=== creds ===
credential_id	type	label	principal	host	role	status	endpoint	origin	expires_at	updated_at
shared-github-a	shared	GitHub account A (dwbzn-h14-tp82426)	dwbzn-h14-tp82426	github		active		shared		2026-11-15 00:50:19
01a1db99-068e-77ca-8ddf-9b8192cf008f	password	Fastly developer-plan research account (no payment method)	bugbounty-fastly-public-161519--3oh@9b.au	manage.fastly.com	customer owner	active	https://manage.fastly.com/	Self-registered intended Fastly account with exact account-name word bugbounty on 2026-11-14; email confirmed; pricing_plan=developer; API and console service/domain operations remain platform-usage/payment-method gated and no payment details were supplied		2026-11-14 19:46:41
01a1db72-4849-77f3-85ba-190833df7cdb	password	Flixcheck trial administrator (bugbounty file-JWT harness)	bugbounty-file-190222--3oh@9b.au	app.flixcheck.com	trial account administrator	active	https://app.flixcheck.com/portal/login	self-registered during authorised testing; account name includes bugbounty		2026-11-14 19:04:22
01a1daf8-72ec-74ca-8fdb-de2029be6a7d	password	Flixcheck trial administrator (bugbounty self-registration)	bugbounty-fxreg114747--3oh@9b.au	app.flixcheck.com	trial account administrator	active	https://app.flixcheck.com/portal/login	self-registered during authorised testing; account name includes bugbounty		2026-11-14 16:51:17
01a1dae1-c934-7639-8057-a87e4d8098ba	password	Fastly free-plan research account (no payment method)	bugbounty-fastly-free-162207--3oh@9b.au	manage.fastly.com	customer owner	active	https://manage.fastly.com/	Self-registered intended Fastly account with exact account-name word bugbounty on 2026-11-14; email confirmed; plans=free; platform use remains credit-card gated and no payment method was supplied		2026-11-14 16:26:32
shared-apple-a	shared	Apple Account A	dwbznbounty@gmail.com	apple		challenged		shared		2026-11-14 15:09:09
shared-microsoft-a	shared	Microsoft work account A: Global Administrator of our Entra tenant for 9b.au	2tb@9b.au	microsoft		locked		shared		2026-11-14 14:19:38
shared-microsoft-b	shared	Microsoft work account B: ordinary user in our Entra tenant for 9b.au	bugbounty-pbi2--31q@9b.au	microsoft		challenged		shared		2026-11-14 13:24:17
01a1c6f3-cd0e-7023-b98f-0b769c788371	oauth_client	Airlock IAM trial config upload/activate client	2422828a-9a70-4bf8-b0c5-26fce94dbbff	manage.airlock.cloud	CONFIG_UPLOAD CONFIG_ACTIVATE	active	https://auth.airlock.cloud/login/rest/oauth2/authorization-servers/airlock-console/token	Created through intended Airlock Console on owned trial tenant		2026-11-10 19:33:48
01a1c6f3-c52c-7629-ac2c-64ad9523b867	password	Airlock IAM trial ordinary user for ESP signing oracle	espuser--3bh@9b.au	login-j61hrn.ch-1.airlock.cloud	ordinary portal user	active	https://login-j61hrn.ch-1.airlock.cloud/login	Created in owned trial Adminapp for fixed-key encoder testing		2026-11-10 19:33:46
01a1c6f3-bfe4-70cc-ab5c-ca21d9dc92f1	password	Airlock IAM SaaS trial owner for ESP fixed-key research	airlocktrial--3bh@9b.au	manage.airlock.cloud	trial organization owner	active	https://auth.airlock.cloud/login	Self-registered intended Airlock IAM as a Service trial on 2026-11-10		2026-11-10 19:33:45
shared-google-a	shared	Google account A	dwbznbounty@gmail.com	google		challenged		shared		2026-11-10 00:13:13
shared-microsoft-personal-a	shared	Microsoft personal account A (outlook.com)	dwbznbounty@outlook.com	microsoft		challenged		shared		2026-11-09 23:01:06
cred-1d4516f308d74b2d9b63a73243ee6899	password	DomainJoinCredential for WebBA server SMB cleanup	BALGROUPIT\L006440	svw-de-wbbap601.balgroupit.com	DomainJoinCredential	insufficient_privilege	smb://svw-de-wbbap601.balgroupit.com/D$	user_supplied		2026-10-04 00:22:43
=== registration host ===
# https://mein-portal-registrierung.baloise.de  in_scope  host_id=807e86c9e799d71322ed7d364fb6be9d  last_seen=2026-11-15 01:31:07
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-13 16:19:49)
Apache HTTP Server and Airlock Gateway front an Airlock IAM self-service tenant. Direct `/auth` redirects to `/auth/`, which creates Airlock session and CSRF state before redirecting relatively to `ui/app`; `/auth/ui` likewise canonicalizes through `/auth/ui/` to `./app`. `/auth/ui/app` and nested SPA paths serve the 3,307-byte Angular 19.1.2 shell, as declared by the rendered `IAM-LOGINAPP` root. Its main bundle also embeds Lodash 4.17.21, Mustache 4.2.0 and Esprima 1.2.2; these are client dependencies rather than the Airlock IAM server release. Browser state uses `AL_SESS-S` and `CSRFT759-S`, with the CSRF value mirrored in `X-CSRFT759`; state-changing requests also use `X-Same-Domain: 1`. HEAD and OPTIONS on the shell are intercepted and redirect to `/error_path/400.html` rather than returning the SPA. The gateway publishes branded HTML at `/error_path/400.html`, `/error_path/403.html` and `/error_path/maintenance.html`; the maintenance document is directly readable with HTTP 200.

