe70 GET 303 203 /ext-login/rest/public/application.wadl 01a1cb1a-c252-7467-a963-f96e3744f8fc GET 303 212 /ext-login/this-path-must-not-exist-14269251 01a1cb1a-c474-75c4-938e-596a4bb1a457 GET 303 177 /ext-login/ui/app 01a1cb1a-c1a2-73e1-a5fc-f4821a158079 GET 303 180 /ext-servicecontainer/ 01a1cb25-c179-772b-9b8a-47d617947b86 GET 303 194 /ext-servicecontainer/actuator/env 01a1cb25-c433-7662-b745-b0dee09cbd65 GET 303 197 /ext-servicecontainer/actuator/health 01a1cb25-c31a-7190-88fd-655f2fe26d37 GET 303 196 /ext-servicecontainer/serviceContainer 01a1cb25-c25c-74fc-b2d4-8f275d33c30d GET 303 225 /ext-servicecontainer/startTask/ 01a1dca8-096a-7a4f-bf01-7cee604b22f7 GET 303 223 /ext-servicecontainer/this-path-must-not-exist-14269251 01a1cb25-c4e9-7233-a8d6-5f9671d3bade GET 303 168 /group/mo/ 01a1caba-825b-756d-84e5-13ff22600f33 GET 303 178 /osgi/system/console 01a1caba-831f-7657-8773-513cf14c435d GET 303 198 /this-path-must-not-exist-14269251 01a1cb1a-c685-745c-a180-76a15e366c83 # https://maklerportal.baloise.de:9000 in_scope host_id=2df2e9b50861f785ec67af7aab562cca last_seen=2026-11-15 00:42:42 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:29:59) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:30:05 Airlock IAM 2026-11-14 23:30:06 Apache HTTP Server 2026-11-14 23:30:01 Jersey 3.1.10 2026-11-15 00:06:02 Liferay Portal 2026-11-15 00:03:27 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54d8-7881-a8bb-da7001b70822 GET 303 167 /api/jsonws 01a1dc83-5dea-7296-a9c7-cb752b1baa17 GET 303 226 /auth-servicecontainer/startTask/ 01a1dca8-0a8e-7df5-9d11-8a82dddeda6a GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-100f-78b5-91ab-2a3cf6119371 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bb2f-791e-98eb-35ebfb9ac4bf GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-64b1-765f-be65-75b15717a358 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-6773-7e09-8bbd-b1085db8a373 GET 501 0 /auth/rest/public/jwks 01a1dc87-d2f5-7627-8780-2e82e2499e6a GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-60ea-7fae-8cde-fba7e0340e0c GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5a6d-7427-8990-38b12b22c41b GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5e12-7837-939a-ddc582471fc2 GET 200 3307 /auth/ui/app 01a1dc89-5622-7f83-9a77-f31b6a01a9d7 GET 303 225 /ext-servicecontainer/startTask/ 01a1dca8-0aa3-7417-b0f7-791b9d95ede6 # https://maklerportal.baloise.de:9080 in_scope host_id=bdbc576b9d9c5675970cc3c5aa09f938 last_seen=2026-11-15 00:42:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:30:08) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:30:12 Airlock IAM 2026-11-14 23:30:14 Apache HTTP Server 2026-11-14 23:30:11 Jersey 3.1.10 2026-11-15 00:06:04 Liferay Portal 2026-11-15 00:03:29 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54e5-7577-84ed-89028e10c6a1 GET 303 167 /api/jsonws 01a1dc83-5e2b-7fc7-ad22-83f21d45e4d9 GET 303 226 /auth-servicecontainer/startTask/ 01a1dca8-0b7b-7c93-befe-ddd7063417b2 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-107a-7240-92a4-b6f3a9c6a580 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b2eb-754c-b4ff-e0deb86631b4 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-652c-7e79-afc7-ed1b42be93d8 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-67e1-7c65-921e-97913bc4b41a GET 501 0 /auth/rest/public/jwks 01a1dc87-d2b5-744a-989f-c6b941733607 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-614b-7225-87fb-28b3822f08de GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5a28-7bd8-908d-8f5e5f5afffb GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5dac-74c8-8f1d-c8fa20b214bb GET 200 3307 /auth/ui/app 01a1dc89-5632-7b59-85ab-12a5a28b0f5b GET 303 225 /ext-servicecontainer/startTask/ 01a1dca8-0c3f-7688-a925-20ff3aad3ecd # https://maklerportal.baloise.de:9443 in_scope whitelisting_bypass=cloudfront host_id=7442cd0725286bf445a0cb2e03839040 last_seen=2026-11-15 00:42:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:30:15) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:30:18 Airlock IAM 2026-11-14 23:30:20 Apache HTTP Server 2026-11-14 23:30:17 Jersey 3.1.10 2026-11-13 17:55:02 Liferay Portal 2026-11-10 04:43:06 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54e0-7f07-b316-dbb98825f3ad GET 200 9085 /CSRFT759.js 01a1c3c2-c5eb-768c-af96-f242e01cfac1 GET 303 174 /api/jsonws 01a1cba3-02aa-7043-8074-6b1281f57f38 POST 303 176 /api/spring/portal 01a1c800-3741-774c-94ed-d63a2d236230 GET 303 226 /auth-servicecontainer/startTask/ 01a1dca8-0cdb-76dc-aeac-57a36ab161d7 GET 303 123 /auth/login-oneshot 01a1db9d-4243-7e93-aa09-3b853ebdc391 GET 500 0 /auth/rest/public/application.wadl 01a1ce07-d668-76a2-9549-1e1b410bb083 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-9184-70fc-bc27-80bcc94cd317 GET 504 936 /auth/ui/app 01a1dc97-c205-70a8-ae1e-ff13a2d10767 GET 504 936 /ext-h2/ 01a1dbbd-ada2-74ce-8903-c18592aa0128 GET 303 225 /ext-servicecontainer/startTask/ 01a1dca8-0cd8-78f6-ba18-c1518bded02b GET 303 168 /group/mo/ 01a1c3c2-c43e-769e-9381-2d13a93e497f GET 303 178 /osgi/system/console 01a1c3c2-c7dc-7007-bb50-7f331dfe65d0 # https://maklerportal.baloise.de:9990 in_scope host_id=bb5abe9c771c2f3be19439e91ae7599a last_seen=2026-11-15 00:42:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:30:21) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:30:23 Airlock IAM 2026-11-14 23:30:25 Apache HTTP Server 2026-11-14 23:30:22 Jersey 3.1.10 2026-11-15 00:06:05 Liferay Portal 2026-11-15 00:03:31 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54dd-777d-9c2e-737658bacd10 GET 303 167 /api/jsonws 01a1dc83-5d46-7cd1-a2cd-07bf00ef4521 GET 303 226 /auth-servicecontainer/startTask/ 01a1dca8-0de4-7ac4-b588-9ecb1f9046d9 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-100a-7b90-99d6-1c9e47592709 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b32a-789c-9125-51a60efe3dfa GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-6637-7f0c-ab74-65cb3d3aa0ba GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-68d5-71c0-8fbb-c8554af03605 GET 501 0 /auth/rest/public/jwks 01a1dc87-d344-7f6d-aef6-6407bf91c7c5 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-6203-7ec6-89a5-782e5d200b30 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5a91-7981-9b34-8db688709ca5 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5e7d-77f8-989f-72b8509ffab6 GET 200 3307 /auth/ui/app 01a1dc89-5689-7c2f-957c-a989d4da4a19 GET 303 225 /ext-servicecontainer/startTask/ 01a1dca8-0e1b-7d9e-b6a8-577c61d51c53 # https://maklerportal.baloise.de:12345 in_scope host_id=efd806fdca265b9468fc13b9eab00773 last_seen=2026-11-15 00:42:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:14:12) CloudFront-origin-facing alternate TLS listener for the canonical maklerportal.baloise.de Apache/Airlock IAM portal. Authentication-shaped requests enter the same Airlock session and one-shot login/error handoff as the canonical Liferay application. The complete IAM, Liferay, frontend and API route inventory is mapped on https://maklerportal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:17:22 Airlock IAM 2026-11-14 23:17:25 Apache HTTP Server 2026-11-14 23:17:17 Jersey 3.1.10 2026-11-15 00:06:06 Liferay Portal 2026-11-15 00:03:32 ## paths method status size path exchange_id GET 303 167 /api/jsonws 01a1dc83-5dad-7a95-bcd0-ac776e14b02b GET 303 226 /auth-servicecontainer/startTask/ 01a1dca8-0ec5-7ce4-875b-28eddd8c4cdc GET 303 123 /auth/login-oneshot 01a1db9d-4008-748d-a0d0-8fe728c37bc4 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1046-7ee9-b976-4ece20175eaa GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b995-77c2-b59d-bc85f7e2f491 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-653c-7f83-aa27-58acffe26483 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-6883-7362-bea3-6a5c1701119a GET 501 0 /auth/rest/public/jwks 01a1dc87-db99-70c4-9e2c-e455f4c2292b GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-6181-7a4f-b144-ac138a1bd272 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-5a31-7dd3-a37f-4bfc5d3b7efa GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-5daa-7f15-ae77-f7b7ba352006 GET 200 3307 /auth/ui/app 01a1dc89-565c-7f6e-922a-8d0537f34864 GET 303 225 /ext-servicecontainer/startTask/ 01a1dca8-0ec9-743a-a2fd-8f1d71c8570c ===== ORIGINS maklerportal.baloise.de ===== address status size alike sources note by name 303 288 https://maklerportal.baloise.de/group/mo/ 193.134.75.78 303 288 1.00 otx the name resolves here ===== HOST si-portal.baloise.de ===== # http://si-portal.baloise.de:8080 in_scope host_id=fc3f4bdf758583deca81a7aa055cd031 last_seen=2026-11-14 05:04:13 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:16:10) Unavailable alternate plain-HTTP listener. Direct and configured-route requests time out or return only provider-generated gateway failures, including `/api/jsonws`; no target response, application route graph or identifiable server-side product is exposed. ## paths method status size path exchange_id GET 504 936 /api/jsonws 01a1cb9a-d51a-704e-a1a6-d668e18ca037 GET / 01a1d871-420a-7222-995d-a35299364c34 # https://si-portal.baloise.de in_scope host_id=688f8b4652c8a3bf055815add2b8487c last_seen=2026-11-15 00:56:25 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 13:39:47) Liferay SI portal behind Apache HTTP Server, Airlock Gateway and Airlock IAM. Root redirects to `/group/si`; that entry and Liferay `/c/portal/*`, JSONWS, Axis, editor, tunnel, OSGi, Gogo and Spring-remoting families enter `/auth/ui/app/auth/application/access?Location=...` before reaching Liferay. The wider root namespace is absorbed by the same application-access redirect and exposes no separate anonymous administration or API handler. Direct `/auth` redirects to `/auth/`, which creates Airlock session and CSRF state before redirecting relatively to `ui/app`; `/auth/ui` similarly canonicalizes through `/auth/ui/` to `./app`. `/auth/login` creates the same state and redirects directly to `/auth/ui/app/auth/application/access`. Selector `portal_si` starts a `PASSWORD_REQUIRED` flow using `default-username-password`, advertises an optional `portal-redirect` step and links to public password reset. Airlock state uses `AL_SESS-S`, `CSRFT759-S`, mirrored `X-CSRFT759` and `X-Same-Domain: 1`. The IAM inventory contains 380 normalized REST templates and 390 method/path bindings. It spans authentication, registration, 2FA/Cronto/OTP/FIDO/OATH/password/SSI families; protected account-link, token/device, OAuth consent/session, remember-me and representation operations; and public migration, password-only, secret-question and language handlers. Installed method-bound handlers include technical-client registration, registration-data submission and authentication-data editing. Previously served application WADLs identify Jersey 3.1.10 and document public, OAuth2, authentication, self-service, registration and technical-client families. Current GET requests to `/auth/rest/public/application.wadl` and `/auth/rest/oauth2/application.wadl` return empty HTTP 500 responses. The current shell links `/auth/ui/styles.aa4c4328f9bb7e9b.css` and `/auth/ui/assets/custom/js/iam-custom.af5b4c4473394040.js`. Its runtime defines 180 lazy chunks and 214 Angular route entries; the shared router composes to 199 concrete paths below `/auth/ui/app`, represented once on the canonical Mein Portal frontend. The host-specific export has seven text files: six core IAM resources byte-identical to the canonical 193-file Mein Portal frontend, plus the gateway maintenance page. No usable source maps are published. Real gateway content exists below `/error_path/`: `/error_path/404.html` is a multilingual branded 404 page; `/error_path/maintenance.html` is a German maintenance notice with support contact details and loads `/error_path/maintenance_image001.png`; `/error_path/img/favicon.ico` is the shared favicon. Alternate TLS listeners expose the same portal/IAM boundary through CloudFront origin-facing addresses. Airlock prevents disclosure of a Liferay or Airlock release string. The formerly public authentication, self-service, tech-client-registration and user-self-registration WADL routes now return empty HTTP 500 responses. Jersey 3.1.10 remains identified from the retained prior WADLs. ## tech