# http://va.baloise.de in_scope host_id=ea3891610348045b2106f1154798f6ba last_seen=2026-11-15 00:19:16 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:25:37) Plain-HTTP Apache redirect edge for VA. Root and SAS application paths preserve their path while redirecting to HTTPS. The SAS Visual Analytics and Airlock IAM application is represented on the canonical HTTPS origin. ## tech technology version checked_at Apache HTTP Server 2026-11-09 02:39:25 ## paths method status size path exchange_id GET 301 270 / 01a1d284-3895-7236-bc33-651aa8ada70a GET 301 294 /SASBIWS/services/Version 01a1dc92-93e5-7bdd-9af0-be7e963914ce POST 301 297 /SASBIWS/servlet/AxisServlet 01a1cade-7f82-7576-ac91-b3725c958b97 POST 303 201 /SASWIPClientAccess/remote/ServiceRegistry 01a1c60d-f629-7245-a887-0840853bf633 # http://va.baloise.de:1099 in_scope host_id=62333a63b41c0f9a9e5cb8fb21baa92e last_seen=2026-11-14 22:05:49 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-dbc6-705a-bf01-a730de7ca96a # http://va.baloise.de:4401 in_scope host_id=6d4cc68e4d77e46f94721c771ec2ab28 last_seen=2026-11-14 22:04:33 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:25:40) Unavailable plain-HTTP scheme variant on port 4401. Direct and configured-route requests return only timeouts or provider-generated gateway failures, with no target response, application route graph or identifiable server-side product. ## paths method status size path exchange_id GET 504 936 / 01a1dc17-b488-708a-be4d-93ba3bf21d0f GET 504 936 /SASBIWS/servlet/AxisServlet 01a1cad5-7fba-77d0-8ad6-78ba73691c93 # http://va.baloise.de:4447 in_scope host_id=a4f91fc829b4c7592ed210e052d588d9 last_seen=2026-11-14 22:06:18 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc19-508c-7a3d-a961-323a5ccc5e1b # http://va.baloise.de:7443 in_scope host_id=661e1e0ce4ddf2547f819bf0d84a65c6 last_seen=2026-11-14 22:04:33 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc17-b490-79ff-b598-e99d28599bc1 # http://va.baloise.de:7980 in_scope host_id=786e064577e9a3999ff6cd4209374ef3 last_seen=2026-11-14 05:04:23 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:25:42) Unavailable alternate plain-HTTP listener. Requests to SAS Visual Analytics paths return only timeouts or provider-generated gateway failures, with no target response, application route graph or identifiable server-side product. ## paths method status size path exchange_id GET 504 936 /SASVisualAnalyticsHub/ 01a1c0ba-c351-7095-a7ac-9fe296fe8ac3 GET / 01a1d871-6a94-75b0-8b46-0e2a9f326f10 # http://va.baloise.de:8009 in_scope host_id=9fcb926c3cd23a3520d8fdefd034ea4e last_seen=2026-11-14 22:04:33 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:03:30) Alternate plain-HTTP Apache listener; / permanently redirects to the canonical https://va.baloise.de/ SAS Visual Analytics application. ## tech technology version checked_at Apache 2026-11-14 23:10:46 ## paths method status size path exchange_id GET 504 936 / 01a1dc17-b4e4-7dbe-9127-18a2b5380278 GET 0 /SASWIPClientAccess/remote/ServiceRegistry 01a1dadd-e161-7a4a-9d75-eb059b11e3d4 # http://va.baloise.de:8080 in_scope host_id=743a2d19d635d350951e419f228e251e last_seen=2026-11-14 22:04:39 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:25:45) Unavailable alternate plain-HTTP listener. Requests to SAS Logon paths return only timeouts or provider-generated gateway failures, with no target response, application route graph or identifiable server-side product. ## paths method status size path exchange_id GET 504 936 / 01a1dc17-cdfe-7a07-8689-af6a4dad8a35 GET 303 175 /api/jsonws 01a1dbd0-23ad-73d4-8039-cfde2236855b GET 0 /SASLogon/login 