The client exposes registration, password-reset, authentication, protected-management, OAuth-session and error routes. Public APIs are grouped below `/auth/rest/public/authentication/*`, `/self-service/*` and `/user-self-registration/*`; protected account and self-service handlers are below `/auth/rest/protected/self-service/*`. No active user-self-registration selector is configured: the known default, registration, registrierung, user-registration, mein-portal, easylogin and venta selectors return JSON:API 501 or 404. Password-reset-init is active and selects a `public-self-service.session` in `USERNAME_REQUIRED` state. Protected requests without the matching CSRF state return JSON:API `CSRF_HEADER_MISSING`.

The IAM route inventory contains 380 normalized REST templates and 390 method/path bindings. All 390 canonical bindings are represented on this tenant with harmless anonymous requests: 70 GET, 305 POST, 12 DELETE and three PATCH operations. It covers authentication and registration; Airlock 2FA, Cronto, OTP, FIDO, OATH/VASCO and matrix flows; password, SSI, selection, acknowledgement and identity handlers; protected account-link, token/device, OAuth consent/session, remember-me and representation operations; and public migration, password-only, secret-question and language handlers. Jersey 3.1.10 was identified by previously published application WADLs; their current public and OAuth2 roots return empty HTTP 500 responses. GET `/auth/rest/public/baloise/saml2/transform` now returns JSON:API 405, while OPTIONS is an empty 200 with `Allow: POST,OPTIONS`; POST remains the method-bound `transformToSsoTicket` handler consuming form-encoded `context` and `SAMLResponse`.