technology version checked_at Airlock Gateway 2026-11-13 11:42:22 Airlock IAM 2026-11-13 11:42:21 Apache HTTP Server 2026-11-13 11:42:24 Jersey 3.1.10 2026-11-10 07:59:10 Liferay Portal 2026-11-13 00:15:51 ## paths (50 of 120; toadcli paths) method status size path exchange_id GET 303 284 / 01a1dc95-a25f-73d5-802c-c5d6f91a3dc5 GET 303 203 /%61pi/%61xis/Portal_ImageService 01a1ae52-ae89-7671-91f2-c6d5502db43b GET 303 199 /%61pi/axis/Portal_ImageService 01a1ae52-aa09-736b-b45e-609e6746d5d3 GET 303 201 /./api/axis/Portal_ImageService 01a1ae89-669c-7745-85a9-5fade469336d GET 303 198 //api/axis/Portal_ImageService 01a1ae52-b3ed-73ef-bae6-9cb5f69aa1d8 GET 200 9085 /CSRFT759.js 01a19ff9-7f04-7671-8529-a9ade3ff300b GET 303 174 /admin/rest/users 01a103c9-c56f-72e3-9976-5cbaf30d1730 GET 303 199 /api/%61xis/Portal_ImageService 01a1ae52-ac21-7039-9c6f-976d83611129 GET 303 195 /api/axis/Portal_ImageService 01a1ae4b-e5e6-7185-ba3e-2dc45d499b77 GET 303 194 /api/axis/Portal_UserService 01a1ae4b-eaaa-743a-92bb-aaa9aca31025 GET 303 208 /api/axis/d023bab6e42b59a61980baca-control 01a1ae4b-e0b3-7616-bca4-3e010561af79 GET 303 198 /api/axis;/Portal_ImageService 01a1ae52-b1cd-7700-a73f-2345653d8480 GET 303 166 /api/jsonws 01a1d242-239e-7782-9244-851fb80ec88d GET 303 175 /api/jsonws/invoke 01a0faf0-568e-7092-bee9-4d916b5da2b7 OPTIONS 303 172 /api/liferay/do 01a1cb0a-aef0-71b3-9a81-c19d8405c654 POST 303 184 /api/secure/spring/portal 01a1c103-eff0-700e-a2d7-506a38f4979b POST 303 175 /api/spring/portal 01a1c7fd-9752-74d2-8d7a-38abca36300b GET 303 71 /auth 01a1d3d7-1c1d-738e-b9af-9c38697d1e89 GET 303 179 /auth-admin/editConfig 01a1c335-0477-7057-b13a-ff19d629d74a GET 303 181 /auth-admin/rest/users 01a103bc-eb93-7055-baf6-b5e484ce10b2 GET 303 196 /auth-servicecontainer/serviceContainer 01a1c335-7a6e-72d5-a08a-0b91e824eab4 GET 302 1 /auth/ 01a1d3d7-1fdb-7029-9ca0-808866f50675 GET 303 123 /auth/WEB-INF/web.xml 01a1daf2-364c-7902-9657-162fea9fd51b GET 302 0 /auth/login 01a1d401-0611-733a-95f4-37b42818d21a GET 303 123 /auth/login-oneshot 01a1db9d-40cc-7ef5-9d3e-bb068c07cc48 GET 303 123 /auth/login-oneshot/ 01a1dcb4-996c-781d-99bc-2c60003de65f GET 500 0 /auth/rest/oauth2/application.wadl 01a1d242-40bc-713c-8b49-81d9fc4d78ac GET 500 0 /auth/rest/protected/application.wadl 01a1c498-ebb0-7450-b1c8-ec23ef7a079d GET 406 132 /auth/rest/protected/application.wadl/x 01a1c498-f4f8-7081-a322-b447b55cbc5a GET 401 132 /auth/rest/protected/my/self 01a1cb74-e0e2-75fc-b1a6-3abf8a0cde1c GET 500 0 /auth/rest/public/application.wadl 01a1d242-3ee9-7480-8132-79f1b3c49bae GET 406 132 /auth/rest/public/application.wadl/schema.xsd 01a1c476-ef3f-7113-a337-9a9566a03c00 GET 500 0 /auth/rest/public/authentication/application.wadl 01a1d4b3-429b-77f3-96bf-47274841a57d GET 406 132 /auth/rest/public/authentication/application.wadl/x 01a1c49f-42ee-70b3-9200-006f262e3a42 POST 500 132 /auth/rest/public/authentication/applications/EasyLogin/access 01a1da14-ad5d-735c-bd92-3c3e5de6185b POST 500 132 /auth/rest/public/authentication/applications/Easylogin/access 01a1da14-acd1-7426-92e0-1661ae5ca34c POST 401 663 /auth/rest/public/authentication/applications/antragsfreigabe/access 01a1c452-d3c3-7169-ba7a-3201bb90963e POST 401 519 /auth/rest/public/authentication/applications/bsi_crm/access 01a1c452-d682-77be-8ebc-00c98bd202b8 POST 403 159 /auth/rest/public/authentication/applications/el_account_linking/access 01a1da14-ae24-7eb4-9c50-6ec989151f14 POST 403 159 /auth/rest/public/authentication/applications/el_account_linking2/access 01a1da14-aeb4-73ba-8eba-a2af77402efe POST 401 651 /auth/rest/public/authentication/applications/portal_ao/access 01a1c452-beb2-7514-8748-d999365b5b24 POST 401 651 /auth/rest/public/authentication/applications/portal_mo/access 01a1c452-c387-71f3-8ea9-1b23591ec337 POST 401 651 /auth/rest/public/authentication/applications/portal_si/access 01a1cb74-d8f7-70c7-889c-0afa91838f12 POST 401 645 /auth/rest/public/authentication/applications/sas_va/access 01a1c452-d150-71eb-a7b8-dd9fa3a6db62 POST 401 643 /auth/rest/public/authentication/applications/venta/access 01a1c452-cd24-705e-a995-9c7d2fe0f41f OPTIONS 200 0 /auth/rest/public/authentication/cronto/offline/ 01a1c4a0-c0b5-71bb-b532-92d838c1d423 OPTIONS 200 0 /auth/rest/public/authentication/data/edit 01a1c486-d280-7017-a627-068ee041c1a6 POST 401 521 /auth/rest/public/authentication/default-application/access 01a1a0da-dbce-7046-a73b-c7066623d8d4 GET 405 132 /auth/rest/public/authentication/flow 01a1db78-3cc3-7796-95a4-ffa65d789ff7 POST 401 651 /auth/rest/public/authentication/location/access 01a1c453-d97b-710f-bc04-fdee67699f3e # https://si-portal.baloise.de:4401 in_scope host_id=7bcf00da64a015baf72967c87b55620b last_seen=2026-11-15 00:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:14:04) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. Authentication-shaped requests enter the same Airlock session and one-shot login/error handoff as the canonical Liferay application. The complete IAM, Liferay, frontend and API route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:16:59 Airlock IAM 2026-11-14 23:17:03 Apache HTTP Server 2026-11-14 23:16:53 Jersey 3.1.10 2026-11-15 00:06:08 Liferay Portal 2026-11-15 00:03:33 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54e8-7891-8946-c6bbdd68c22a GET 303 166 /api/jsonws 01a1dc83-5d56-75ff-95eb-5f8abc1433f1 GET 303 123 /auth/login-oneshot 01a1db9d-42c2-7b6f-837b-d972f8c8c4e1 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-101c-7f59-b136-c175a023b9cc GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b28f-70ae-8197-4ffc4e2ac7d0 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9cee-74e7-ae49-caf7244c5bed GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-a13c-7bed-9c2b-174bf4345a8f GET 501 0 /auth/rest/public/jwks 01a1dc87-d32a-7fd7-9228-31ee2f1450bb GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-9948-797f-b73c-82ff0fe8644e GET 200 209 /auth/rest/public/ui/languages 01a1dc89-90dc-731f-9f6f-5cc08c30fc1d GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-9503-7832-a1f5-874b3ff85aa2 GET 200 3307 /auth/ui/app 01a1dc89-8ad4-713d-80c7-e61515069e14 # https://si-portal.baloise.de:7443 in_scope whitelisting_bypass=cloudfront host_id=c4aef47ebfd076fc4f638998c140ebe9 last_seen=2026-11-14 19:51:18 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:30:27) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:30:32 Airlock IAM 2026-11-14 23:30:33 Apache HTTP Server 2026-11-14 23:30:29 Jersey 3.1.10 2026-11-13 17:55:49 Liferay Portal 2026-11-10 05:08:20 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54ea-7317-aa7a-a0a1314d5b85 GET 200 9085 /CSRFT759.js 01a1c3d9-0279-74b7-82a2-2f1b8fe8103e GET 303 166 /api/jsonws 01a1c3d9-024c-7368-b45e-9e76d34148d1 GET 303 123 /auth/login-oneshot 01a1db9d-431c-758d-a48a-7b36e78858f1 GET 500 0 /auth/rest/oauth2/application.wadl 01a1ce13-104a-7170-99bc-eef82ed7cb78 GET 500 0 /auth/rest/public/application.wadl 01a1ce09-3b28-740c-b968-a48f743c077d GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-bde2-77b9-a381-dec379f1c6ac GET 200 3307 /auth/ui/app 01a1c3d6-53df-7414-815a-cffbb37fcfdf GET 303 164 /group/si 01a1c3d9-02a7-7236-b29e-42a6250e7597 # https://si-portal.baloise.de:7980 in_scope whitelisting_bypass=cloudfront host_id=e1f7102e2929840496d5f54c0418f24c last_seen=2026-11-14 19:51:18 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:30:35) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:30:37 Airlock IAM 2026-11-14 23:30:39 Apache HTTP Server 2026-11-14 23:30:36 Jersey 3.1.10 2026-11-13 17:55:52 Liferay Portal 2026-11-10 05:08:21 ## paths method status size path exchange_id GET 504 936 / 01a1db00-54e3-7fd5-9510-bfe7252b0fa0 GET 200 9085 /CSRFT759.js 01a1c3d9-02ed-7631-8776-bd32907be4f0 GET 303 166 /api/jsonws 01a1c3d9-0290-76fe-8fe1-f51ba60b306b GET 303 123 /auth/login-oneshot 01a1db9d-40a7-7bef-aefc-506f1e067661 GET 500 0 /auth/rest/public/application.wadl 01a1ce09-6819-729b-9a47-b78b489723fd GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-bf2b-7442-8d76-5e761056b441 GET 200 3307 /auth/ui/app 01a1c3d6-56dd-71c1-a66f-a98c37216681 GET 303 164 /group/si 01a1c3d9-02b9-7043-bac8-dfb7977fc28e # https://si-portal.baloise.de:8080 in_scope whitelisting_bypass=cloudfront host_id=165523cd61123de30c9209b258a8c732 last_seen=2026-11-14 19:51:19 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:30:40) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:30:43 Airlock IAM 2026-11-14 23:30:45 Apache HTTP Server 2026-11-14 23:30:42 Jersey 3.1.10 2026-11-13 17:55:56 Liferay Portal 2026-11-10 04:43:09 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca07-7b67-85cd-bd9dd5bbbb54 GET 200 9085 /CSRFT759.js 01a1c3c2-ac9c-7227-8818-557aa290b80a GET 303 166 /api/jsonws 01a1c3c2-adf5-71d6-90ed-9d616d76ce70 POST 303 175 /api/spring/portal 01a1c800-3aa7-717d-8bbd-9358d846dc33 GET 303 123 /auth/login-oneshot 01a1db9d-4341-77f4-be5b-076b87e45d2e GET 500 0 /auth/rest/public/application.wadl 01a1ce09-9109-749f-8584-9e6305119f6b GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-c227-7733-b565-02600ec8c99a GET 200 3307 /auth/ui/app 01a1c3c2-aafd-75dc-81d1-b0c8f04cab85 GET 303 164 /group/si 01a1c3c2-a905-713b-91c0-f323ca6ff68a GET 303 177 /osgi/system/console 01a1c3c2-af97-71b6-ae22-0d93547e9bae # https://si-portal.baloise.de:8343 in_scope whitelisting_bypass=cloudfront host_id=3746751c3699552624433cf3384bba3e last_seen=2026-11-14 19:51:19 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:30:47) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:30:52 Airlock IAM 2026-11-14 23:30:54 Apache HTTP Server 2026-11-14 23:30:51 Jersey 3.1.10 2026-11-13 17:56:02 Liferay Portal 2026-11-10 05:08:28 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca01-7d90-84e6-b3ef7bcc93a2 GET 200 9085 /CSRFT759.js 01a1c3d9-02e3-70e8-91cb-2f18109dad50 GET 303 166 /api/jsonws 01a1c3d9-02e1-7514-bf13-62adba376ecd GET 303 123 /auth/login-oneshot 01a1db9d-4366-7969-97ba-dd745047f42e GET 500 0 /auth/rest/public/application.wadl 01a1ce09-ba3b-7177-8731-903cf2489922 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-c4bd-7758-9629-c4eb48f974fb GET 200 3307 /auth/ui/app 01a1c3d6-58a9-7517-bf4d-9735e8ab3b38 GET 303 164 /group/si 01a1c3d9-02e0-7639-a623-651c7f7f0cd0 # https://si-portal.baloise.de:8443 in_scope whitelisting_bypass=cloudfront host_id=c71ac0ffe902c12fa3c2d1b7751cf4c5 last_seen=2026-11-14 20:26:13 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:30:55) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:30:58 Airlock IAM 2026-11-14 23:30:59 Apache HTTP Server 2026-11-14 23:30:56 Jersey 3.1.10 2026-11-13 17:56:05 Liferay Portal 2026-11-10 03:42:26 ## paths method status size path exchange_id GET 504 936 / 01a1db00-c9f5-7330-82cb-733002332268 GET 200 9085 /CSRFT759.js 01a1c37b-be80-71db-a013-5bc559d5861c GET 303 166 /api/jsonws 01a1c37b-ba34-748f-8950-7e3f601e0525 POST 303 175 /api/spring/portal 01a1c800-3bb8-7738-a532-1a01bcf46872 GET 303 123 /auth/login-oneshot 01a1db9d-438e-77be-aaaa-3a448383eaf6 GET 400 10158 /auth/rest/public/application.wadl 01a1ce09-bc54-713a-b0b4-78e113627836 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-c5a2-70b3-bcef-51fab168f1e9 GET 200 3307 /auth/ui/app 01a1c38a-e94b-7264-a226-7f42fabc96f5 GET 504 936 /ext-h2/ 01a1dbbd-ae7a-7cdb-bcf5-c49a9efc870d GET 303 164 /group/si 01a1c37b-b770-74d3-bdcd-b1a31f421b4b GET 303 177 /osgi/system/console 01a1c37b-c04b-74bf-acf6-b7d125819745 # https://si-portal.baloise.de:8700 in_scope host_id=87326f74d5f1e2b86e0b606a3368558e last_seen=2026-11-15 00:09:28 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:31:01) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:31:04 Airlock IAM 2026-11-14 23:31:05 Apache HTTP Server 2026-11-14 23:31:03 Jersey 3.1.10 2026-11-15 00:06:09 Liferay Portal 2026-11-15 00:03:34 ## paths method status size path exchange_id GET 504 936 / 01a1db00-c9f6-70d4-b39d-43abb03dc7f0 GET 303 166 /api/jsonws 01a1dc83-5e18-7271-bbfd-d659a57dd26f GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1110-7236-9ec8-ed45c92cdff0 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b3de-7390-90ff-f6d992a6d8cb GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9b31-7c7a-9606-44fb285566e5 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-9f08-78c5-81d7-4a592d2cf425 