01a1c0bf-af20-724e-90eb-dff89fb543c7 # http://va.baloise.de:8081 in_scope host_id=f725d20e0143e044f13095f73f283ae7 last_seen=2026-11-14 22:04:40 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc17-cf02-7bc5-bd32-893be476556a # http://va.baloise.de:8082 in_scope host_id=559d300a06869ad79d79c383c3e9c3c9 last_seen=2026-11-14 22:05:18 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-6587-780d-beab-b7c9c037b0ee # http://va.baloise.de:8180 in_scope host_id=49ef6e66959b9f6c30b9785382d53b03 last_seen=2026-11-14 22:06:19 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc19-514a-7401-99e5-6eddaa91b1bf # http://va.baloise.de:8280 in_scope host_id=6a77061c43c48fa0add90dda197cf327 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-27ef-739a-be83-f377085541b5 # http://va.baloise.de:8580 in_scope host_id=13ae59ac0e5c803ec9cd323e9e3db007 last_seen=2026-11-14 22:06:49 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc19-c61f-76d4-b7bd-b6ab489b7f43 # http://va.baloise.de:8888 in_scope host_id=91376d86de090a3bfc087457b73db648 last_seen=2026-11-14 22:04:40 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc17-d019-7f29-ad4d-dda0f85a2198 # http://va.baloise.de:8983 in_scope host_id=f829ecefc7ac470463163a438fecf9d8 last_seen=2026-11-14 22:04:40 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc17-cf12-7a97-83d2-a5b14f4eb67b # http://va.baloise.de:9000 in_scope host_id=b64a9f0d6f67a6043bf19e541985a459 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-287c-79a0-9993-8b2c5cc6f1c1 # http://va.baloise.de:9001 in_scope host_id=f8f700ea5cf59fd720656bc07bdb84e1 last_seen=2026-11-14 22:05:18 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-6571-73ec-9142-edaf313783e8 # http://va.baloise.de:9002 in_scope host_id=bd8c972c8084493afe19ed77cceb743c last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-2918-762e-9f0f-b774b04709c1 # http://va.baloise.de:9090 in_scope host_id=b72a578bce511c0fd7c5b3d79437eaa6 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-291a-7bc9-ba2f-e53f34109d44 # http://va.baloise.de:9990 in_scope host_id=4c67995165da9340ce039ebafbfcfbae last_seen=2026-11-14 22:05:18 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-6633-75ba-bc81-455ee79cd05d # http://va.baloise.de:9999 in_scope host_id=68b8d699faaa45460657d55952b4e003 last_seen=2026-11-14 22:05:48 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-db13-71b6-a505-ea117ae7d3b0 # http://va.baloise.de:10000 in_scope host_id=38be294a306be0ab98d14fb195c5f571 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-2933-780e-b086-da6f7bc6d569 # http://va.baloise.de:10080 in_scope host_id=950e130b78d961463f13aaccf7c895f6 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-2942-72e7-b369-aa1a179223c8 # http://va.baloise.de:10443 in_scope host_id=ff3e42ae3b03499918c84f1f2671efcc last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-2949-7d7c-96f9-8ffeadb59bd0 # http://va.baloise.de:12345 in_scope host_id=378736f653552826ea979f9f8ff563a4 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-294c-76e1-9560-7b7a3c375a35 # https://va.baloise.de:1 in_scope host_id=e0bab2fec784abf642bb533c09df96b4 last_seen=2026-11-14 23:22:32 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 0 / 01a1dc5e-a506-7459-8fb7-8b05cc060694 # https://va.baloise.de in_scope host_id=65100d6f9a0711452e95367e3b18dd6f last_seen=2026-11-15 01:42:01 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 13:41:51) SAS Visual Analytics behind Apache HTTP Server, Airlock Gateway and Airlock IAM. Root redirects to `/SASLogon`. SAS Web Infrastructure Platform routes include the WIP shell and client-access root, remote and REST ServiceRegistry, UrlGeneratorService, AuthenticationService, WIP SOAP names and `/sas/sas-environment.xml`. Stored Process, Job Execution, Studio, Environment Manager, Visual Analytics, BIWS and Content Server families enter `/auth/check-login?Location=...