The current shell links `/auth/ui/styles.aa4c4328f9bb7e9b.css` and `/auth/ui/assets/custom/js/iam-custom.af5b4c4473394040.js`. The custom layer registers page hooks for Airlock page IDs `iamAuthPassword` and `iamApplicationPortal`: it relocates the public-self-service block beside the additional-authentication target, assigns translated placeholders, exposes the application-portal support modal and chooses external support copy when the URL matches `baloise.de`, `ext-login` or another `ext` form. A global hook trims whitespace from pasted or blurred input values. The PWA manifest at `/auth/ui/assets/custom/manifest/manifest.json` names “IAM Login App”, starts at `/auth/ui/app` and scopes the `/auth/ui/` tree. Its runtime defines 180 lazy chunks, all now captured on this origin. The shared Angular router has 214 entries and 199 concrete paths below `/auth/ui/app`. All 213 requestable route templates are represented in traffic: 212 nested UI paths serve the same 3,307-byte shell, `/auth/ui` canonicalizes by redirect, and `/auth/ui/index.html` is not installed on this tenant. Its principal state trees are `/auth/flow/{flowId}`, `/registration/flow/{flowId}`, `/self-service/flow/{flowId}` and `/protected/flow/{flowId}`, with nested Airlock 2FA, Cronto, FIDO, OTP, SSI, OAuth2/SAML2, registration-data, password-change, representation and token/device branches. The host traffic export contains 259 text entries: 194 true frontend resources (188 JavaScript files, four JSON files and two stylesheets), one maintenance page, and 64 encoded nested paths that are 3,307-byte shell responses rather than assets. The shared application graph remains byte-identical to the canonical Mein Portal IAM frontend. The older `styles.90e9c778ba9db92e.css` path now returns 404; `iam-custom.423c915e9e5fba59.js` remains served but is byte-identical to the linked file. No usable source maps are published. Direct access and Azure Functions, CloudFront, GCP, Lambda and Vercel return the same `/auth/ui/` application redirect; Cloudflare receives only the Airlock 400 handoff, so no route provides additional access and no source-address allowlist is indicated.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-13 11:42:47
Airlock IAM		2026-11-13 11:42:46
Apache HTTP Server		2026-11-13 11:42:49
Jersey	3.1.10	2026-11-10 07:59:21
## paths (50 of 1404; toadcli paths)
method	status	size	path	exchange_id
GET	303	297	/	01a1dc3d-c67f-7e3b-85ee-857f6df1f2da
GET	200	9085	/CSRFT759.js	d4d23ebc45c96c825c60eaa9284609ad
GET	303	123	/admin/rest/users	01a103c9-bd15-7290-98c5-9d8cb9f613c4
POST	303	123	/api/liferay/do	01a1dcd1-06a0-792c-8234-a2bf97950454
POST	400	266	/api/spring/portal	01a1dcd4-5de0-77d4-a735-35de433ed4d7
GET	303	71	/auth	01a1d3d7-422f-742d-9109-819d27cf95d8
GET	303	123	/auth-admin/rest/users	01a103bd-05b9-71af-97ab-22ccbf743ada
GET	303	123	/auth-login/account-registration-confirmation	01a1cb3d-1acf-7172-a3b0-14ea49f84f69
GET	303	123	/auth-servicecontainer/startTask/	01a1d88f-a7ad-7657-9590-a1037667a7d5
GET	302	0	/auth/	01a1db80-79da-7a44-96ff-9fc1e7b89206
GET	303	123	/auth/WEB-INF/web.xml	01a1daf2-2cf1-723a-b8cb-fc78feeeca84
GET	303	123	/auth/account-registration-confirmation	01a1cb3d-1548-74fd-a26a-dd8cfdd7a4fd
GET	302	0	/auth/login	01a1dafa-b206-7987-8559-0b37190640ec
GET	303	123	/auth/login-oneshot	01a1db9d-04b6-7ce8-b4f2-16349fe6362f
GET	303	123	/auth/login-oneshot/	01a1dcb4-959f-7d14-a53c-16b864a94340
GET	500	0	/auth/rest/oauth2/application.wadl	01a1d47b-1d09-7f8f-be5e-dcf69b657b0b
GET	500	0	/auth/rest/oauth2/application.wadl/security-test-dwbzn-nonexistent	01a1d47b-1c9f-72a3-af38-e1f8692ad0b2
POST	400	161	/auth/rest/oauth2/authorization-servers/security-test-dwbzn-nonexistent/check-origin	01a1d47b-20b3-7a97-9751-d0f28b5f988c
POST	415	132	/auth/rest/oauth2/authorization-servers/security-test-dwbzn-nonexistent/introspect	01a1d47b-1cd9-7e3c-8a45-60b3ae4e5b15
POST	415	132	/auth/rest/oauth2/authorization-servers/security-test-dwbzn-nonexistent/par	01a1d47b-1c5e-79bc-9920-64c8016cc23a
POST	415	132	/auth/rest/oauth2/authorization-servers/security-test-dwbzn-nonexistent/revoke	01a1d47b-1c49-7947-b07a-a0fd453bb076
GET	400	161	/auth/rest/oauth2/authorization-servers/security-test-dwbzn-nonexistent/session	01a1d47b-1ccd-747f-a12a-b8ab06c17c28
PATCH	400	161	/auth/rest/oauth2/authorization-servers/security-test-dwbzn-nonexistent/session/custom-attributes	01a1d47b-1cb6-77a4-9a1a-1d8bc4e6459c
GET	400	161	/auth/rest/oauth2/authorization-servers/security-test-dwbzn-nonexistent/sessions	01a1d47b-1d16-7729-9a66-713995e5fd14
DELETE	400	161	/auth/rest/oauth2/authorization-servers/security-test-dwbzn-nonexistent/sessions/security-test-dwbzn-nonexistent	01a1d47b-1cff-747b-a1e4-d7eb555480b7
POST	415	132	/auth/rest/oauth2/authorization-servers/security-test-dwbzn-nonexistent/token	01a1d47b-1cf8-77c3-8c0c-5a0c9cf968b0
GET	405	132	/auth/rest/oauth2/authorization-servers/test/check-origin	01a1c1fb-19d1-7328-bf3f-701b531a3b78
GET	500	0	/auth/rest/protected/application.wadl	01a1d47b-24ac-7395-b410-38ffcf22c55b
GET	500	0	/auth/rest/protected/application.wadl/security-test-dwbzn-nonexistent	01a1d47b-24d0-7167-a94d-e04353bc20d0
GET	406	132	/auth/rest/protected/application.wadl/x	01a1c49a-2a7a-75bc-9534-d8354591b353
POST	303	104	/auth/rest/protected/my/password/change	01a1d47b-1d62-78e0-8ae7-65b06b3fb9d2
POST	303	104	/auth/rest/protected/my/secret-questions/security-test-dwbzn-nonexistent/answer	01a1d47b-1d06-7631-8e95-e643fccc23dc
GET	400	161	/auth/rest/protected/my/self	01a1d47b-260b-7b27-a4d8-aa8f6af8f339
POST	303	104	/auth/rest/protected/my/tokens/cronto/activation-letters/order	01a1d47b-1d1a-79ff-86bc-002a678f0cda
GET	400	161	/auth/rest/protected/my/tokens/cronto/devices	01a1d47b-24f4-7e36-af44-07a8f073e7f5
POST	303	104	/auth/rest/protected/my/tokens/cronto/devices/activation/complete	01a1d47b-1d45-7d03-bee3-4d54e9c15b06
POST	303	104	/auth/rest/protected/my/tokens/cronto/devices/activation/start	01a1d47b-1f06-7d6e-bc9d-1421c3719ee5
PATCH	303	104	/auth/rest/protected/my/tokens/cronto/devices/security-test-dwbzn-nonexistent	01a1d47b-1cc3-7ea7-b901-a52851f09e9c
POST	303	104	/auth/rest/protected/my/tokens/cronto/devices/security-test-dwbzn-nonexistent/enable	01a1d47b-1cdc-7ce5-8b2c-6fcaff33cb79
POST	303	104	/auth/rest/protected/my/tokens/cronto/devices/security-test-dwbzn-nonexistent/push/allow	01a1d47b-1e17-77c9-8960-ad0e8b55d06e
POST	303	104	/auth/rest/protected/my/tokens/device-tokens	01a1d47b-222c-7cbf-a417-f9f3fe652287
DELETE	303	104	/auth/rest/protected/my/tokens/device-tokens/security-test-dwbzn-nonexistent	01a1d47b-1d57-73d9-b35d-e62fc0881bef
GET	400	161	/auth/rest/protected/my/tokens/mtan	01a1d47b-2551-73fc-a9a7-7967f8e450ff
PATCH	303	104	/auth/rest/protected/my/tokens/mtan/security-test-dwbzn-nonexistent	01a1d47b-1d66-7d16-8ca0-21b9d5deda80
POST	303	104	/auth/rest/protected/my/tokens/mtan/security-test-dwbzn-nonexistent/start-number-change	01a1d47b-1d6e-7e68-ab3e-ba122325ad1e
POST	303	104	/auth/rest/protected/my/tokens/mtan/security-test-dwbzn-nonexistent/verify-number-change	01a1d47b-1e77-7fd9-969e-b2b4381c03ab
GET	400	161	/auth/rest/protected/secret-questions	01a1d47b-258d-7205-8a41-e58afa0821d6
GET	400	161	/auth/rest/protected/self-service/account-link/providers	01a1d47b-1d90-7c11-ac95-4324ae23d65c
POST	303	104	/auth/rest/protected/self-service/account-link/providers/security-test-dwbzn-nonexistent/link	01a1d47b-1d88-7f5b-973a-ee2b642dad3b
OPTIONS	401	132	/auth/rest/protected/self-service/account-link/providers/test/link	01a1c1fa-c14e-7234-879c-6c36c9f642f7