GET 501 0 /auth/rest/public/jwks 01a1dc87-d2d8-73f6-ba1a-7fb9b39656ec GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-974e-7deb-b9cc-3593ef2dbd3e GET 200 209 /auth/rest/public/ui/languages 01a1dc89-8f05-7869-a377-8a7428d3e9b1 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-925b-7c50-be7e-5f11a580c6cb GET 200 3307 /auth/ui/app 01a1dc89-8b24-7dbb-851d-ba1ae1d592c7 # https://si-portal.baloise.de:8701 in_scope host_id=2a31b64b5469307c21b1592d182b453b last_seen=2026-11-15 00:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:31:06) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:31:09 Airlock IAM 2026-11-14 23:31:11 Apache HTTP Server 2026-11-14 23:31:07 Jersey 3.1.10 2026-11-15 00:06:12 Liferay Portal 2026-11-15 00:03:36 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca0e-766a-86bb-995ae7466a4f GET 303 166 /api/jsonws 01a1dc83-5ce9-7258-bfb5-c25c5d14627e GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1018-76a3-bf04-f28b077b3704 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b329-7e1b-ad87-a8e6b1467b9f GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9adb-7f81-8774-5fd411f64cf6 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-9f48-7ef7-94a6-f9ad6806f5a1 GET 501 0 /auth/rest/public/jwks 01a1dc87-d2ff-78c1-b202-714ceb87ca7d GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-9743-7c50-a406-9c0efd3713e7 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-8f40-7d45-a804-70c5383f2b47 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-92a9-73cb-990b-e541f120bd34 GET 200 3307 /auth/ui/app 01a1dc89-8b3c-77d5-ba85-5a9385ef0485 # https://si-portal.baloise.de:8765 in_scope host_id=7d5f9b51faaf1bf09ec60f11c5a15384 last_seen=2026-11-15 00:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:31:14) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:31:21 Airlock IAM 2026-11-14 23:31:23 Apache HTTP Server 2026-11-14 23:31:18 Jersey 3.1.10 2026-11-15 00:06:14 Liferay Portal 2026-11-15 00:03:37 ## paths method status size path exchange_id GET 504 936 / 01a1db00-5573-7ef6-99e9-e323007d1466 GET 303 166 /api/jsonws 01a1dc83-5de6-7035-86c0-6cf6c945d6e8 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1050-7b39-8e64-d5404bd53289 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bb9e-7e54-b7d3-7eca5f982ce2 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9bb1-76f5-bd11-4cf503492ef4 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-9fd3-7d29-b054-ebbe12c14216 GET 501 0 /auth/rest/public/jwks 01a1dc87-dae1-795a-bad0-e845dc3a6083 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-97d9-7605-a706-e5d60a8ee3dc GET 200 209 /auth/rest/public/ui/languages 01a1dc89-8f71-70e1-b7ba-304edda24bba GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-9304-774d-9fa0-30c3fd90067e GET 200 3307 /auth/ui/app 01a1dc89-8b25-795a-9d32-bd5ebe5218a1 # https://si-portal.baloise.de:8800 in_scope host_id=06b6d18be3a38acefeca31af9c38d029 last_seen=2026-11-15 00:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:31:26) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:31:32 Airlock IAM 2026-11-14 23:31:34 Apache HTTP Server 2026-11-14 23:31:29 Jersey 3.1.10 2026-11-15 00:06:15 Liferay Portal 2026-11-15 00:03:38 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca0c-73f8-ae16-6c73722b1cb0 GET 303 166 /api/jsonws 01a1dc83-5e2b-787f-b0ed-c2fe2e34e20a GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-116e-7eaf-b970-08efa37ae653 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bac3-701f-8235-b8e9936fccd5 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9d8f-7808-b462-bcade566d142 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-a1e4-75ef-a34b-9137d4d6c150 GET 501 0 /auth/rest/public/jwks 01a1dc87-db7c-71a3-a17c-d717f08518c7 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-9807-7cc1-9805-6ddb425e8115 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-8ff1-74ea-a96e-8d28589313bb GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-9494-7d00-8a38-0ee73641236e GET 200 3307 /auth/ui/app 01a1dc89-8b44-7e63-a792-41461fa9bfd9 # https://si-portal.baloise.de:8801 in_scope host_id=8c74a486611285e86745d33d79b15b32 last_seen=2026-11-15 00:09:28 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:31:36) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:31:40 Airlock IAM 2026-11-14 23:31:43 Apache HTTP Server 2026-11-14 23:31:38 Jersey 3.1.10 2026-11-15 00:06:16 Liferay Portal 2026-11-15 00:03:39 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca18-734a-a5bf-88e7089e021a GET 303 166 /api/jsonws 01a1dc83-5f9e-7383-9f5a-cb4ca63e7cbe GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-104b-7967-85d1-19214bc6faf2 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bb05-753b-91d4-e6d70ccaf050 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9b75-7011-aa47-206932999598 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-9f5a-7cea-a9a0-ac6d8ac4a191 GET 501 0 /auth/rest/public/jwks 01a1dc87-d2d7-7096-b197-40bb8d22433b GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-96e7-751d-960a-daeb566f8aed GET 200 209 /auth/rest/public/ui/languages 01a1dc89-8f5d-7a95-a158-d3502830b016 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-934f-7dc9-be50-2824692e647c GET 200 3307 /auth/ui/app 01a1dc89-8b41-7134-999b-ddb4a430377d # https://si-portal.baloise.de:8888 in_scope host_id=ef8c62cbf443d0ea80a5ea50c86c6132 last_seen=2026-11-15 00:09:28 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:31:45) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:31:47 Airlock IAM 2026-11-14 23:31:49 Apache HTTP Server 2026-11-14 23:31:46 Jersey 3.1.10 2026-11-15 00:06:17 Liferay Portal 2026-11-15 00:03:41 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca16-75f2-a041-fa766b346f70 GET 303 166 /api/jsonws 01a1dc83-5dbf-79b1-917a-4372d0d01237 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-11ae-7cfc-a931-ba1967aba8a2 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b307-740b-ab35-c4c1035e37b5 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9b62-77d3-a50e-d47f3386ca87 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-9f3c-72ea-8647-ecf2cba104b6 GET 501 0 /auth/rest/public/jwks 01a1dc87-dbaf-7870-9b2c-2c679c7f9426 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-96d6-728d-abb1-04d931657e04 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-8f90-7458-83ff-e29d16408934 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-92ef-71f3-9cdf-524214109fc1 GET 200 3307 /auth/ui/app 01a1dc89-8b4c-76ea-8944-3a3576b4bc22 # https://si-portal.baloise.de:8999 in_scope host_id=120c6d2bf27007c4c7d21b2a46befa99 last_seen=2026-11-15 00:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:31:50) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:31:52 Airlock IAM 2026-11-14 23:31:54 Apache HTTP Server 2026-11-14 23:31:51 Jersey 3.1.10 2026-11-15 00:06:18 Liferay Portal 2026-11-15 00:03:43 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca19-71db-9fd3-e4f5b69d83b1 GET 303 166 /api/jsonws 01a1dc83-5dcf-74e9-ba60-32022f123544 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-102b-7405-a507-87607b5956cb GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b2fa-7fe5-af72-d5447517dd27 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9e05-7710-be6f-249c272e2ca0 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-a10b-78b3-bcb5-c91b54377409 GET 501 0 /auth/rest/public/jwks 01a1dc87-dace-78c0-b93b-bd6c306bb313 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-999e-778f-b847-a959cc66a4da GET 200 209 /auth/rest/public/ui/languages 01a1dc89-9030-7b55-bac2-20217aceb315 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-94bf-7219-ad2f-f7d6cdded8d3 GET 200 3307 /auth/ui/app 01a1dc89-8b64-7947-baf4-afeed79affd4 # https://si-portal.baloise.de:9000 in_scope host_id=b54fec325826ef3e8116c16028d78d6d last_seen=2026-11-15 00:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:31:55) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:31:58 Airlock IAM 2026-11-14 23:32:00 Apache HTTP Server 2026-11-14 23:31:56 Jersey 3.1.10 2026-11-15 00:06:20 Liferay Portal 2026-11-15 00:03:44 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca17-7818-827d-8451ec571efd GET 303 166 /api/jsonws 01a1dc83-5d5c-76b8-ba15-f2ef978ebd41 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-119f-7e4e-a765-38390226dd58 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bbba-7a39-b212-a4d19e94977e GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9b72-77ec-999a-f6a543e0ec5c GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-9f72-751a-ab55-c5be3250ab81 GET 501 0 /auth/rest/public/jwks 01a1dc87-db12-746e-b3d0-8cd16115b09a GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-96c0-7232-8d8f-d1c592f01178 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-8e71-7842-9747-e72481248b16 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-931a-7216-ba36-ee1f24a22dfb GET 200 3307 /auth/ui/app 01a1dc89-8b14-7f6b-863e-94dafd84b715 # https://si-portal.baloise.de:9080 in_scope host_id=18e4ae4f7c7972e4367c5725973f3ff8 last_seen=2026-11-15 00:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:32:02) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:32:05 Airlock IAM 2026-11-14 23:32:06 Apache HTTP Server 2026-11-14 23:32:04 Jersey 3.1.10 2026-11-15 00:06:21 Liferay Portal 2026-11-15 00:03:46 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca14-7777-8ea9-f8a62d431dbd GET 303 166 /api/jsonws 01a1dc83-5dd2-7191-ad9f-b1cf9eb34512 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1098-7a05-b945-cc906bc1d927 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bb68-7d32-a600-f5731c54613d GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9bd8-775d-b8da-d5ea19007072 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-a097-7541-8e58-6191cf8d179d GET 501 0 /auth/rest/public/jwks 01a1dc87-daee-74a7-830a-f82ebfb71ce0 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-97be-78c9-8770-3d1055e2fef0 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-8fa0-7e03-96cb-4224de87c842 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-947c-7d45-986b-368839c22d00 GET 200 3307 /auth/ui/app 01a1dc89-8b50-7631-82f4-8ce92786b5bf # https://si-portal.baloise.de:9443 in_scope whitelisting_bypass=cloudfront host_id=62183357f8ac2ceda3abbe3e326bfd54 last_seen=2026-11-14 20:26:13 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:32:07) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:32:10 Airlock IAM 2026-11-14 23:32:11 Apache HTTP Server 2026-11-14 23:32:09 Jersey 3.1.10 2026-11-13 17:56:09 Liferay Portal 2026-11-10 04:43:11 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca1e-7410-b053-2f6253247455 GET 200 9085 /CSRFT759.js 01a1c3c2-cd84-70d1-8465-95e1cc2d2340 GET 303 166 /api/jsonws 01a1c3c2-ce9a-7194-ac39-f569b51267f1 POST 303 175 /api/spring/portal 01a1c800-3cc2-7468-b795-bdf7136fcd66 GET 303 123 /auth/login-oneshot 01a1db9d-43e7-7b30-b969-f94d46ba372e GET 500 0 /auth/rest/public/application.wadl 01a1ce09-e56c-743c-8437-775661b29834 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-c878-70d4-931d-b7462e250e08 GET 200 3307 /auth/ui/app 01a1c3c2-cc53-76af-beb8-c4c818e25ac6 GET 504 936 /ext-h2/ 01a1dbbd-ae81-7d20-a264-ef5ab8fed298 GET 303 164 /group/si 01a1c3c2-cb39-738d-8e4e-09a7c79d1c2f GET 303 177 /osgi/system/console 01a1c3c2-cfb7-725c-a847-5df46bd27208 # https://si-portal.baloise.de:9990 in_scope host_id=3025f9826c6dc6ea5e3f91bdfcc6104b last_seen=2026-11-15 00:09:28 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:32:12) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:32:15 Airlock IAM 2026-11-14 23:32:16 Apache HTTP Server 2026-11-14 23:32:13 Jersey 3.1.10 2026-11-15 00:06:22 Liferay Portal 2026-11-15 00:03:48 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca18-7669-acd3-038ef1da6de8 GET 303 166 /api/jsonws 01a1dc83-7e6b-7a19-91e7-67773abd09f8 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-10ed-7f76-a8f6-5cd43453b7ab GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b345-7720-b185-2719e1a661b8 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9aa1-7cef-a1b4-25958d43efb6 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-9f27-7dbb-9263-23aab24726a0 GET 501 0 /auth/rest/public/jwks 01a1dc87-db20-7996-8bd8-65c90a84b890 