` before reaching SAS. That handoff is also the root catch-all for arbitrary unknown names, so only the specifically named SAS families represent installed application contexts. Direct `/auth` redirects to `/auth/`, which creates Airlock session and CSRF state before redirecting relatively to `ui/app`; `/auth/ui` similarly canonicalizes through `/auth/ui/` to `./app`. `/auth/login` creates the same state and redirects directly to `/auth/ui/app/auth/application/access`. Selector `sas_va` starts a `PASSWORD_REQUIRED` flow using `default-username-password`, advertises an optional `portal-redirect` step and links to `password-reset-init`. Airlock state uses `AL_SESS-S`, `CSRFT759-S`, mirrored `X-CSRFT759` and `X-Same-Domain: 1`. The IAM inventory contains 380 normalized REST templates and 390 method/path bindings covering authentication, registration, Airlock 2FA, Cronto, OTP, FIDO, OATH/VASCO/matrix, password, SSI, account-link, token/device, OAuth consent/session, remember-me, representation, migration, password-only, secret-question and language handlers. The complete REST method matrix and 213 requestable shared UI templates are represented once on `mein-portal-registrierung.baloise.de`. Previously served WADLs identify Jersey 3.1.10; current public and OAuth2 WADL GET requests return empty HTTP 500 responses. The current shell links `/auth/ui/styles.aa4c4328f9bb7e9b.css` and `/auth/ui/assets/custom/js/iam-custom.af5b4c4473394040.js`. Its runtime defines 180 lazy chunks and 214 Angular route entries; the shared router composes to 199 concrete paths below `/auth/ui/app`; its requestable route templates are mapped once on the registration tenant. The host export has 31 text entries: 24 real files, six 2–312-byte encoded i18n-dispatcher responses, and `/auth/ui/app/auth/application/assets/airlock/i18n/en.json`, which is a 3,307-byte HTML shell alias rather than JSON. Twenty-one real files are byte-identical to the canonical 193-file Mein Portal IAM frontend. No usable source maps are published. VA has SAS-specific gateway pages: `/error_path/404.html` is an 8,114-byte Visual Analytics error page with ServiceDesk contact details, and `/error_path/maintenance.html` is an 8,171-byte multilingual maintenance page identifying a server maintenance state. Both use inline styling and embedded logos; `/error_path/img/favicon.ico` is the standalone favicon. Alternate TLS listeners expose the same SAS/IAM graph through CloudFront origin-facing addresses. Airlock prevents disclosure of SAS release or maintenance-level details. The formerly public authentication, self-service, tech-client-registration and user-self-registration WADL routes now return empty HTTP 500 responses. Jersey 3.1.10 remains identified from the retained prior WADLs. ## tests tested_at title detail 2026-11-15 01:33:31 unauthenticated: SAS Studio/Job HTTP PUT and partial PUT: Airlock login retained Attempted harmless uniquely named text uploads with normal PUT and Content-Range partial PUT beneath production SAS Studio and Job Execution. All four requests were redirected to IAM login before any upload; no retrieval or cleanup was needed. 2026-11-15 01:33:13 unauthenticated: SAS trusted-identity forwarding headers: Airlock login retained Sent common reverse-proxy identity headers individually and together to production SAS Job Execution using sasadm@saspw (X-Forwarded-User, X-Remote-User, Remote-User, SM_USER, X-SAS-User, X-Authenticated-User, X-WEBAUTH-USER and groups). Every response exactly matched the 303 login control; no SAS backend identity was accepted. 