# https://mein-portal-registrierung.baloise.de:4401  in_scope whitelisting_bypass=cloudfront  host_id=cfce44bfa60e7561d60d869ffd8baeec  last_seen=2026-11-15 00:10:19
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-13 17:53:40)
CloudFront-origin-only alternate TLS listener for the Mein Portal registration Apache/Airlock Gateway and Airlock IAM application, using the same Jersey 3.1.10 REST layer as the canonical origin. The public `/CSRFT759.js` helper, `/auth/ui/app` Angular shell, current CSS/customization assets and public registration flow match port 443. Public and registration WADL roots reach Jersey but return the canonical empty HTTP 500 response. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route and frontend graph is identical to the canonical origin and is represented there.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-13 17:51:33
Airlock IAM		2026-11-11 15:52:36
Apache HTTP Server		2026-11-11 15:52:35
Jersey	3.1.10	2026-11-13 17:51:37
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df95-7cd3-aec6-8b95f8337c8d
GET	200	9085	/CSRFT759.js	01a1cb4e-5a65-7094-9a1c-a0ded7871ad8
GET	302	1	/auth/	01a1cb4c-a985-72c8-9713-e1a07f71f84a
GET	302	0	/auth/login	01a1cb4b-acb7-77b1-aaba-65fcf48a0f54
GET	504	936	/auth/login-oneshot	01a1db9d-79a3-7b0a-a4d7-9e34c624c597
GET	500	0	/auth/rest/oauth2/application.wadl	01a1cb4b-9b39-74d1-bb6d-793772f0bf3c
GET	400	161	/auth/rest/protected/my/self	01a1cb4b-a803-7493-9f12-13b530eb3926
GET	500	0	/auth/rest/public/application.wadl	01a1ce00-f5e5-70b5-aacb-7285a8692035
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-6005-78cd-9f5e-ab7bc92bc65d
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-63fa-76a8-bd09-6c255441f0fb
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5aee-72e8-8089-6394b05e32f6
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-5279-75b9-b044-8f72bf10d107
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-5681-7ef2-8268-39663f984303
GET	200	32193	/auth/ui/3rdpartylicenses.txt	01a1d29d-9033-70c4-a114-2fa095e43432
GET	200	3307	/auth/ui/app	01a1dc8a-4eef-702e-b397-e33f881a1fde
GET	200	3307	/auth/ui/app/this-path-must-not-exist-14269251	01a1cb4b-eab6-7771-b88e-3afcda1ff6c8
GET	303	123	/baloise-venta/a4j_3_2_1-SNAPSHOTorg/richfaces/renderkit/html/css/basic_classes.xcss/DATB/eAELXT5DOhSIAQ.sA18_.c1	01a1cb29-8beb-738c-89a1-346059b21253
GET	303	123	/baloise-venta/portal/loginsso.c1	01a1cb4b-b271-7653-a8d4-c3869e7edd59
GET	303	123	/ext-login/this-path-must-not-exist-14269251	01a1cb4b-f503-71fd-a467-de353df99711
GET	303	123	/ext-login/ui/app	01a1cb4b-f436-755d-9e03-4928d4ec5715
GET	303	123	/group/registrierung	01a1cb4b-af52-7310-b342-323dc58108f5
GET	303	123	/this-path-must-not-exist-14269251	01a1cb4b-e89a-73db-a714-9d39674eabc8
GET	404	132	/auth/rest/public/this-path-must-not-exist-14269251	01a1cb4b-f375-7581-9800-b922bd848a9e

# https://mein-portal-registrierung.baloise.de:7443  in_scope whitelisting_bypass=cloudfront  host_id=4a6259c78750fa43fcf3287a10fdf388  last_seen=2026-11-15 00:10:19
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-13 17:53:43)
CloudFront-origin-only alternate TLS listener for the Mein Portal registration Apache/Airlock Gateway and Airlock IAM application, using the same Jersey 3.1.10 REST layer as the canonical origin. The public `/CSRFT759.js` helper, `/auth/ui/app` Angular shell, current CSS/customization assets and public registration flow match port 443. Public and registration WADL roots reach Jersey but return the canonical empty HTTP 500 response. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route and frontend graph is identical to the canonical origin and is represented there.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-13 17:51:41
Airlock IAM		2026-11-10 05:08:44
Apache HTTP Server		2026-11-10 05:08:44
Jersey	3.1.10	2026-11-13 17:51:46
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df95-797f-9a22-86388a474e7f
GET	200	9085	/CSRFT759.js	01a1c3d9-078e-774b-b198-fe75e91aad5c
GET	504	936	/auth/login-oneshot	01a1db9d-79a0-701b-84db-1dcf9d07b2bd
GET	500	0	/auth/rest/oauth2/application.wadl	01a1ce12-d7e9-71f5-8f57-0cdf85d6515b
GET	500	0	/auth/rest/public/application.wadl	01a1ce01-3813-76b4-a7df-2980f585c5c8
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-6307-7872-a737-919dd128e3a9
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-6645-77ee-a65b-8b8f7d003d2a
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5eca-71d9-8fde-884d2abe6747
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-53d0-73b9-82f0-e14cd42419c7
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-58e6-758c-b312-0b8dcac76856
GET	200	32193	/auth/ui/3rdpartylicenses.txt	01a1d29d-9137-75e3-b59a-d756bd73e79d
GET	200	3307	/auth/ui/app	01a1dc8a-4f4c-7210-831f-4e663955e775

# https://mein-portal-registrierung.baloise.de:7980  in_scope whitelisting_bypass=cloudfront  host_id=b7286c54186004222d659a947f9fd9be  last_seen=2026-11-15 00:10:19
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-13 17:53:50)
CloudFront-origin-only alternate TLS listener for the Mein Portal registration Apache/Airlock Gateway and Airlock IAM application, using the same Jersey 3.1.10 REST layer as the canonical origin. The public `/CSRFT759.js` helper, `/auth/ui/app` Angular shell, current CSS/customization assets and public registration flow match port 443. Public and registration WADL roots reach Jersey but return the canonical empty HTTP 500 response. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route and frontend graph is identical to the canonical origin and is represented there.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-13 17:51:50
Airlock IAM		2026-11-10 05:08:50
Apache HTTP Server		2026-11-10 05:08:45
Jersey	3.1.10	2026-11-13 17:51:54
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df99-7097-990b-a62a65d52a4d
GET	200	9085	/CSRFT759.js	01a1c3d9-080f-717a-b995-cb7ceb1a5a28
GET	504	936	/auth/login-oneshot	01a1db9d-799e-7819-9846-66c8f0e05885
GET	500	0	/auth/rest/public/application.wadl	01a1ce01-7a73-71e5-9b2e-72821e78844e
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-5ed9-77d2-99a0-f460bc79b399
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-62fb-7e0d-8903-141f4c642f74
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-59ad-725d-8745-20ca03c40101
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-5094-7174-8600-4ab2581f2ff8
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-5509-76fb-858c-43a3b6c6541e
GET	200	32193	/auth/ui/3rdpartylicenses.txt	01a1d29d-945d-7731-bcd1-9b09b03163b4
GET	200	3307	/auth/ui/app	01a1dc8a-4ea0-7f41-b0a9-019cd9309664