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-96e6-72e7-a4c1-e17678adb41c GET 200 209 /auth/rest/public/ui/languages 01a1dc89-8f2c-7cfe-94ba-ed11b19ee1c3 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-925b-7662-b864-f24144f3a472 GET 200 3307 /auth/ui/app 01a1dc89-8b1b-7828-b226-5b85e60ca020 # https://si-portal.baloise.de:12345 in_scope host_id=803f2b994c5c78a2c330f10679c80a57 last_seen=2026-11-15 00:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:14:07) CloudFront-origin-facing alternate TLS listener for the canonical si-portal.baloise.de Apache/Airlock IAM portal. Authentication-shaped requests enter the same Airlock session and one-shot login/error handoff as the canonical Liferay application. The complete IAM, Liferay, frontend and API route inventory is mapped on https://si-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:17:09 Airlock IAM 2026-11-14 23:17:13 Apache HTTP Server 2026-11-14 23:17:05 Jersey 3.1.10 2026-11-15 00:06:23 Liferay Portal 2026-11-15 00:03:50 ## paths method status size path exchange_id GET 303 166 /api/jsonws 01a1dc83-7f0f-7a60-a466-8b19d83cd48f GET 303 123 /auth/login-oneshot 01a1db9d-440b-7d04-87b0-607703472a08 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1198-7fc7-9878-989029cd1b24 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bb7c-7633-aeb9-ec86406fe166 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9b57-7246-8321-546d36129309 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-a005-71fa-b082-663b734b26c5 GET 501 0 /auth/rest/public/jwks 01a1dc87-db75-7579-8782-8883736b735c GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-977f-7ed4-84a4-2ab52333d25d GET 200 209 /auth/rest/public/ui/languages 01a1dc89-8f75-7885-bd94-2d81a022e615 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-9451-7869-b905-9d4e9c9e90c9 GET 200 3307 /auth/ui/app 01a1dc89-8af9-797e-ab62-46d78b4d98a3 ===== ORIGINS si-portal.baloise.de ===== address status size alike sources note by name 303 284 https://si-portal.baloise.de/group/si ===== HOST vertriebsservice.baloise.de ===== # http://vertriebsservice.baloise.de:8080 in_scope host_id=f04543e548cc1c48f48a8314c519fa17 last_seen=2026-11-14 05:04:23 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:21:35) Unavailable alternate plain-HTTP listener. Direct and configured-route requests time out or return only provider-generated gateway failures, including `/api/jsonws`; no target response, application route graph or identifiable server-side product is exposed. ## paths method status size path exchange_id GET 504 936 /api/jsonws 01a1cb9a-a626-76de-bce8-4717a01773df GET / 01a1d871-6a74-77dc-9951-0ce08ac864b2 # https://vertriebsservice.baloise.de in_scope host_id=8fbcdbf2f1a1d56902f8b68cdfb783ae last_seen=2026-11-15 00:56:25 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 13:39:54) Liferay sales portal behind Apache HTTP Server, Airlock Gateway and Airlock IAM. Root redirects to `/group/mmag/`; that entry and Liferay portlet, JSONWS, Axis, tunnel, Gogo, OSGi and Spring-remoting families enter `/auth/ui/app/auth/application/access?Location=...` before reaching Liferay. Direct `/auth` redirects to `/auth/`, which creates Airlock session and CSRF state before redirecting relatively to `ui/app`; `/auth/ui` similarly canonicalizes through `/auth/ui/` to `./app`. `/auth/login` creates the same state and redirects directly to `/auth/ui/app/auth/application/access`. The location currently starts the generic `default` `PASSWORD_REQUIRED` flow; direct selector `portal_bvs` is inactive and returns JSON:API 404. Airlock state uses `AL_SESS-S`, `CSRFT759-S`, mirrored `X-CSRFT759` and `X-Same-Domain: 1`. The IAM inventory contains 380 normalized REST templates and 390 method/path bindings across authentication, registration, 2FA/Cronto/OTP/FIDO/OATH/password/SSI, account-link, token/device, OAuth consent/session, remember-me, representation, migration, password-only, secret-question and language families. Server-defined routes include flow/goto retrieval, device tokens, OAuth/SAML dispatch, JWK publication, password-policy checks, technical-client registration and registration-data submission. Previously served application WADLs identify Jersey 3.1.10 and document public, OAuth2, authentication, self-service, registration and technical-client families. Current GET requests to `/auth/rest/public/application.wadl` and `/auth/rest/oauth2/application.wadl` return empty HTTP 500 responses. The current shell links `/auth/ui/styles.aa4c4328f9bb7e9b.css` and `/auth/ui/assets/custom/js/iam-custom.af5b4c4473394040.js`. Its runtime defines 180 lazy chunks and 214 Angular route entries; the shared router composes to 199 concrete paths below `/auth/ui/app`, represented once on the canonical Mein Portal frontend. The host-specific export has seven text files: six core resources shared with the canonical 193-file Mein Portal IAM graph, plus the gateway maintenance page. No usable source maps are published. Real gateway content exists below `/error_path/`: `/error_path/404.html` is a multilingual branded 404 page; `/error_path/maintenance.html` is a German maintenance notice with support contact details and loads `/error_path/maintenance_image001.png`; `/error_path/img/favicon.ico` is the shared favicon. Alternate TLS listeners expose the same portal/IAM boundary through CloudFront origin-facing addresses. Airlock prevents disclosure of a Liferay or Airlock release string. The formerly public authentication, self-service, tech-client-registration and user-self-registration WADL routes now return empty HTTP 500 responses. Jersey 3.1.10 remains identified from the retained prior WADLs. ## tech technology version checked_at Airlock Gateway 2026-11-13 11:42:27 Airlock IAM 2026-11-13 11:42:26 Apache HTTP Server 2026-11-13 11:42:28 Jersey 3.1.10 2026-11-10 07:59:12 Liferay Portal 2026-11-13 00:21:16 ## paths (50 of 124; toadcli paths) method status size path exchange_id GET 303 294 / 01a1dc95-ab0d-74a4-a673-7f18645eb1da GET 303 208 /%61pi/%61xis/Portal_ImageService 01a1ae52-bd72-77ca-9f23-f6435b974190 GET 303 204 /%61pi/axis/Portal_ImageService 01a1ae52-b835-706b-b372-d9a4b55afd22 GET 303 206 /./api/axis/Portal_ImageService 01a1ae89-6a58-7028-a29b-fa0475f7612c GET 303 203 //api/axis/Portal_ImageService 01a1ae52-c3a7-75dd-9cb7-4ab86bff6ade GET 200 9085 /CSRFT759.js 01a19ff9-852d-762e-a069-5fd94e3219aa GET 303 179 /admin/rest/users 01a103c9-d277-7370-a119-be386624f73d GET 303 204 /api/%61xis/Portal_ImageService 01a1ae52-bb49-7533-9499-e29342afdac8 GET 303 200 /api/axis/Portal_ImageService 01a1ae4b-f77b-7664-afc6-c86b5cbd5798 GET 303 199 /api/axis/Portal_UserService 01a1ae4b-fb48-75e3-929a-1ddd44161b43 GET 303 213 /api/axis/d023bab6e42b59a61980baca-control 01a1ae4b-f371-75c2-80b8-362ba0050b95 GET 303 203 /api/axis;/Portal_ImageService 01a1ae52-c18e-76bc-96df-170a1b40cbaa GET 303 171 /api/jsonws 01a1d247-15ea-72bc-ac09-2caf11639675 GET 303 180 /api/jsonws/invoke 01a0faf0-62e4-73c0-ba2b-a1f7820cfe8f OPTIONS 303 177 /api/liferay/do 01a1cb0a-db93-7605-8ca4-4ec92dd60c1b POST 303 189 /api/secure/spring/portal 01a1c103-fce0-72cd-8f54-fb84ad8b0633 POST 303 180 /api/spring/portal 01a1c7fd-a4f1-7128-8d56-383337bfb29b GET 303 71 /auth 01a1d3d7-2257-7166-bf4e-a125c8c6342c GET 303 184 /auth-admin/editConfig 01a1c335-0033-7489-91ef-8e3de6f561a1 GET 303 186 /auth-admin/rest/users 01a103bd-0dbe-76d0-84f6-ed89767102a6 GET 303 201 /auth-servicecontainer/serviceContainer 01a1c335-7838-74ab-a982-b9cf54d028e6 GET 302 1 /auth/ 01a1d3d7-2515-7485-97af-5085756dfb8a GET 303 123 /auth/WEB-INF/web.xml 01a1daf2-3885-7301-a4ee-f5f5d953ba16 GET 302 0 /auth/login 01a1d401-bd6e-73bd-9694-78feb2fcf137 GET 303 123 /auth/login-oneshot 01a1db9d-447c-7cf9-97e0-9217818fc821 GET 303 123 /auth/login-oneshot/ 01a1dcb4-9a7d-73f2-b27f-ce606ddeb367 GET 500 0 /auth/rest/oauth2/application.wadl 01a1d247-3376-70af-a77c-9f79209fb43f GET 500 0 /auth/rest/protected/application.wadl 01a1c499-3896-71aa-b89a-317a9884ef01 GET 406 132 /auth/rest/protected/application.wadl/x 01a1c499-41db-73bc-a425-ef7a3bcdc813 GET 401 132 /auth/rest/protected/my/self 01a1cb74-cef0-7429-9bb4-ac7eaf9b076f GET 500 0 /auth/rest/public/application.wadl 01a1d247-3185-7438-9317-b54ef9af8f69 GET 406 132 /auth/rest/public/application.wadl/schema.xsd 01a1c477-04c5-7186-a5ca-ca075d04cf2d GET 500 0 /auth/rest/public/authentication/application.wadl 01a1d4b3-4c66-7d46-b5da-5c762d60fdb0 GET 406 132 /auth/rest/public/authentication/application.wadl/x 01a1c49f-52ef-72d5-b736-6a450c05cd3c POST 500 132 /auth/rest/public/authentication/applications/EasyLogin/access 01a1da14-afbc-7813-b354-9bd38812091b POST 500 132 /auth/rest/public/authentication/applications/Easylogin/access 01a1da14-af41-76d6-8b96-6629ec06d0f9 POST 401 663 /auth/rest/public/authentication/applications/antragsfreigabe/access 01a1c452-ed17-759b-89a5-796f75e20397 POST 401 519 /auth/rest/public/authentication/applications/bsi_crm/access 01a1c452-ef83-70ae-85e5-23d7924cb4db POST 403 159 /auth/rest/public/authentication/applications/el_account_linking/access 01a1da14-b08f-77c1-8fc6-6ec8799791a2 POST 403 159 /auth/rest/public/authentication/applications/el_account_linking2/access 01a1da14-b12e-7597-9d03-0d9104b30ada POST 401 651 /auth/rest/public/authentication/applications/portal_ao/access 01a1cb74-c707-7176-996d-12d182412494 POST 401 651 /auth/rest/public/authentication/applications/portal_mo/access 01a1c452-de71-77ff-b1d3-cd607fb46a1c POST 401 651 /auth/rest/public/authentication/applications/portal_si/access 01a1c452-e30f-76eb-89de-7c2fe8ddeefa POST 401 645 /auth/rest/public/authentication/applications/sas_va/access 01a1c452-eaa9-743d-a6b4-da7bd26d0d24 POST 401 643 /auth/rest/public/authentication/applications/venta/access 01a1c452-e7fe-73b4-835d-2f3b4187bb01 OPTIONS 200 0 /auth/rest/public/authentication/cronto/offline/ 01a1c4a0-c1c3-770b-85b8-3c35d212b504 OPTIONS 200 0 /auth/rest/public/authentication/data/edit 01a1c486-dd8b-77c4-8bfc-abf96ba6e9da POST 401 521 /auth/rest/public/authentication/default-application/access 01a1a0da-e56a-76f1-9799-8a92da7c2aca GET 405 132 /auth/rest/public/authentication/flow 01a1db78-4d7f-7315-b468-abdda00e8e31 POST 401 521 /auth/rest/public/authentication/location/access 01a1c453-de4e-7562-892c-1d425e7606ad # https://vertriebsservice.baloise.de:4401 in_scope host_id=528f0705cff13ab5dd7df96416b861b0 last_seen=2026-11-15 00:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:13:57) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. Authentication-shaped requests enter the same Airlock session and one-shot login/error handoff as the canonical Liferay application. The complete IAM, Liferay, frontend and API route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:16:33 Airlock IAM 2026-11-14 23:16:37 Apache HTTP Server 2026-11-14 23:16:29 Jersey 3.1.10 2026-11-15 00:06:25 Liferay Portal 2026-11-15 00:03:52 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca28-796b-8eeb-d6ad69ee5ad9 GET 303 171 /api/jsonws 01a1dc83-7f98-74b4-80aa-37b615025ba0 GET 303 123 /auth/login-oneshot 01a1db9d-44a2-7265-bbca-c47663b172b3 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-114a-7f4c-9a27-0f638fe4bb1b GET 500 0 /auth/rest/public/application.wadl 01a1dc85-b310-7edb-abee-bf086aa1c797 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9bee-7931-8f80-982937b6cde1 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-9fdb-7c9e-bad6-0249aa304a62 GET 501 0 /auth/rest/public/jwks 01a1dc87-dbdb-74ab-ac9d-79e5699baea5 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-97dc-7f76-97e2-ba49a6129e9d GET 200 209 /auth/rest/public/ui/languages 01a1dc89-8fb5-7bde-a9fb-2c1b22a14fc9 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-9359-7bcf-b902-ae160e8bb1b9 GET 200 3307 /auth/ui/app 01a1dc89-8b72-7756-a2ff-bd3070b8e181 # https://vertriebsservice.baloise.de:7443 in_scope whitelisting_bypass=cloudfront host_id=3e5874db6d80a2332e07ddefeaab944b last_seen=2026-11-14 19:51:19 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:32:18) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:32:22 Airlock IAM 2026-11-14 23:32:24 Apache HTTP Server 2026-11-14 23:32:20 Jersey 3.1.10 2026-11-13 17:56:58 Liferay Portal 2026-11-10 05:08:29 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca32-7a6c-a4f2-8008fa53d577 