2026-11-15 01:28:02 unauthenticated: Airlock AL_ENV environment-cookie injection: gateway retained canonical request identity Sent client-supplied uppercase, lowercase, mixed-case and duplicate AL_ENV_HTTPS/SERVER_NAME/SERVER_PORT/SERVER_REQUEST cookies while setting a foreign Origin. The public IAM endpoint remained HTTP 403 exactly like the no-cookie CORS control, so the values did not replace the gateway-derived external request URL. This covered direct cookie injection, not a trusted upstream compromise. 2026-11-15 00:34:55 unauthenticated: OAuth technical-client registration authorization-server IDs: none found With a fresh VA IAM session, POSTed empty registration documents to the public DCR route using 147 unique IDs derived from observed application selectors, prior OAuth paths and product-documented examples. Every candidate returned AUTHORIZATION_SERVER_NOT_FOUND. This did not cover unguessable IDs or future configuration. 2026-11-15 00:12:53 unauthenticated: SAS/native service ports from Swiss egress: closed A targeted TCP scan from Swiss Mullvad egress found connection-refused on SAS-associated ports 5451, 5452, 8561, 8591, 8592, 8599, 8601, 15452 and 21031. This covered direct native protocol exposure only. 2026-11-14 22:44:29 unauthenticated: documented SAS demo/default accounts rejected by VA login Fresh Airlock sas_va sessions each submitted one login attempt using SAS documentation examples sasdemo:Orion123, sasadm@saspw:Orion123 and sastrust@saspw:Orion123. Every password/check response returned USERNAME_PASSWORD_WRONG and remained PASSWORD_REQUIRED; no protected SAS route was requested. No other passwords or repeated attempts were used. ## tech technology version checked_at Airlock Gateway 2026-11-13 11:42:14 Airlock IAM 2026-11-13 11:42:12 Apache HTTP Server 2026-11-13 11:42:15 Jersey 3.1.10 2026-11-10 07:59:23 SAS 2026-11-13 00:25:19 SAS Visual Analytics 2026-11-13 06:12:01 ## paths (50 of 532; toadcli paths) method status size path exchange_id GET 303 277 / 01a1dcd4-c751-7fd2-9332-763c087718d6 GET 303 169 /%2E/SASBIWS/services/Version 01a1c4ae-a00b-771e-90d0-b0fcb05a709d POST 303 179 /%2E/SASWIPClientAccess/remote/ServiceRegistry 01a1c500-5dc6-7147-8dff-7476532213be GET 303 166 /%2FSASBIWS/services/Version 01a1c4ae-9f54-763d-932f-ed5745b6a3ea GET 303 165 /%53ASBIWS/services/Version 01a1c2c3-0735-72ca-b3b9-8511224c6436 GET 303 151 /%53ASStoredProcess/do 01a0fa14-5f35-771f-884d-70e1e2a21e16 GET 303 166 /%5CSASBIWS/services/Version 01a1c4ae-a1f2-76e4-8fa3-065024b53a80 OPTIONS 200 0 /* 01a1dbd0-245d-75db-9db4-666f64f8cea0 GET 303 156 /.;/SASStoredProcess/do 01a0fa14-459f-7313-886b-9cdcec0f2dba GET 303 174 /.well-known/oauth-authorization-server 01a1c5df-f829-7051-b099-6f8baa63aec5 GET 303 166 /.well-known/openid-configuration 01a1c5df-f7a3-7538-9ff3-de6c3b735681 GET 303 164 //SASBIWS/services/Version 01a1c413-2f23-718d-a8f4-311dbafad9c1 GET 303 150 //SASStoredProcess/do 01a0fa14-3c72-7266-bcf7-6ffb0bd20975 GET 303 208 //auth-servicecontainer/startTask/ 01a1da03-484e-78d1-aa3d-831e9190193d GET 303 197 /;jsessionid=bugbounty-dwbzn/SASBIWS/services/Version 01a1c4d9-af0d-753d-890c-abf213b08c0c GET 200 9085 /CSRFT759.js 01a1c644-bc5b-74ca-b08f-97fe1f07add9 GET 303 202 /CSRFT759.js%252f..%252fSASBIWS%252fservices%252fVersion 01a1c2c3-4f23-7679-b01c-f7bc2b8eaee5 GET 303 194 /CSRFT759.js%2F..