# https://mein-portal-registrierung.baloise.de:8080  in_scope whitelisting_bypass=cloudfront  host_id=c028c4533dd3fcea98377e8e6c878409  last_seen=2026-11-15 00:10:19
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-13 17:53:55)
CloudFront-origin-only alternate TLS listener for the Mein Portal registration Apache/Airlock Gateway and Airlock IAM application, using the same Jersey 3.1.10 REST layer as the canonical origin. The public `/CSRFT759.js` helper, `/auth/ui/app` Angular shell, current CSS/customization assets and public registration flow match port 443. Public and registration WADL roots reach Jersey but return the canonical empty HTTP 500 response. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route and frontend graph is identical to the canonical origin and is represented there.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-13 17:51:56
Airlock IAM		2026-11-10 05:08:51
Apache HTTP Server		2026-11-10 05:08:51
Jersey	3.1.10	2026-11-13 17:51:58
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df8b-742e-9fa4-7880f5f1e25a
GET	200	9085	/CSRFT759.js	01a1c3d9-0a98-7640-a6d1-84c4558cd23c
GET	504	936	/auth/login-oneshot	01a1db9d-79ab-785c-bcae-63eb57143ddc
GET	500	0	/auth/rest/public/application.wadl	01a1ce01-bd53-75a3-a953-6dfa31df3e1a
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-6158-71b3-89da-c4bd75229710
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-6580-7410-8ea0-16277ae435d7
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5d00-70a2-8843-19c4a1539593
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-542e-71e7-98e9-2239690e8e8c
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-5913-7fc4-8c40-898bdf83621c
GET	200	32193	/auth/ui/3rdpartylicenses.txt	01a1d29d-974e-71da-885b-23eec79824a8
GET	200	3307	/auth/ui/app	01a1dc8a-4f1d-7b83-a191-735db07c0873

# https://mein-portal-registrierung.baloise.de:8343  in_scope whitelisting_bypass=cloudfront  host_id=853382a13eb98716aec8f5f474b55e8f  last_seen=2026-11-15 00:10:19
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-13 17:53:59)
CloudFront-origin-only alternate TLS listener for the Mein Portal registration Apache/Airlock Gateway and Airlock IAM application, using the same Jersey 3.1.10 REST layer as the canonical origin. The public `/CSRFT759.js` helper, `/auth/ui/app` Angular shell, current CSS/customization assets and public registration flow match port 443. Public and registration WADL roots reach Jersey but return the canonical empty HTTP 500 response. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route and frontend graph is identical to the canonical origin and is represented there.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-13 17:52:00
Airlock IAM		2026-11-10 05:08:51
Apache HTTP Server		2026-11-10 05:08:51
Jersey	3.1.10	2026-11-13 17:52:03
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df8f-7e46-97c4-0ac6591b92b4
GET	200	9085	/CSRFT759.js	01a1c3d9-0bec-7198-8f1a-7ddfe109a13a
GET	504	936	/auth/login-oneshot	01a1db9d-79b7-7931-a39c-2a760be0b1ff
GET	500	0	/auth/rest/public/application.wadl	01a1ce02-0070-7562-bc21-45629233df51
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-5fdf-79b1-810f-8cb06642e4dc
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-64c9-7796-8891-742bc836b168
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5bb2-7b52-9d0c-d306eacad384
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-52bd-708a-9c48-6b3194cfa67f
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-5720-7055-827b-9ac2a2e336c9
GET	200	32193	/auth/ui/3rdpartylicenses.txt	01a1d29d-9863-7437-81fe-ef92295117d1
GET	200	3307	/auth/ui/app	01a1dc8a-4ec3-7024-a808-3763c4bbbf21

# https://mein-portal-registrierung.baloise.de:8443  in_scope whitelisting_bypass=cloudfront  host_id=9d6aeafbfe8dec7a332e4872c524266a  last_seen=2026-11-15 00:10:50
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-13 17:54:02)
CloudFront-origin-only alternate TLS listener for the Mein Portal registration Apache/Airlock Gateway and Airlock IAM application, using the same Jersey 3.1.10 REST layer as the canonical origin. The public `/CSRFT759.js` helper, `/auth/ui/app` Angular shell, current CSS/customization assets and public registration flow match port 443. Public and registration WADL roots reach Jersey but return the canonical empty HTTP 500 response. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route and frontend graph is identical to the canonical origin and is represented there.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-13 17:52:06
Airlock IAM		2026-11-10 05:08:52
Apache HTTP Server		2026-11-10 05:08:51
Jersey	3.1.10	2026-11-13 17:52:13
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-6af3-73e9-8dc7-74f28301f4c2
GET	200	9085	/CSRFT759.js	01a1c3d9-0c71-7796-a1f6-fa180d537c04
GET	504	936	/auth/login-oneshot	01a1db9d-79a4-7a83-b4ef-e8081379285c
GET	500	0	/auth/rest/public/application.wadl	01a1ce02-42d8-7581-af45-5c0de065408a
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-dcbf-7dc3-90a8-6774879885fc
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-de12-70cc-a5f1-b5f420932809
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-dbb9-7b24-8b9e-2b80a8eaeb99
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-d991-7ae6-98ec-1bca87ab748d
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-daae-76fd-bb77-8ee3da33a234
GET	200	32193	/auth/ui/3rdpartylicenses.txt	01a1d29d-9a07-72bc-a069-9182991a54c7
GET	200	3307	/auth/ui/app	01a1dc8a-d88a-7b3e-ae09-6958c4be74e8