GET 200 9085 /CSRFT759.js 01a1c3d9-023f-77e2-a82a-413a93643235 GET 303 171 /api/jsonws 01a1c3d9-023a-74db-ba1a-6e58d221628d GET 303 123 /auth/login-oneshot 01a1db9d-44ff-7f3d-ba63-0df148b078e8 GET 500 0 /auth/rest/oauth2/application.wadl 01a1ce13-224b-7575-9135-3ad445cd6059 GET 500 0 /auth/rest/public/application.wadl 01a1ce0a-cd4e-7613-b53b-86022e3fd750 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29d-4ba9-7741-af8b-2440c4bcad19 GET 200 3307 /auth/ui/app 01a1c3d7-1a4d-74ed-ba74-9d3e541af1b1 GET 303 174 /group/mmag/ 01a1c3d9-02a6-7076-8e39-074239aa0962 # https://vertriebsservice.baloise.de:7980 in_scope whitelisting_bypass=cloudfront host_id=638a6712fc6f8a23022773bb015f62e4 last_seen=2026-11-14 19:51:19 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:32:26) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:32:28 Airlock IAM 2026-11-14 23:32:30 Apache HTTP Server 2026-11-14 23:32:27 Jersey 3.1.10 2026-11-13 17:57:02 Liferay Portal 2026-11-10 05:08:35 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f39-7589-a2c7-b9d366900e15 GET 200 9085 /CSRFT759.js 01a1c3d9-02f9-74a7-931f-7f8745f2a2c6 GET 303 171 /api/jsonws 01a1c3d9-02e7-7569-828e-8babab5ca1c1 GET 303 123 /auth/login-oneshot 01a1db9d-4559-7390-9822-a0195045d66c GET 500 0 /auth/rest/public/application.wadl 01a1ce0a-f63d-7105-b56e-396777e9c335 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29d-4c8c-724b-9f0c-f1aa95991177 GET 200 3307 /auth/ui/app 01a1c3d7-20d4-7330-a724-624f5dd5e1d6 GET 303 174 /group/mmag/ 01a1c3d9-02e9-73df-a2a1-2d9a606e4441 # https://vertriebsservice.baloise.de:8080 in_scope whitelisting_bypass=cloudfront host_id=f01619924b457658df0100d666b57186 last_seen=2026-11-14 19:51:19 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:32:31) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:32:34 Airlock IAM 2026-11-14 23:32:35 Apache HTTP Server 2026-11-14 23:32:32 Jersey 3.1.10 2026-11-13 17:57:05 Liferay Portal 2026-11-10 04:43:14 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca31-76b5-949f-20d505b20818 GET 200 9085 /CSRFT759.js 01a1c3c2-b6bc-7522-9c61-e0e79f48c8d7 GET 303 171 /api/jsonws 01a1c3c2-b80d-73e7-abeb-71677a9313b3 POST 303 180 /api/spring/portal 01a1c800-403f-7128-b341-fbbc51f04a43 GET 303 123 /auth/login-oneshot 01a1db9d-457f-762e-9ecb-edce97c36d8e GET 500 0 /auth/rest/public/application.wadl 01a1ce0b-1e7f-7612-b7a9-9bfa74908dd0 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29d-4f2a-74f6-8015-093a68868c58 GET 200 3307 /auth/ui/app 01a1c3c2-b578-7286-a78d-c5e925458bc5 GET 303 174 /group/mmag/ 01a1c3c2-b40d-7181-a871-e485757d7b7b GET 303 182 /osgi/system/console 01a1c3c2-b96a-75c8-97e8-83c2bbd93614 # https://vertriebsservice.baloise.de:8343 in_scope whitelisting_bypass=cloudfront host_id=261574628f1f8e231cd41a17f33339c9 last_seen=2026-11-14 19:51:19 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:32:36) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:32:38 Airlock IAM 2026-11-14 23:32:40 Apache HTTP Server 2026-11-14 23:32:37 Jersey 3.1.10 2026-11-13 17:57:28 Liferay Portal 2026-11-10 05:08:36 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca2a-77b4-8ff4-6d00e7c0dda1 GET 200 9085 /CSRFT759.js 01a1c3d9-03d1-7656-9ee4-482459fb6ce2 GET 303 171 /api/jsonws 01a1c3d9-0390-7542-94ce-59dbf45e0879 GET 303 123 /auth/login-oneshot 01a1db9d-45e0-7dc2-a09d-e1fec756e12e GET 500 0 /auth/rest/public/application.wadl 01a1ce0b-477b-7797-a40a-f5e2183b0dc8 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29d-51f4-70cf-8924-ed7e3dfdf795 GET 200 3307 /auth/ui/app 01a1c3d7-22c6-72fd-a6a1-928fe62b2a21 GET 303 174 /group/mmag/ 01a1c3d9-0317-7597-b5cf-478d0080d613 # https://vertriebsservice.baloise.de:8443 in_scope whitelisting_bypass=cloudfront host_id=45bf8a9576d355fb787a3f1949ff9bf0 last_seen=2026-11-14 20:26:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:32:41) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:32:46 Airlock IAM 2026-11-14 23:32:48 Apache HTTP Server 2026-11-14 23:32:44 Jersey 3.1.10 2026-11-13 17:57:40 Liferay Portal 2026-11-10 03:46:32 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca2f-7342-93c1-23ad78587229 GET 200 9085 /CSRFT759.js 01a1c38e-009f-70f1-a2fa-5ac0cb710853 GET 303 171 /api/jsonws 01a1c38d-fe69-71f2-b426-7c8a55bc977c POST 303 180 /api/spring/portal 01a1c800-41a3-72a5-9545-fd4c35de7f4a GET 303 123 /auth/login-oneshot 01a1db9d-4605-76c8-965c-bdc492f0391b GET 500 0 /auth/rest/public/application.wadl 01a1ce0b-7086-7056-80ea-b272dbb4b38a GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29d-5363-73ee-b792-dd4405b93199 GET 200 3307 /auth/ui/app 01a1c38e-9d38-77a6-878e-7a64276679ca GET 504 936 /ext-h2/ 01a1dbbe-22c7-78b2-9ccd-4bd04540a8f6 GET 303 174 /group/mmag/ 01a1c38d-fc03-7309-b3e8-eec7fe5951b5 GET 303 182 /osgi/system/console 01a1c38e-01b6-7722-af94-2e02435c8212 # https://vertriebsservice.baloise.de:8700 in_scope host_id=f4d1db224c541f1b93cef0d976582aaf last_seen=2026-11-15 00:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:32:49) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:32:53 Airlock IAM 2026-11-14 23:32:55 Apache HTTP Server 2026-11-14 23:32:51 Jersey 3.1.10 2026-11-15 00:06:27 Liferay Portal 2026-11-15 00:03:53 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca2a-7bf0-863e-1f963270c461 GET 303 171 /api/jsonws 01a1dc83-7fcd-7fd9-a0e1-adec6a4691d0 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1294-7a49-8899-7c222af32b5a GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bbbb-720d-8ac2-6b25180193f1 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9c21-7249-ba72-0a397cf3d26b GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-a0ce-7631-b87b-1935e1ac30ca GET 501 0 /auth/rest/public/jwks 01a1dc87-dbfb-7000-8396-2afa7cc008be GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-98d2-71a8-a8ee-781f6097668c GET 200 209 /auth/rest/public/ui/languages 01a1dc89-8fb6-7b18-bff9-59f6d16fbcb1 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-9435-7875-a20b-2f5e8a714af5 GET 200 3307 /auth/ui/app 01a1dc89-8b61-72ff-a912-f985747b2955 # https://vertriebsservice.baloise.de:8701 in_scope host_id=11c6143d6bc4569def4274defe13c5b9 last_seen=2026-11-15 00:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:32:57) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:33:00 Airlock IAM 2026-11-14 23:33:01 Apache HTTP Server 2026-11-14 23:32:58 Jersey 3.1.10 2026-11-15 00:06:29 Liferay Portal 2026-11-15 00:03:54 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f30-797c-84a9-bbe671e5c521 GET 303 171 /api/jsonws 01a1dc83-7e9c-7ee0-a58c-316e1d3253c8 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-120b-7962-97cc-ca4426f1a7f2 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bbf9-7d66-ae57-c84ac855af10 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9c47-7878-9865-e10a64937d8f GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-a01c-7f91-9a40-4fceb11f0b75 GET 501 0 /auth/rest/public/jwks 01a1dc87-db7b-7900-a230-800e1744afe8 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-97eb-76b2-8802-2c65471efb31 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-903f-76ee-96c0-d05e314b4bc6 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-94d9-7eb7-b5c6-cf8948fb20be GET 200 3307 /auth/ui/app 01a1dc89-8b60-7376-8db5-f0db53fa5aa3 # https://vertriebsservice.baloise.de:8765 in_scope host_id=db2b30d53c6c73656db209d25053cbc3 last_seen=2026-11-15 00:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:33:03) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:33:07 Airlock IAM 2026-11-14 23:33:08 Apache HTTP Server 2026-11-14 23:33:05 Jersey 3.1.10 2026-11-15 00:06:31 Liferay Portal 2026-11-15 00:03:56 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca33-74f9-9279-ec517cb42ad1 GET 303 171 /api/jsonws 01a1dc83-7f09-778a-9712-4ab15045c0b8 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-11aa-777e-b09f-3de80527cc51 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bc63-7c78-9dc7-c724fdde74e0 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9ce3-7f84-81fa-e22ae23ce68c GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-a099-7f81-834b-19ff81d023af GET 501 0 /auth/rest/public/jwks 01a1dc87-dc1c-78bd-8400-fac0d9b9b133 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-9778-73e1-9bc1-60f0d00040b2 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-8fed-72a1-93dc-8a549f0bb144 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-942f-7d2c-89d7-11215f61cc9c GET 200 3307 /auth/ui/app 01a1dc89-8b9b-72c2-a055-4bd4f1793a2c # https://vertriebsservice.baloise.de:8800 in_scope host_id=42e43c56f4e48ac16bb0f85c9f54b0cf last_seen=2026-11-15 00:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:33:10) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:33:13 Airlock IAM 2026-11-14 23:33:15 Apache HTTP Server 2026-11-14 23:33:12 Jersey 3.1.10 2026-11-15 00:06:33 Liferay Portal 2026-11-15 00:03:57 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca31-7f3b-a00f-fcbae2279f72 GET 303 171 /api/jsonws 01a1dc83-7f58-7b29-bbcb-6102548d3bcb GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1218-7433-92e6-4188d2b49b55 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bb36-724c-9d78-76c560e0f3c1 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9d37-7f54-a910-ab5fb496766f GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-a286-7cbe-83ba-1be66b77080c GET 501 0 /auth/rest/public/jwks 01a1dc87-d3b0-7844-975a-fd1f23fd8636 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-99c0-7ddc-927d-8eac5d085bfd GET 200 209 /auth/rest/public/ui/languages 01a1dc89-9094-7300-a278-64eb833ff948 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-950f-70a3-a169-93d535eb527b GET 200 3307 /auth/ui/app 01a1dc89-8be9-742e-bf1f-3a1d76b58bb7 # https://vertriebsservice.baloise.de:8801 in_scope host_id=4453db7038a59f591f3dc15ee512210a last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:33:16) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:33:18 Airlock IAM 2026-11-14 23:33:19 Apache HTTP Server 2026-11-14 23:33:17 Jersey 3.1.10 2026-11-15 00:06:34 Liferay Portal 2026-11-15 00:03:58 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca2f-7bd0-84dc-ee4e848a83a8 GET 303 171 /api/jsonws 01a1dc83-7fad-743c-83c4-5fbd15c18d70 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1084-79e2-9137-092aa22a7844 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bccc-72e0-a2f9-240683951841 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d732-7085-9741-221752ad4d30 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d93f-72e0-bc17-d239ea583e25 GET 501 0 /auth/rest/public/jwks 01a1dc87-dc13-76d5-ba57-1710fecaa4a6 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-d2a9-7aff-bd13-63b5694058ff GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c985-7528-83cc-e38e4bc1be81 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-ce28-7a66-ae97-b151446ad7f8 GET 200 3307 /auth/ui/app 01a1dc89-c50a-7e37-bf37-0c0400b75233 # https://vertriebsservice.baloise.de:8888 in_scope host_id=16b050ffd5fe6cf29d32c74e508c927e last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:33:21) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:33:23 Airlock IAM 2026-11-14 23:33:24 Apache HTTP Server 2026-11-14 23:33:22 Jersey 3.1.10 2026-11-15 00:06:35 Liferay Portal 2026-11-15 00:03:59 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f3f-7149-a848-816ce34ff432 GET 303 171 /api/jsonws 01a1dc83-7f59-7748-86f6-f8ec643eb08c GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-11e6-7570-b3c5-8b378f59e4aa GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bc4f-74be-8fe9-720e86058a94 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d31c-7ebb-b03c-d870d56cd6a7 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d7b2-7ba0-ab74-74f50826f5db GET 501 0 /auth/rest/public/jwks 01a1dc87-dcd4-7ecc-83ae-2f11cb288565 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-cfa6-73ef-8587-a2890026c997 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c8b2-7b6d-8871-6a2c04fa213a GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-cc37-7725-87b6-a3a88e92d3b9 GET 200 3307 /auth/ui/app 01a1dc89-c50e-7277-abfc-52a715578c12 # https://vertriebsservice.baloise.de:8999 in_scope host_id=4af4e8025da6c6b813bcb3c99f2167cd