%2FSASBIWS%2Fservices%2FVersion 01a1c2c3-4cb2-721c-8797-cbd41fb5f33d GET 303 191 /CSRFT759.js%3F/../SASBIWS/services/Version 01a1c488-807f-76e7-a1a0-e026ab105fb5 GET 303 194 /CSRFT759.js%5C..%5CSASBIWS%5Cservices%5CVersion 01a1c488-57ab-72a9-ad70-be31233c94f2 GET 303 186 /CSRFT759.js/%2E%2E/SASBIWS/servlet/AxisServlet 01a1c244-3420-7276-8840-7df14ecb4643 GET 303 213 /CSRFT759.js/../SASBIWS/servlet/AxisServlet 01a1cad2-c969-74eb-9f4d-a5f7e6a3c3c9 GET 303 185 /CSRFT759.js/..;/SASBIWS/servlet/AxisServlet 01a1c244-322a-73a9-8a22-e09cc4182c57 GET 303 137 /SASAdmin/ 01a1c64b-3cb3-7290-bcfb-3253bc6cc663 GET 303 153 /SASAuthorizationServices/ 01a1c64b-3e42-77e8-b32a-e5c81f60e27f GET 303 165 /SASBIWS%2Fservices%2FVersion 01a1c413-2f92-709e-86e1-3f3afc3d2737 GET 303 166 /SASBIWS%3B/services/Version 01a1c2c3-0140-76a7-9299-91294730998d GET 303 196 /SASBIWS%3Bjsessionid=bugbounty-dwbzn/services/Version 01a1c4d9-b144-73ee-abba-6fb8bdf7749c GET 303 167 /SASBIWS//services//Version 01a1c2c3-0538-73d8-a88a-4efa89ee77ba GET 303 140 /SASBIWS/rest 01a1c136-41c4-776a-b375-ac3b05132a5b GET 303 144 /SASBIWS/services 01a1c136-3e26-77eb-a234-7aba9cf1be92 GET 421 362 /SASBIWS/services/Version 01a1dc77-babc-746b-b898-3907023a6180 GET 303 170 /SASBIWS/services/Version;.css 01a1c413-2e92-7164-84eb-e576f29ab8ca GET 303 167 /SASBIWS/services/Version;/ 01a1c2c3-0361-70e4-8d6b-415266e7c0de GET 303 194 /SASBIWS/services/Version;jsessionid=bugbounty-dwbzn 01a1c4d9-b319-72cd-98f2-a5b071df5dbb GET 303 157 /SASBIWS/servlet/AxisServlet 01a1da17-6b2f-7e50-82b8-ce5281afa283 GET 303 164 /SASBIWS;/services/Version 01a1c413-2df7-71d9-8aff-137a66ab4173 GET 303 194 /SASBIWS;jsessionid=bugbounty-dwbzn/services/Version 01a1c4d9-ad0d-71b5-92f9-488dfc12fa5f GET 303 168 /SASContentServer/repository/default/ 01a0f9e1-290d-70bb-ab4f-cc3bb7dcb019 GET 303 148 /SASDeploymentBackup/ 01a1c64b-3fc6-7537-a44b-682d506de9d4 GET 303 150 /SASEnvironmentManager/ 01a0f9e1-0777-738e-8f6d-ae2675af1409 GET 303 148 /SASIdentityServices/ 01a1c64b-415b-74fe-8204-c7754f47c0e3 GET 303 144 /SASJobExecution/ 01a1dcd6-2915-7714-9820-1aef5e469fce PUT 303 186 /SASJobExecution/bugbounty-dwbzn-put-1794706403.txt 01a1dcd6-7519-79fd-bf8b-b77107c70c60 GET 303 134 /SASLogon 01a1da17-69d0-7cc6-993e-5e4cb16ce8e8 GET 303 167 /SASLogon/../SASStoredProcess/do 01a0fa14-4dd4-7000-9d0b-8ab47b83a08a GET 303 170 /SASLogon/..;/SASStoredProcess/do 01a0fa14-562a-730e-95bf-7cb6b54a447e GET 303 142 /SASLogon/guest 01a1c655-d7f2-76d1-9000-26a9d953476a GET 303 142 /SASLogon/login 01a1d24a-9924-702d-96ba-dcd6c24d09fc GET 303 160 /SASLogon/proxy/oauth/clients 01a0f9e1-39b1-739b-ba03-1e0bae525c0c # https://va.baloise.de:1099 in_scope host_id=ae7993c4c6bd3e948169327754131077 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:13) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:15 Airlock IAM 2026-11-15 00:13:49 Apache 2026-11-14 23:23:14 Jersey 3.1.10 2026-11-15 00:15:16 SAS Visual Analytics 2026-11-14 23:23:16 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-a6c8-7f4c-8051-22e579ef3be2 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-af64-7921-b30d-aeae8ccf8844 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-70c9-7af6-9467-f3857a655049 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-7a25-7148-8ea6-c771f9501044 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-665b-7dff-8f57-e6b7f8f9eb3b GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-530a-73ef-866c-1bf902db0414 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-5c82-7209-a00f-b960f2edc55e GET 200 3307 /auth/ui/app 01a1dc8e-5153-7f65-a666-61d7be2774e0 # https://va.baloise.de:4401 in_scope whitelisting_bypass=cloudfront host_id=eee5c682fbbe6c823d31cfea21b248e7 