# https://mein-portal-registrierung.baloise.de:8700  in_scope  host_id=d2fc4524d7fd0815bfcab07dd2eee7c1  last_seen=2026-11-15 00:11:30
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-14 23:25:25)
CloudFront-origin-facing alternate TLS listener for the canonical Mein Portal Registrierung Apache/Airlock IAM self-service tenant. /auth/ui/app serves the same 3,307-byte Angular IAM shell and session/CSRF state as the canonical origin. The complete 390-binding REST method matrix, frontend chunks and shared UI route inventory are mapped on https://mein-portal-registrierung.baloise.de; this listener adds no distinct application surface.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-14 23:25:28
Airlock IAM		2026-11-14 23:25:29
Apache HTTP Server		2026-11-14 23:25:27
Jersey	3.1.10	2026-11-15 00:12:16
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df8d-7b9d-9206-783b700acc33
GET	500	0	/auth/rest/public/application.wadl	01a1dc8b-827f-7de5-b33d-107260b0ee24
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-641f-7126-bb5a-f69647f4c385
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-6746-779a-9a81-3f84c31692f3
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5ef3-7ac8-b949-cad102297f1a
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-544f-794c-819a-7312c28ddcfa
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-5957-7e70-823e-2a9bb54dc760
GET	200	3307	/auth/ui/app	01a1dc8a-4f68-7cc7-97f7-b3de5b0ec21b

# https://mein-portal-registrierung.baloise.de:8701  in_scope  host_id=4dcc5c4c32abb93014b769417a51be17  last_seen=2026-11-15 00:11:30
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-14 23:25:30)
CloudFront-origin-facing alternate TLS listener for the canonical Mein Portal Registrierung Apache/Airlock IAM self-service tenant. /auth/ui/app serves the same 3,307-byte Angular IAM shell and session/CSRF state as the canonical origin. The complete 390-binding REST method matrix, frontend chunks and shared UI route inventory are mapped on https://mein-portal-registrierung.baloise.de; this listener adds no distinct application surface.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-14 23:25:32
Airlock IAM		2026-11-14 23:25:33
Apache HTTP Server		2026-11-14 23:25:31
Jersey	3.1.10	2026-11-15 00:12:17
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df88-7204-94d1-ed1f126436ef
GET	500	0	/auth/rest/public/application.wadl	01a1dc8b-8233-7440-99f2-66403111b512
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-63d2-7514-9227-fe92792c27c8
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-671d-7e75-9bfa-d027228b59f0
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5f22-7933-9d63-5c6df838b843
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-53ef-7212-81dc-7244402d07de
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-58ec-7fb8-a90e-a08bbb0120c5
GET	200	3307	/auth/ui/app	01a1dc8a-4f2c-7cf7-b6f2-d97bd3c52adf

# https://mein-portal-registrierung.baloise.de:8765  in_scope  host_id=8acc5ebfbfdbdf02bb37689b69c42bcb  last_seen=2026-11-15 00:11:30
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-14 23:25:34)
CloudFront-origin-facing alternate TLS listener for the canonical Mein Portal Registrierung Apache/Airlock IAM self-service tenant. /auth/ui/app serves the same 3,307-byte Angular IAM shell and session/CSRF state as the canonical origin. The complete 390-binding REST method matrix, frontend chunks and shared UI route inventory are mapped on https://mein-portal-registrierung.baloise.de; this listener adds no distinct application surface.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-14 23:25:37
Airlock IAM		2026-11-14 23:25:38
Apache HTTP Server		2026-11-14 23:25:36
Jersey	3.1.10	2026-11-15 00:12:18
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df83-75da-92a0-1c690ed251e0
GET	500	0	/auth/rest/public/application.wadl	01a1dc8b-8337-7b43-8d3c-1441ca789ed9
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-6073-7705-aae0-a09e62df98a7
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-6541-7c8a-a0c1-8cbdc04e4343
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5d3e-7747-ae8f-d88b5df8b72a
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-5497-7afe-bbc7-f7ff3008e89b
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-5956-782e-881d-72d453693b91
GET	200	3307	/auth/ui/app	01a1dc8a-5026-7f0e-b76a-c80abcedbbd5

# https://mein-portal-registrierung.baloise.de:8800  in_scope  host_id=eaf511ad1149d7a8ab7a2ee4ee8dcee5  last_seen=2026-11-15 00:11:30
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-14 23:25:39)
CloudFront-origin-facing alternate TLS listener for the canonical Mein Portal Registrierung Apache/Airlock IAM self-service tenant. /auth/ui/app serves the same 3,307-byte Angular IAM shell and session/CSRF state as the canonical origin. The complete 390-binding REST method matrix, frontend chunks and shared UI route inventory are mapped on https://mein-portal-registrierung.baloise.de; this listener adds no distinct application surface.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-14 23:25:41
Airlock IAM		2026-11-14 23:25:44
Apache HTTP Server		2026-11-14 23:25:40
Jersey	3.1.10	2026-11-15 00:12:19
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df91-7015-bbb6-76aece2855db
GET	500	0	/auth/rest/public/application.wadl	01a1dc8b-82a0-756b-8c63-9219ce40d653
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-6026-72dc-93b4-0d73571d847d
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-6513-797e-9c88-e4a68d65be8a
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5cfc-7478-a45b-8a5a029a2469
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-53e0-756d-a4cc-e32be8bcdc27
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-591c-7f50-841e-3fcb220b7e33
GET	200	3307	/auth/ui/app	01a1dc8a-4f46-7aec-8d98-7ead81258fcf