last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:33:26) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:33:29 Airlock IAM 2026-11-14 23:33:30 Apache HTTP Server 2026-11-14 23:33:27 Jersey 3.1.10 2026-11-15 00:06:36 Liferay Portal 2026-11-15 00:04:01 ## paths method status size path exchange_id GET 504 936 / 01a1db00-ca34-7356-beb8-0479125dde46 GET 303 171 /api/jsonws 01a1dc83-7f7b-7318-94fd-648bc30a0afc GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-123c-7fb0-b6e8-2bde2969122f GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bcb0-7f37-accb-3e31cd421e63 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d449-78a7-945b-d8d8a4ff23fd GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d78d-72b2-a0c8-2956847577b3 GET 501 0 /auth/rest/public/jwks 01a1dc87-dcb5-747e-ba69-9d626caa1607 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-d092-7020-af1f-b23580b6d9cb GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c8f4-724e-b4be-8494c08604f8 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-cc9b-7a46-a445-16069a19512d GET 200 3307 /auth/ui/app 01a1dc89-c4b5-7058-b493-0257cd5985d6 # https://vertriebsservice.baloise.de:9000 in_scope host_id=c598dfd859340e8e0a2c2cddeb23a853 last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:33:32) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:33:38 Airlock IAM 2026-11-14 23:33:39 Apache HTTP Server 2026-11-14 23:33:34 Jersey 3.1.10 2026-11-15 00:06:38 Liferay Portal 2026-11-15 00:04:02 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f2e-78c2-bac8-2688eff6618b GET 303 171 /api/jsonws 01a1dc83-7f72-768d-bd85-a8fef50d9ddd GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1138-741a-959d-8572ce3643fa GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bc9c-7553-874b-b2d0cf13c2c3 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d4eb-76ac-b467-1ea38b0c9e8a GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d847-7403-af84-f775cd1ac17e GET 501 0 /auth/rest/public/jwks 01a1dc87-dba5-7aff-bc4a-2bde6e4051d9 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-d192-7a45-9697-117e63aea5c7 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c88c-75f0-b292-54aef2a41e83 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-cd0c-7c6f-8f08-f6c442d636ea GET 200 3307 /auth/ui/app 01a1dc89-c469-7c1c-835b-b691d1be5369 # https://vertriebsservice.baloise.de:9080 in_scope host_id=bd294642d6ca096183e21b2cdbfdd5b5 last_seen=2026-11-15 00:09:42 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:33:40) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:33:42 Airlock IAM 2026-11-14 23:33:44 Apache HTTP Server 2026-11-14 23:33:41 Jersey 3.1.10 2026-11-15 00:06:40 Liferay Portal 2026-11-15 00:04:03 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f44-75ce-915d-d54d5c5d45f3 GET 303 171 /api/jsonws 01a1dc83-7fbd-704f-83b3-7bbfd7500761 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-120a-7c12-a825-98e3b450a5e2 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bc6f-7f19-bab7-3c4fdc7421c9 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d27f-7dd1-a483-5b72eb6ca250 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d5a1-7ae4-b859-943c0402c514 GET 501 0 /auth/rest/public/jwks 01a1dc87-dcb4-7b7f-b100-300951fa57be GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-cd95-7850-9a66-0a912435a476 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c7be-7528-b256-27dae827a79c GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-c97e-7c69-b2c0-3d4d8cfd96b0 GET 200 3307 /auth/ui/app 01a1dc89-c44a-796b-a09b-1feecaffdb26 # https://vertriebsservice.baloise.de:9443 in_scope whitelisting_bypass=cloudfront host_id=d23e9ae8b6bc4301f1b5411a5e2a6785 last_seen=2026-11-14 20:26:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:33:45) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:33:48 Airlock IAM 2026-11-14 23:33:51 Apache HTTP Server 2026-11-14 23:33:46 Jersey 3.1.10 2026-11-13 17:57:59 Liferay Portal 2026-11-10 04:43:19 ## paths method status size path exchange_id GET 504 936 / 01a1db00-caab-7624-a6f7-e067510e9377 GET 200 9085 /CSRFT759.js 01a1c3c2-d4cd-778e-b835-552dd1ea8ad5 GET 303 171 /api/jsonws 01a1c3c2-d5e2-7672-b548-400a70b2950d POST 303 180 /api/spring/portal 01a1c800-429e-72b3-aa27-037f3e28065d GET 303 123 /auth/login-oneshot 01a1db9d-462b-73aa-aaca-f2623380c3e1 GET 500 0 /auth/rest/public/application.wadl 01a1ce0b-9c62-724b-8e2b-15881fc7ee70 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29d-55ef-72d4-8ba2-fbdeec4f6b76 GET 200 3307 /auth/ui/app 01a1c3c2-d3c6-71bc-9533-242cb38c2745 GET 504 936 /ext-h2/ 01a1dbbe-2315-766d-a478-4dce1c81a03b GET 303 174 /group/mmag/ 01a1c3c2-d2c4-7365-9ac6-e4e76d38be38 GET 303 182 /osgi/system/console 01a1c3c2-d6eb-7698-87cd-87eb7901fc6d # https://vertriebsservice.baloise.de:9990 in_scope host_id=4dc1ce909409d819580fd0ada606aecb last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:33:53) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:33:55 Airlock IAM 2026-11-14 23:33:57 Apache HTTP Server 2026-11-14 23:33:54 Jersey 3.1.10 2026-11-15 00:06:41 Liferay Portal 2026-11-15 00:04:05 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f46-7ce2-93b0-ec632f080693 GET 303 171 /api/jsonws 01a1dc83-7fbb-7200-a869-cbd70006abe4 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1060-722c-8797-8ab05036bd81 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bc95-78d0-b0fa-33f1332a520f GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d461-7e71-8df7-303979c794fa GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d7c3-7eb9-a5d9-ee868e13109f GET 501 0 /auth/rest/public/jwks 01a1dc87-dc83-73ac-aafa-f5f7001db0a8 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-cfe4-7af9-9b8d-96cfbeeaa242 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c83c-7334-99ff-eb00efb76bc3 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-cbc3-7de8-8217-9783514f4d6a GET 200 3307 /auth/ui/app 01a1dc89-c487-7584-adca-a6c6fcbd8499 # https://vertriebsservice.baloise.de:12345 in_scope host_id=f64048132c6a2e9e21b76b03a5bee1d8 last_seen=2026-11-15 00:09:29 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:13:59) CloudFront-origin-facing alternate TLS listener for the canonical vertriebsservice.baloise.de Apache/Airlock IAM portal. Authentication-shaped requests enter the same Airlock session and one-shot login/error handoff as the canonical Liferay application. The complete IAM, Liferay, frontend and API route inventory is mapped on https://vertriebsservice.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:16:43 Airlock IAM 2026-11-14 23:16:47 Apache HTTP Server 2026-11-14 23:16:40 Jersey 3.1.10 2026-11-15 00:06:42 Liferay Portal 2026-11-15 00:04:07 ## paths method status size path exchange_id GET 303 171 /api/jsonws 01a1dc83-7f71-74e1-9316-bc7880227891 GET 303 123 /auth/login-oneshot 01a1db9d-4686-74cb-a6f3-6c30a0b917ad GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1190-730e-be5b-a173d000e80d GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bce2-7e00-81fb-df85c6ca8e2a GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-9e13-74f5-81c5-e93f4cb5dc1f GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-a22c-7ad9-8b21-28656dd36467 GET 501 0 /auth/rest/public/jwks 01a1dc87-dc29-7607-80f1-0c1640dfc3a5 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-998a-765c-968e-73a6be40a44b GET 200 209 /auth/rest/public/ui/languages 01a1dc89-909d-7a72-876c-83663473e584 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-94ea-7760-9266-c5aebab48f22 GET 200 3307 /auth/ui/app 01a1dc89-8b9d-720c-8ac0-de0c110192af ===== ORIGINS vertriebsservice.baloise.de ===== address status size alike sources note by name 303 294 https://vertriebsservice.baloise.de/group/mmag/ ===== HOST zeus-portal.baloise.de ===== # https://zeus-portal.baloise.de in_scope host_id=6755ac8510d04aa91c36d0b4ba397bae last_seen=2026-11-15 00:56:26 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 13:39:51) Residual Liferay Zeus portal behind Apache HTTP Server, Airlock Gateway and Airlock IAM. Root redirects to `/group/zeus`, but that portal entry and Liferay JSONWS, Axis, upload, Gogo, OSGi and Spring-remoting families enter the gateway-owned `/error_path/404.html` handoff instead of an authentication flow or Liferay backend. The location is still recognized by location-based IAM access and selects the generic `default` `PASSWORD_REQUIRED` flow, while direct selectors `portal_zeus` and `zeus` are inactive. The public IAM application remains available below `/auth/`: slashless `/auth` redirects there, then `/auth/` creates Airlock session and CSRF state before redirecting relatively to `ui/app`. `/auth/ui` similarly canonicalizes through `/auth/ui/` to `./app`, while `/auth/login` creates the same state and redirects directly to `/auth/ui/app/auth/application/access`. Its shared inventory contains 380 normalized REST templates and 390 method/path bindings across authentication, registration, 2FA/Cronto/OTP/FIDO/OATH/password/SSI, account-link, token/device, OAuth consent/session, remember-me, representation, migration, password-only, secret-question and language families. Previously served application WADLs identify Jersey 3.1.10; current GET requests to `/auth/rest/public/application.wadl` and `/auth/rest/oauth2/application.wadl` return empty HTTP 500 responses. The current shell links `/auth/ui/styles.aa4c4328f9bb7e9b.css` and `/auth/ui/assets/custom/js/iam-custom.af5b4c4473394040.js`. Its runtime defines 180 lazy chunks and 214 Angular route entries; the shared router composes to 199 concrete paths below `/auth/ui/app`, represented once on the canonical Mein Portal frontend. The host-specific export has seven text files: six core resources from the canonical 193-file Mein Portal IAM graph, plus the gateway maintenance page. No usable source maps are published. Real gateway content exists below `/error_path/`: `/error_path/404.html` is the shared multilingual branded 404 page; `/error_path/maintenance.html` is a separate 10,113-byte multilingual maintenance page with inline styling and an embedded logo; `/error_path/img/favicon.ico` is the shared favicon. Unlike the active portal hosts, this maintenance page does not load `maintenance_image001.png`. Alternate TLS listeners expose the same residual portal mapping and public IAM frontend through CloudFront origin-facing addresses. Airlock prevents disclosure of a Liferay or Airlock release string. The formerly public authentication, self-service, tech-client-registration and user-self-registration WADL routes now return empty HTTP 500 responses. Jersey 3.1.10 remains identified from the retained prior WADLs. ## tech technology version checked_at Airlock Gateway 2026-11-13 11:42:31 Airlock IAM 2026-11-13 11:42:30 Apache HTTP Server 2026-11-13 11:42:33 Jersey 3.1.10 2026-11-10 07:59:15 Liferay Portal 2026-11-13 00:22:59 ## paths (50 of 117; toadcli paths) method status size path exchange_id GET 303 288 / 01a1dc95-b404-7127-aec8-ddcdf9e9d62c GET 303 123 /%61pi/%61xis/Portal_ImageService 01a1ae52-c9e5-736d-a697-a6788b7d744e GET 303 123 /%61pi/axis/Portal_ImageService 01a1ae52-c5b8-7706-b740-0fc090c14cee GET 303 123 /./api/axis/Portal_ImageService 01a1ae89-6dba-73cf-9f85-a046630f27e2 GET 303 123 //api/axis/Portal_ImageService 01a1ae52-ce1c-76e9-89f6-ce38df0616b9 GET 200 9085 /CSRFT759.js 01a19ff9-8175-7210-bab3-e0980018bbad GET 303 123 /admin/rest/users 01a103c9-cbc0-76aa-aa66-7dceb6f2ce5e GET 303 123 /api/%61xis/Portal_ImageService 01a1ae52-c7cb-7404-b631-3bf7cfb3abd1 GET 303 123 /api/axis/Portal_ImageService 01a1ae4d-6ac5-72eb-b4d6-7a15781ec174 GET 303 123 /api/axis/Portal_UserService 01a1ae4d-6cd5-7500-9c69-90e47530ad71 GET 303 123 /api/axis/d023bab6e42b59a61980baca-control 01a1ae4d-6664-70b1-ba93-1cf79cb45114 GET 303 123 /api/axis;/Portal_ImageService 01a1ae52-cbfe-7787-af2d-626ca30778cc GET 303 123 /api/jsonws 01a1d248-b981-7263-957f-597ca16d8d30 GET 303 123 /api/jsonws/invoke 01a0fa4c-d968-750a-a070-91c4acd4743c OPTIONS 303 123 /api/liferay/do 01a1cb0b-4b1c-747f-99fa-dae5b0bd8eae POST 303 123 /api/secure/spring/portal 01a1c104-0953-7108-be60-d1a102437db7 POST 303 123 /api/spring/portal 01a1c7fd-aa60-729f-85c4-bad23d91715a GET 303 71 /auth 01a1d3d7-279c-71e3-a27c-10a5abc953c1 GET 303 123 /auth-admin/editConfig 