# https://mein-portal-registrierung.baloise.de:8801  in_scope  host_id=9b66bd3aa02c5262e52316ffdb6ef6e4  last_seen=2026-11-15 00:11:30
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-14 23:25:47)
CloudFront-origin-facing alternate TLS listener for the canonical Mein Portal Registrierung Apache/Airlock IAM self-service tenant. /auth/ui/app serves the same 3,307-byte Angular IAM shell and session/CSRF state as the canonical origin. The complete 390-binding REST method matrix, frontend chunks and shared UI route inventory are mapped on https://mein-portal-registrierung.baloise.de; this listener adds no distinct application surface.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-14 23:25:51
Airlock IAM		2026-11-14 23:25:52
Apache HTTP Server		2026-11-14 23:25:49
Jersey	3.1.10	2026-11-15 00:12:20
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df83-754c-b179-bf1798499ffe
GET	500	0	/auth/rest/public/application.wadl	01a1dc8b-8392-76dc-b31f-1c031451bb5b
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-612e-75f9-b18e-869f23dc9b37
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-650f-7dec-a77c-ac40e54006a0
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5d97-71b8-be03-5bcb06722193
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-5368-76e8-a124-d1b6baedd6cf
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-5873-720f-b264-3d8162679b68
GET	200	3307	/auth/ui/app	01a1dc8a-4ed7-7a4a-9a64-7bce15ac0df4

# https://mein-portal-registrierung.baloise.de:8888  in_scope  host_id=8fc07201f37bc0638d85995896390659  last_seen=2026-11-15 00:11:30
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-14 23:25:55)
CloudFront-origin-facing alternate TLS listener for the canonical Mein Portal Registrierung Apache/Airlock IAM self-service tenant. /auth/ui/app serves the same 3,307-byte Angular IAM shell and session/CSRF state as the canonical origin. The complete 390-binding REST method matrix, frontend chunks and shared UI route inventory are mapped on https://mein-portal-registrierung.baloise.de; this listener adds no distinct application surface.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-14 23:25:58
Airlock IAM		2026-11-14 23:25:59
Apache HTTP Server		2026-11-14 23:25:57
Jersey	3.1.10	2026-11-15 00:12:22
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df87-7a85-a644-b397aba1dd80
GET	500	0	/auth/rest/public/application.wadl	01a1dc8b-833f-78da-88f9-2f927cdbc14f
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-6326-7fae-8dcc-91936e40180b
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-67dc-72af-926c-679e26a464ba
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5ee0-7fbd-b64a-4dc15b2b8a4e
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-53a4-7728-ae05-ad139933ac23
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-58f9-7a09-8c80-b7785427f1dd
GET	200	3307	/auth/ui/app	01a1dc8a-4f59-70c9-847b-438a1c1f56b4

# https://mein-portal-registrierung.baloise.de:8999  in_scope  host_id=beb8c2c352f94f53c7d9c93b4b586c2e  last_seen=2026-11-15 00:11:30
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-14 23:26:01)
CloudFront-origin-facing alternate TLS listener for the canonical Mein Portal Registrierung Apache/Airlock IAM self-service tenant. /auth/ui/app serves the same 3,307-byte Angular IAM shell and session/CSRF state as the canonical origin. The complete 390-binding REST method matrix, frontend chunks and shared UI route inventory are mapped on https://mein-portal-registrierung.baloise.de; this listener adds no distinct application surface.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-14 23:26:06
Airlock IAM		2026-11-14 23:26:09
Apache HTTP Server		2026-11-14 23:26:03
Jersey	3.1.10	2026-11-15 00:12:23
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df93-716e-91b9-cc25ccc030b0
GET	500	0	/auth/rest/public/application.wadl	01a1dc8b-82b2-708c-b144-2c84c56ec0c8
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-5fcc-748c-8f1b-7c167661dafb
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-638e-7139-9c52-d3e06114acd7
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5c21-7710-9648-8cc2d847d1a0
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-53ab-7330-b5b6-e669d6061031
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-5804-7853-b0f8-b61d085e012a
GET	200	3307	/auth/ui/app	01a1dc8a-4f67-78f3-995e-b1ae10dea3de

# https://mein-portal-registrierung.baloise.de:9000  in_scope  host_id=148a6b37c21d3e23e7a8a3632db81970  last_seen=2026-11-15 00:11:30
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-14 23:26:12)
CloudFront-origin-facing alternate TLS listener for the canonical Mein Portal Registrierung Apache/Airlock IAM self-service tenant. /auth/ui/app serves the same 3,307-byte Angular IAM shell and session/CSRF state as the canonical origin. The complete 390-binding REST method matrix, frontend chunks and shared UI route inventory are mapped on https://mein-portal-registrierung.baloise.de; this listener adds no distinct application surface.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-14 23:26:15
Airlock IAM		2026-11-14 23:26:18
Apache HTTP Server		2026-11-14 23:26:14
Jersey	3.1.10	2026-11-15 00:12:24
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df90-7dff-9cfe-1270dac4c6f9
GET	500	0	/auth/rest/public/application.wadl	01a1dc8b-826b-783c-869a-e13017409950
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-63b0-752b-a9b5-247d9db1a02d
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-6735-77dc-87f8-1db2d593f413
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5f29-73f1-b2de-377ef7e982b4
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-5438-7f53-aee6-cfb18642d699
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-59b4-7206-9245-f5f6b628b9b3
GET	200	3307	/auth/ui/app	01a1dc8a-4f38-7000-bd56-21a5989069c7

# https://mein-portal-registrierung.baloise.de:9080  in_scope  host_id=756ecbfb7883809dd6e3b0b812667442  last_seen=2026-11-15 00:11:30
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-14 23:26:21)
CloudFront-origin-facing alternate TLS listener for the canonical Mein Portal Registrierung Apache/Airlock IAM self-service tenant. /auth/ui/app serves the same 3,307-byte Angular IAM shell and session/CSRF state as the canonical origin. The complete 390-binding REST method matrix, frontend chunks and shared UI route inventory are mapped on https://mein-portal-registrierung.baloise.de; this listener adds no distinct application surface.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-14 23:26:26
Airlock IAM		2026-11-14 23:26:28
Apache HTTP Server		2026-11-14 23:26:24
Jersey	3.1.10	2026-11-15 00:12:25
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df97-7417-9706-b339f297320c
GET	500	0	/auth/rest/public/application.wadl	01a1dc8b-83bc-71cc-b5b8-0ff4f13a0f1b
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-600c-710f-846f-6bab1a21c22d
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-63e9-7fa9-b407-e71fbbc8185c
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5bc0-7f09-a405-12b463bc3e75
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-51c6-773b-9b3c-8fe946f15ab5
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-56a7-7a18-97f5-b43f59911656
GET	200	3307	/auth/ui/app	01a1dc8a-4e9b-7cd5-8783-60e06bd70a33