01a1c335-0817-75c0-8314-104832ef72dc GET 303 123 /auth-admin/rest/users 01a103bc-fb79-7799-9f62-d6135216e0d7 GET 303 123 /auth-login/rest/public/maintenance-messages 01a1c345-b58e-7420-96ae-abc91748cec7 GET 303 123 /auth-servicecontainer/serviceContainer 01a1c335-7c7e-7076-915d-1e5b2351e815 GET 302 1 /auth/ 01a1d3d7-2ab8-7564-8527-a50ac9a60fd2 GET 303 123 /auth/WEB-INF/web.xml 01a1daf2-3ad4-7f3f-9c60-8cd00332afb8 GET 302 0 /auth/login 01a1d401-cce9-73a3-80f5-dd3f94149249 GET 303 123 /auth/login-oneshot 01a1db9d-4722-798f-a250-a49857fd55a6 GET 303 123 /auth/login-oneshot/ 01a1dcb4-9b7b-720f-af6f-608b4f727390 GET 500 0 /auth/rest/oauth2/application.wadl 01a1d248-d873-739b-ae02-e8cab2cede50 GET 500 0 /auth/rest/protected/application.wadl 01a1c499-872f-7630-8240-819dd828906d GET 406 132 /auth/rest/protected/application.wadl/x 01a1c499-9078-7208-b423-ebbfacecdd3b GET 500 0 /auth/rest/public/application.wadl 01a1d248-d67c-7640-8487-0a540e58fcf8 GET 406 132 /auth/rest/public/application.wadl/schema.xsd 01a1c477-1981-7457-ba27-b112e4b1c003 GET 500 0 /auth/rest/public/authentication/application.wadl 01a1d4b3-4bd3-70de-8035-fc5bdfc9934a GET 406 132 /auth/rest/public/authentication/application.wadl/x 01a1c49f-615e-769c-ba13-e21e6ca7e6db POST 500 132 /auth/rest/public/authentication/applications/EasyLogin/access 01a1da14-b243-7c95-89de-df96d7055543 POST 500 132 /auth/rest/public/authentication/applications/Easylogin/access 01a1da14-b1b6-7f32-89e2-29af4a744ea7 POST 401 663 /auth/rest/public/authentication/applications/antragsfreigabe/access 01a1c453-0478-7593-a44a-f265f0665a69 POST 401 519 /auth/rest/public/authentication/applications/bsi_crm/access 01a1c453-0852-772b-b5b5-07cba11ab6a3 POST 403 159 /auth/rest/public/authentication/applications/el_account_linking/access 01a1da14-b2bc-7c3c-8da1-af6b22dbe09d POST 403 159 /auth/rest/public/authentication/applications/el_account_linking2/access 01a1da14-b344-7164-806c-7bb964e9e79c POST 401 651 /auth/rest/public/authentication/applications/portal_ao/access 01a1c452-f1f6-71ce-95a8-7aecbf7443b8 POST 401 651 /auth/rest/public/authentication/applications/portal_mo/access 01a1c452-f6e4-70c7-a259-7bb3e043bc44 POST 401 651 /auth/rest/public/authentication/applications/portal_si/access 01a1c452-fabc-70da-8190-d3d59c62514f POST 401 645 /auth/rest/public/authentication/applications/sas_va/access 01a1c453-020f-71e9-bf16-2f8306ad2d2b POST 401 643 /auth/rest/public/authentication/applications/venta/access 01a1c452-ffab-74ae-930a-de987e0d5566 OPTIONS 200 0 /auth/rest/public/authentication/cronto/offline/ 01a1c4a0-c2b7-7313-8276-3641b43659af OPTIONS 200 0 /auth/rest/public/authentication/data/edit 01a1c486-e892-75b7-ac12-a51a69c6270f POST 401 521 /auth/rest/public/authentication/default-application/access 01a1a0da-ea72-720e-9d44-08c336a94b91 GET 405 132 /auth/rest/public/authentication/flow 01a1db78-5e08-7a6c-bafb-ab312c0b9519 POST 401 521 /auth/rest/public/authentication/location/access 01a1c453-e32e-77be-8e5d-9cec8dd01201 # https://zeus-portal.baloise.de:4401 in_scope host_id=b3426847ff396bd29abf3713f5ebd434 last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:13:54) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. Authentication-shaped requests enter the same Airlock session and one-shot login/error handoff as the canonical Liferay application. The complete IAM, Liferay, frontend and API route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:16:05 Airlock IAM 2026-11-14 23:16:12 Apache HTTP Server 2026-11-14 23:15:59 Jersey 3.1.10 2026-11-15 00:06:44 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f5d-76ef-b599-d759fef2d364 GET 303 123 /api/jsonws 01a1dc83-7fd8-75f8-91c9-b2190bf8c7b8 GET 303 123 /auth/login-oneshot 01a1db9d-4746-7f7e-b02a-5dc6999dfbb4 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-126b-77b1-9779-b5db18a5c518 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bcc4-7e05-9fb3-8d0f5cf38769 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d259-74a2-9fed-37480959bd7e GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d74a-7374-b89f-afd3e4a91783 GET 501 0 /auth/rest/public/jwks 01a1dc87-e4ee-77cf-8ba1-4659964dff57 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-cd86-70f3-8c44-8933fcb845f7 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c617-7be3-855b-8255355b5306 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-c920-78f9-b3e7-d39bf3ec1b98 GET 200 3307 /auth/ui/app 01a1dc89-c420-77ea-91b6-64d05d1acfce # https://zeus-portal.baloise.de:7443 in_scope whitelisting_bypass=cloudfront host_id=9a91a61aab4383c218da0616d4ef389f last_seen=2026-11-14 19:51:20 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:33:58) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:34:00 Airlock IAM 2026-11-14 23:34:01 Apache HTTP Server 2026-11-14 23:33:59 Jersey 3.1.10 2026-11-13 17:59:31 Liferay Portal 2026-11-10 05:08:36 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f64-727d-b814-fb64e540b3e4 GET 200 9085 /CSRFT759.js 01a1c3d9-0692-731d-8473-158f165b3c00 GET 303 123 /api/jsonws 01a1c3d9-075f-7513-aaac-76b63fce32f1 GET 303 123 /auth/login-oneshot 01a1db9d-47a3-79c1-9a9d-87369e7890f4 GET 500 0 /auth/rest/oauth2/application.wadl 01a1ce13-341c-7091-a885-3e4e42b7169f GET 500 0 /auth/rest/public/application.wadl 01a1ce0e-02cc-728f-8d57-c3f479fcfe10 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-fb49-7602-ab08-f5d3bbbc5ed2 GET 200 3307 /auth/ui/app 01a1c3d7-e099-7045-9401-aae45dfd6a61 GET 303 123 /group/zeus 01a1c3d9-0614-70d0-950c-0b4d657197e2 # https://zeus-portal.baloise.de:7980 in_scope whitelisting_bypass=cloudfront host_id=e55c197576680211c812a2d0df18dcd9 last_seen=2026-11-14 19:51:20 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:34:02) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:34:05 Airlock IAM 2026-11-14 23:34:06 Apache HTTP Server 2026-11-14 23:34:04 Jersey 3.1.10 2026-11-13 17:59:39 Liferay Portal 2026-11-10 05:08:43 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f5b-72f7-afa2-b087a7119242 GET 200 9085 /CSRFT759.js 01a1c3d9-06e6-71d7-b3f4-4534e5b52e05 GET 303 123 /api/jsonws 01a1c3d9-0760-76bc-995b-8744b5427ba9 GET 303 123 /auth/login-oneshot 01a1db9d-47fd-729a-a3d4-e408fb78adcb GET 500 0 /auth/rest/public/application.wadl 01a1ce0e-2e0b-77b2-bb3a-1d6936bc4b70 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-fc2a-71dd-97c2-98695dae20cc GET 200 3307 /auth/ui/app 01a1c3d7-e9aa-7009-b5ad-b2754e88dd64 GET 303 123 /group/zeus 01a1c3d9-0728-72bc-8742-d4e0cfa8e57b # https://zeus-portal.baloise.de:8080 in_scope whitelisting_bypass=cloudfront host_id=884fd7e4e6f74acf86c3d7d29f4d1bbc last_seen=2026-11-14 19:51:20 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:34:07) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:34:10 Airlock IAM 2026-11-14 23:34:11 Apache HTTP Server 2026-11-14 23:34:08 Jersey 3.1.10 2026-11-13 17:59:46 Liferay Portal 2026-11-10 04:43:21 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f64-70e9-87f2-0d466ee23749 GET 200 9085 /CSRFT759.js 01a1c3c2-bf38-77ee-af40-0d64c3e4669f GET 303 123 /api/jsonws 01a1c3c2-c06b-7658-a78d-a24d3d1d6b54 POST 303 123 /api/spring/portal 01a1c800-45bb-7784-a3ad-406d8e4edb74 GET 303 123 /auth/login-oneshot 01a1db9d-486d-794f-aab0-f397c989d376 GET 500 0 /auth/rest/public/application.wadl 01a1ce0e-5796-77b5-94ab-90c25b8c4277 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29c-ff1f-7133-a0dc-a3d1bcf2ba6d GET 200 3307 /auth/ui/app 01a1c3c2-be15-776a-9cc9-bf16f5bf7caf GET 303 123 /group/zeus 01a1c3c2-bcd1-71d9-8ffe-3593e6124e41 GET 303 123 /osgi/system/console 01a1c3c2-c19a-7148-8687-67a42a8bc71c # https://zeus-portal.baloise.de:8343 in_scope whitelisting_bypass=cloudfront host_id=4a1f32b9215b1201d0d2bd0de82f2960 last_seen=2026-11-14 19:51:20 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:34:13) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:34:17 Airlock IAM 2026-11-14 23:34:19 Apache HTTP Server 2026-11-14 23:34:15 Jersey 3.1.10 2026-11-13 17:59:50 Liferay Portal 2026-11-10 05:08:44 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f5f-7d57-b3d2-ea07061b83e1 GET 200 9085 /CSRFT759.js 01a1c3d9-0695-77e1-b6b4-64acf1c0c1df GET 303 123 /api/jsonws 01a1c3d9-0757-741f-8ed8-3c3d469f7d9d GET 303 123 /auth/login-oneshot 01a1db9d-4893-7fa5-ab28-38283a1ebf9b GET 500 0 /auth/rest/public/application.wadl 01a1ce0e-80de-771d-8e6d-97338ec20ea8 GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29d-01bc-721c-b468-9293c53a2bca GET 200 3307 /auth/ui/app 01a1c3d7-eb51-7170-a8f6-8639d936b03f GET 303 123 /group/zeus 01a1c3d9-0742-7790-8ec5-33d030144521 # https://zeus-portal.baloise.de:8443 in_scope whitelisting_bypass=cloudfront host_id=201d5676c5702eb69947be6395c05f7e last_seen=2026-11-14 20:26:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:34:22) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:34:26 Airlock IAM 2026-11-14 23:34:28 Apache HTTP Server 2026-11-14 23:34:24 Jersey 3.1.10 2026-11-13 17:59:53 Liferay Portal 2026-11-10 03:46:35 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f6f-7310-83b4-667b1b046bbb GET 200 9085 /CSRFT759.js 01a1c38e-0b4f-75f2-922d-9b663336e05e GET 303 123 /api/jsonws 01a1c38e-0812-72f5-999d-2543ce5f6f8e POST 303 123 /api/spring/portal 01a1c800-46d7-7663-8c8f-0dadea98a05b GET 303 123 /auth/login-oneshot 01a1db9d-48ef-7dc6-8d4a-9085616bdb71 GET 500 0 /auth/rest/public/application.wadl 01a1ce0e-a9a8-7237-8afd-199c9e3ab92d GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29d-02af-755e-8e7e-51821ebbfc42 GET 200 3307 /auth/ui/app 01a1c38f-6669-710f-bc43-e5c55c4ba9db GET 504 936 /ext-h2/ 01a1dbbe-2398-74bc-a1b7-ee298de81d78 GET 303 123 /group/zeus 01a1c38e-05ab-77a9-92e9-01bd6a2079a7 GET 303 123 /osgi/system/console 01a1c38e-0c62-75a5-a32f-daad10d9f7fe # https://zeus-portal.baloise.de:8700 in_scope host_id=0e8dc11505f4822bc16c1c1b8778ab04 last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:34:29) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:34:34 Airlock IAM 2026-11-14 23:34:36 Apache HTTP Server 2026-11-14 23:34:32 Jersey 3.1.10 2026-11-15 00:06:45 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f6e-7572-93f3-5792c300a90e GET 303 123 /api/jsonws 01a1dc83-7fa9-7779-b725-8371248f25b4 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-11af-7a45-be97-13b3233d835e GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bcb9-7a3f-8668-e4de1c2b81c0 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d45a-796b-a7ec-fb7ac61d3860 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d86f-70b0-a8aa-367eebb309c3 GET 501 0 /auth/rest/public/jwks 01a1dc87-dd35-72be-88f3-0887abfcb09a GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-d075-74a4-acf3-7ce73037fa38 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c846-7fca-9fcd-e887d17eb4d3 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-cc99-72ce-8607-39fb722464ec GET 200 3307 /auth/ui/app 01a1dc89-c44c-7b12-8367-e98cbbe21475 # https://zeus-portal.baloise.de:8701 in_scope host_id=79204c76231d8d43e67b6ee98fd1c599 last_seen=2026-11-15 00:09:44 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:34:37) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:34:39 Airlock IAM 2026-11-14 23:34:40 Apache HTTP Server 2026-11-14 23:34:38 Jersey 3.1.10 2026-11-15 00:06:46 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f70-71a7-ac85-a25095fc45fd GET 303 123 /api/jsonws 01a1dc83-7fcd-7792-aabe-343d26dc07ee GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-124f-7340-91ad-3a58e20c5987 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bd9e-7e0f-ac0f-ec62c5a4b150 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d874-788d-b352-6e50b76a3bc6 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-da18-7276-8f9b-5d35164f41d9 GET 501 0 /auth/rest/public/jwks 01a1dc87-e522-7c6f-8538-456c62c4b96e GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-d438-7ed8-9f88-61a4ec8a1b46 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c965-7891-8c80-4408963c11d6 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-cdfd-742d-b616-521d5d527280 GET 200 3307 /auth/ui/app 01a1dc89-c500-7d7c-8398-a522acedb8e9 # https://zeus-portal.baloise.de:8765 in_scope host_id=edcb1810670c2f97e8e3b0e62a0dc9a9 last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:34:41) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:34:44 