# https://mein-portal-registrierung.baloise.de:9443  in_scope whitelisting_bypass=cloudfront  host_id=02e2115b054b24e1083ec7323b9a1140  last_seen=2026-11-15 00:10:19
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-13 17:54:06)
CloudFront-origin-only alternate TLS listener for the Mein Portal registration Apache/Airlock Gateway and Airlock IAM application, using the same Jersey 3.1.10 REST layer as the canonical origin. The public `/CSRFT759.js` helper, `/auth/ui/app` Angular shell, current CSS/customization assets and public registration flow match port 443. Public and registration WADL roots reach Jersey but return the canonical empty HTTP 500 response. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route and frontend graph is identical to the canonical origin and is represented there.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-13 17:52:17
Airlock IAM		2026-11-10 05:08:58
Apache HTTP Server		2026-11-10 05:08:52
Jersey	3.1.10	2026-11-13 17:52:20
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df8a-737c-a868-6d9f2865a1d9
GET	200	9085	/CSRFT759.js	01a1c3d9-0d1f-778e-84ee-839631e97406
GET	504	936	/auth/login-oneshot	01a1db9d-799f-7fc2-a507-c47a57e65452
GET	500	0	/auth/rest/public/application.wadl	01a1ce02-858f-733c-81de-f90e07196151
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-613a-7a77-be3b-132c51739bd5
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-65a5-7341-80b7-7616b61dd5e8
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5d26-7e11-a5e0-6dc254298d75
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-53cb-7a95-93da-18d085a5aabe
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-5819-7f33-903f-a0ac3846401e
GET	200	32193	/auth/ui/3rdpartylicenses.txt	01a1d29d-9c7b-77a6-8328-5cb149259a16
GET	200	3307	/auth/ui/app	01a1dc8a-4f7f-7bfb-a02e-4a0195aa009b

# https://mein-portal-registrierung.baloise.de:9990  in_scope  host_id=1693b43327a109610d6e5a99d46fb294  last_seen=2026-11-15 00:11:30
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-14 23:26:30)
CloudFront-origin-facing alternate TLS listener for the canonical Mein Portal Registrierung Apache/Airlock IAM self-service tenant. /auth/ui/app serves the same 3,307-byte Angular IAM shell and session/CSRF state as the canonical origin. The complete 390-binding REST method matrix, frontend chunks and shared UI route inventory are mapped on https://mein-portal-registrierung.baloise.de; this listener adds no distinct application surface.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-14 23:26:33
Airlock IAM		2026-11-14 23:26:35
Apache HTTP Server		2026-11-14 23:26:31
Jersey	3.1.10	2026-11-15 00:12:26
## paths
method	status	size	path	exchange_id
GET	504	936	/	01a1daff-df95-7f21-8a4b-d3399a3e6d9f
GET	500	0	/auth/rest/public/application.wadl	01a1dc8b-83cf-7b55-b1f4-cab58d91854e
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-6374-79a2-9a2e-f2f7d8b33330
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-6707-7801-822f-f01288296950
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5f52-7197-9d61-f1241a142e3d
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-54be-7bce-bc68-c1288da4d67a
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-59cc-7ae2-8ece-81d19b87d4ee
GET	200	3307	/auth/ui/app	01a1dc8a-4f7d-7c72-97df-9587beb14e0d

# https://mein-portal-registrierung.baloise.de:12345  in_scope  host_id=ec340d14270786f6af9fc91ecd905e8a  last_seen=2026-11-15 00:11:30
dns: 193.134.75.78 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH)
## summary (2026-11-14 23:26:36)
CloudFront-origin-facing alternate TLS listener for the canonical Mein Portal Registrierung Apache/Airlock IAM self-service tenant. /auth/ui/app serves the same 3,307-byte Angular IAM shell and session/CSRF state as the canonical origin. The complete 390-binding REST method matrix, frontend chunks and shared UI route inventory are mapped on https://mein-portal-registrierung.baloise.de; this listener adds no distinct application surface.
## tech
technology	version	checked_at
Airlock Gateway		2026-11-14 23:26:39
Airlock IAM		2026-11-14 23:26:40
Apache HTTP Server		2026-11-14 23:26:38
Jersey	3.1.10	2026-11-15 00:12:33
## paths
method	status	size	path	exchange_id
GET	504	936	/auth/login-oneshot	01a1db9d-79a1-7e53-a7d9-13bddbd967af
GET	500	0	/auth/rest/public/application.wadl	01a1dc8b-8310-7de3-8e90-ffa7d7484cd4
GET	200	29	/auth/rest/public/authentication/ui/configuration/access	01a1dc8a-6253-7015-8d4b-f5d9454754b0
GET	200	27	/auth/rest/public/authentication/ui/default/application/id	01a1dc8a-65d9-71c6-b034-8517b667892a
GET	200	602	/auth/rest/public/maintenance-messages	01a1dc8a-5d9a-7eb2-ad20-9716ab516023
GET	200	209	/auth/rest/public/ui/languages	01a1dc8a-54de-7d63-a457-d894a5718ae2
GET	200	156	/auth/rest/public/ui/static/configuration	01a1dc8a-59b9-7691-8329-9e41a02c0516
GET	200	3307	/auth/ui/app	01a1dc8a-4f90-7b30-ad06-9ceab7942904
=== registration tests ===