Airlock IAM 2026-11-14 23:34:46 Apache HTTP Server 2026-11-14 23:34:43 Jersey 3.1.10 2026-11-15 00:06:47 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f6e-7bc4-b2fc-a315931208ae GET 303 123 /api/jsonws 01a1dc83-7fb8-7768-aafa-8421917c862f GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-121a-7462-9ecb-6e7c82aa83df GET 500 0 /auth/rest/public/application.wadl 01a1dc85-c4da-756b-8b0a-5a0872671704 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d4fb-71f8-9328-1e9762ee9f68 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d84f-707c-9cb5-adf041b4f9e3 GET 501 0 /auth/rest/public/jwks 01a1dc87-dc86-79e6-a74d-b1c03e033cbf GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-d1b0-7618-923a-bd9e798ec9b8 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c8ea-783f-8535-7ab726f04080 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-cd1d-7716-828c-8a0f70254597 GET 200 3307 /auth/ui/app 01a1dc89-c475-7b61-91d9-66dab12e98ff # https://zeus-portal.baloise.de:8800 in_scope host_id=bca2cde64971ebe083208fdebb2d5454 last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:34:48) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:34:51 Airlock IAM 2026-11-14 23:34:52 Apache HTTP Server 2026-11-14 23:34:50 Jersey 3.1.10 2026-11-15 00:06:49 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f68-7356-8a4d-ed9073bc602b GET 303 123 /api/jsonws 01a1dc83-7f51-7590-a3fc-d36c8d883c3f GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1236-7393-a5ac-6628d823f30b GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bc9d-7cc6-bc4e-0eb1b847c140 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d665-7c10-baf8-3b74d6879ac4 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d9a5-7bce-ae65-890e3278f757 GET 501 0 /auth/rest/public/jwks 01a1dc87-dc9b-76d6-addf-d65b53b1c4af GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-d1f3-72d7-a5b5-bb281aeee8dd GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c8bb-7ffe-a453-f79c2d690261 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-cd24-738f-8a9b-c7a5542d2515 GET 200 3307 /auth/ui/app 01a1dc89-c468-7208-8be9-c44f1eb2495e # https://zeus-portal.baloise.de:8801 in_scope host_id=0394b9a7c05537363b012a436c2ae393 last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:34:54) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:34:56 Airlock IAM 2026-11-14 23:34:57 Apache HTTP Server 2026-11-14 23:34:55 Jersey 3.1.10 2026-11-15 00:06:50 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f6d-7a2f-9f72-50dde5bcb581 GET 303 123 /api/jsonws 01a1dc83-7f62-700b-8b93-a37c750231ec GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1243-7015-8081-e8c3b8962849 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-bcb3-7067-9031-7f6f5342f930 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d502-773e-bce4-66905be0fedb GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d8d1-7041-9f71-f86b80679d99 GET 501 0 /auth/rest/public/jwks 01a1dc87-dcc5-710a-aed6-dabeaaf507d3 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-d09d-7080-848e-b1669bd677da GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c89d-754f-8787-bb91604237a2 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-ccdd-71ed-b9f0-67af16feccee GET 200 3307 /auth/ui/app 01a1dc89-c4fe-7a95-8ed9-06df1c9c019e # https://zeus-portal.baloise.de:8888 in_scope host_id=3d581fe0b9c1254f4ad587c1a8a8221d last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:34:58) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:35:00 Airlock IAM 2026-11-14 23:35:02 Apache HTTP Server 2026-11-14 23:34:59 Jersey 3.1.10 2026-11-15 00:06:51 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f74-7e1b-bd38-d425cf7382d6 GET 303 123 /api/jsonws 01a1dc83-7feb-72db-8adb-e75268b608f9 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-12db-7334-afff-8be57688329e GET 500 0 /auth/rest/public/application.wadl 01a1dc85-c308-7d9b-8bef-7b9a6b6f07dc GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d5d2-784c-991b-be082e642b89 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d8dc-75f1-8a35-6212a68005f7 GET 501 0 /auth/rest/public/jwks 01a1dc87-e482-7346-82bc-6da131ba5d48 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-d297-75f6-be67-247b43135e98 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c8ef-71ab-bec8-cc7167223f61 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-cdc8-709f-b842-2738d434beab GET 200 3307 /auth/ui/app 01a1dc89-c4b8-7be9-ba98-ca714f6ac88a # https://zeus-portal.baloise.de:8999 in_scope host_id=3825bd9f49ee04b517f4e5e73c6f57f6 last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:35:04) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:35:06 Airlock IAM 2026-11-14 23:35:08 Apache HTTP Server 2026-11-14 23:35:05 Jersey 3.1.10 2026-11-15 00:06:53 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f6a-7e28-9e20-36068d589237 GET 303 123 /api/jsonws 01a1dc83-7fe6-7133-a140-32b7984abd36 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-11bf-71bb-a2cd-a075f945a763 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-c4c7-70b2-97d8-efd2a6d9edeb GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d655-7ed3-9b62-ae31631821f3 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d9a6-74ca-bee6-57c08cf5acd8 GET 501 0 /auth/rest/public/jwks 01a1dc87-e49a-7b1b-bb48-63588dcb1acb GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-d27b-7c69-a266-e3aae4d589ac GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c8f6-70fc-b2fc-f0f9446c2475 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-ce8c-7b4e-b7fc-d8b1c08c462c GET 200 3307 /auth/ui/app 01a1dc89-c491-74af-85ef-5b0da6b97f37 # https://zeus-portal.baloise.de:9000 in_scope host_id=4d622df86a9f09c0faa9827ee85a1aaa last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:35:09) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:35:11 Airlock IAM 2026-11-14 23:35:14 Apache HTTP Server 2026-11-14 23:35:10 Jersey 3.1.10 2026-11-15 00:06:54 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f71-74f2-855e-208a0b143d34 GET 303 123 /api/jsonws 01a1dc83-7f6d-70ad-8414-6d3dbf529354 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-11da-748e-8ed4-5c32008f053f GET 500 0 /auth/rest/public/application.wadl 01a1dc85-c43b-7e34-b6fb-a558ed67d188 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d58a-7112-b3a5-5b3b1facfd04 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d8a4-78df-831b-814ce378a16f GET 501 0 /auth/rest/public/jwks 01a1dc87-e48f-7aab-962b-138c9d3db784 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-d0b8-7b0c-b323-6e77c5d74ec5 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c85a-7402-b22b-bc0a36b33f94 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-cc7f-71ef-8858-e8eb75280f7d GET 200 3307 /auth/ui/app 01a1dc89-c4b1-7523-a18e-0b68c217d7c2 # https://zeus-portal.baloise.de:9080 in_scope host_id=5d112f793af12e209cd970405fa045c6 last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:35:15) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:35:18 Airlock IAM 2026-11-14 23:35:20 Apache HTTP Server 2026-11-14 23:35:17 Jersey 3.1.10 2026-11-15 00:06:55 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f70-7259-8174-09cbd0133888 GET 303 123 /api/jsonws 01a1dc83-8159-78ed-8ff3-7a2b8e365475 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-12c7-7db9-a694-d100647e6f82 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-c4bc-7ca0-88fc-4df4d2bddcd6 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d387-71ab-b585-f22f72513639 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d6a2-7209-b313-1e950b8882da GET 501 0 /auth/rest/public/jwks 01a1dc87-e4ff-78fd-a79b-7364254b77d8 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-cff5-71fb-afe8-dc6927d26556 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c8c1-782b-992e-492a2a7a0892 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-cc36-7c5d-ba81-ba5b9a895c8f GET 200 3307 /auth/ui/app 01a1dc89-c4f0-7a11-b29b-e82f64bf2457 # https://zeus-portal.baloise.de:9443 in_scope whitelisting_bypass=cloudfront host_id=0c8f9e2a8b4fc594c70fbabfa89a5411 last_seen=2026-11-14 20:26:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:35:21) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:35:24 Airlock IAM 2026-11-14 23:35:26 Apache HTTP Server 2026-11-14 23:35:23 Jersey 3.1.10 2026-11-13 17:59:57 Liferay Portal 2026-11-10 04:43:23 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f68-762f-a261-d766ba20a521 GET 200 9085 /CSRFT759.js 01a1c3c2-dc1c-7420-a059-6b6543c14de2 GET 303 123 /api/jsonws 01a1c3c2-dd2f-7317-876e-176c085e3ec2 POST 303 123 /api/spring/portal 01a1c800-47d1-71fb-8490-77acf2fbd588 GET 303 123 /auth/login-oneshot 01a1db9d-491c-74b8-9694-d630027d3020 GET 500 0 /auth/rest/public/application.wadl 01a1ce0e-d2c1-7641-ac0e-a4569ac6786e GET 200 32193 /auth/ui/3rdpartylicenses.txt 01a1d29d-0596-77c1-85dc-67352e29aa05 GET 200 3307 /auth/ui/app 01a1c3c2-db0a-76ec-94be-c7f5f681a808 GET 504 936 /ext-h2/ 01a1dbbe-23ef-71a8-b5b3-7f85cc84e270 GET 303 123 /group/zeus 01a1c3c2-d9f4-73a1-bde8-e2bc380de9f7 GET 303 123 /osgi/system/console 01a1c3c2-de48-75c3-bf1a-cf1154510e6b # https://zeus-portal.baloise.de:9990 in_scope host_id=16b6f94d6012076ea82feae5505b021d last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:35:27) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. /auth/ui/app serves the same 3,307-byte IAM SPA shell and session/CSRF state as the canonical origin. The complete IAM, frontend and portal-specific route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:35:32 Airlock IAM 2026-11-14 23:35:35 Apache HTTP Server 2026-11-14 23:35:29 Jersey 3.1.10 2026-11-15 00:06:56 ## paths method status size path exchange_id GET 504 936 / 01a1db01-3f70-75cf-93ed-73789ec3ba9d GET 303 123 /api/jsonws 01a1dc83-800a-720a-9dbd-95a52cd2d223 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-1350-7f31-b497-ebcf3dfb4431 GET 500 0 /auth/rest/public/application.wadl 01a1dc85-c53f-7d57-a683-9edeabab8110 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d659-7f8f-8b43-ff6f27e530a9 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d96b-75f0-921d-99adc94f9492 GET 501 0 /auth/rest/public/jwks 01a1dc87-e451-7833-a4be-f096684a6b0f GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-d1be-7251-8e59-2bd6b92f12ff GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c92a-70a3-87ac-aa09bc4dbe13 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-cd1c-7dc0-8680-18476b874918 GET 200 3307 /auth/ui/app 01a1dc89-c50f-7594-aab4-637f0858267f # https://zeus-portal.baloise.de:12345 in_scope host_id=1119a6d83c321962258996e312144064 last_seen=2026-11-15 00:09:43 dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:13:55) CloudFront-origin-facing alternate TLS listener for the canonical zeus-portal.baloise.de Apache/Airlock IAM portal. Authentication-shaped requests enter the same Airlock session and one-shot login/error handoff as the canonical Liferay application. The complete IAM, Liferay, frontend and API route inventory is mapped on https://zeus-portal.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:16:18 Airlock IAM 2026-11-14 23:16:21 Apache HTTP Server 2026-11-14 23:16:16 Jersey 3.1.10 2026-11-15 00:06:57 ## paths method status size path exchange_id GET 303 123 /api/jsonws 01a1dc83-81be-771f-b95c-5715096c2f87 GET 303 123 /auth/login-oneshot 01a1db9d-494b-7d4d-ad27-9c123e0706c0 GET 500 0 /auth/rest/oauth2/application.wadl 01a1dc88-12cb-781c-84db-4bd5a9fcb76e GET 500 0 /auth/rest/public/application.wadl 01a1dc85-c4a5-7900-bea5-a80c49edffb7 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc89-d4e5-7036-a19d-c04555fda9bf GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc89-d8e8-7fb7-85bc-ce75d1088944 GET 501 0 /auth/rest/public/jwks 01a1dc87-e490-769a-bbb4-60a9278d6d18 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc89-cfd3-7834-8843-6010b7f3c760 GET 200 209 /auth/rest/public/ui/languages 01a1dc89-c87e-70d1-9ce6-ae237511ad98 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc89-cb7d-7dc8-8f60-e3e17b3e4584 GET 200 3307 /auth/ui/app 01a1dc89-c497-7aee-b953-dc5d131239c1 ===== ORIGINS zeus-portal.baloise.de ===== address status size alike sources note by name 303 288 https://zeus-portal.baloise.de/group/zeus