last_seen=2026-11-14 22:09:10 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:03:26) CloudFront-origin-only alternate TLS listener for the VA Apache/Airlock Gateway and Airlock IAM boundary, using Jersey 3.1.10 and fronting the same SAS Visual Analytics application as the canonical origin. Root, SAS Logon, Visual Analytics, environment-descriptor, WIP and BIWS routes enter the canonical `/auth/check-login` handoff, while `/auth/ui/app` and `/CSRFT759.js` expose the shared IAM frontend. Public and OAuth2 WADL roots reach Jersey but return empty HTTP 500 responses. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The SAS, REST and frontend graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-10 21:59:07 Airlock IAM 2026-11-10 21:59:06 Apache HTTP Server 2026-11-10 21:59:05 Jersey 3.1.10 2026-11-13 18:02:48 SAS 2026-11-10 21:59:09 SAS Visual Analytics 2026-11-13 18:19:36 ## paths method status size path exchange_id GET 504 936 / 01a1dc18-294d-7201-a4d9-6a59cd843589 GET 200 9085 /CSRFT759.js 01a1c771-be5e-70c2-a2c8-39a9a0a1b3bf GET 303 153 /SASVisualAnalyticsViewer/ 01a1c76e-c201-7118-9272-c9b5ddf74efa POST 504 936 /SASWIPClientAccess/remote/ServiceRegistry 01a1dadf-ba47-7c44-a806-2eb154a6bab3 GET 303 169 /SASWIPClientAccess/rest/ServiceRegistry 01a1caae-1be8-70b3-a381-ac6a97535ae1 GET 303 134 /actuator 01a1c653-f50e-7182-b400-c29f9418b32b GET 303 140 /actuator/env 01a1c653-f7f2-77ed-a96b-6f54a83f3960 GET 303 143 /actuator/health 01a1c653-f66a-7255-afc2-d64a05ee9a4b GET 504 936 /auth-admin/ 01a1dc1b-799b-7b80-ac8b-6dabf2a378b6 GET 303 149 /auth-admin/actuator 01a1c653-fcb8-73d2-ac3f-fbed0732b279 GET 504 936 /auth-admin/rest/configuration/configurations 01a1dc1b-ef79-7597-9f89-7ef97dd15ae0 GET 504 936 /auth-h2/ 01a1dc1b-03a2-7869-8b46-3b59a3a4b5a3 GET 303 160 /auth-servicecontainer/actuator 01a1c653-f9e5-7695-8bb5-a886fefe7521 GET 303 169 /auth-servicecontainer/actuator/health 01a1c653-fb63-7498-bc91-54ab750f12a3 GET 504 936 /auth-servicecontainer/startTask/ 01a1dc1b-03c2-7007-a065-9a4a9f841e6b GET 303 123 /auth/login-oneshot 01a1db9d-49e3-7495-953f-4c38cd8683ac GET 500 0 /auth/rest/oauth2/application.wadl 01a1c76e-bff5-77b7-b825-708cfad3b1f8 GET 400 161 /auth/rest/protected/my/self 01a1c76e-b4b7-7352-ad45-730786241658 GET 500 0 /auth/rest/public/application.wadl 01a1ce0f-ef0e-7347-a6dd-7a83c561a5a9 POST 400 8102 /auth/rest/public/baloise/saml2/transform 01a1cc1f-7549-738d-9f58-7fe79b16391f GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbb2-f8f5-7462-87ef-3da826d26b5b GET 200 3307 /auth/ui/app 01a1cc1f-7531-763e-bbde-de47dd3dae6d GET 303 123 /auth/ui/assets/custom/manifest/%252e%252e/%252e%252e/%252e%252e/%252e%252e/WEB-INF/web.xml 01a1cc3a-d4f1-7281-ad84-e03aeef29608 GET 504 936 /auth/ui/assets/custom/manifest/manifest.%252f..%252f..%252f..%252f..%252f..%252f..%252fWEB-INF%252fweb.xml;.json 01a1daf6-6fb2-79ba-919c-866d0e984b5a GET 200 417 /auth/ui/assets/custom/manifest/manifest.json 01a1cc06-7923-77b4-be73-6bcaafe4e379 GET 502 932 /baloise-venta/a4j_3_2_1-SNAPSHOTorg/richfaces/renderkit/html/css/basic_classes.xcss/DATB/eAELXT5DOhSIAQ.sA18_.c1 01a1cb73-86c3-767e-980b-c4e30c2672f3 GET 504 936 /ext-admin/ 01a1dc1b-79be-744e-a17b-c41779b44894 GET 303 152 /ext-admin/rest/users 01a1cb15-f488-74d4-ac27-b5e8eaa67170 GET 303 183 /ext-admin/this-path-must-not-exist-14269251 01a1cb15-f5a5-7758-9a26-27232da469d0 GET 504 936 /ext-h2/ 01a1dc1b-03bf-7e3f-992e-0448c45f9b3b GET 303 140 /ext-login/ 01a1caa8-d5da-7087-aa1a-7d5196524867 GET 303 148 /ext-login/actuator 01a1cb15-f198-7791-b538-fbe90397b30c GET 303 155 /ext-login/login-oneshot 01a1cb15-f28a-7796-bc50-2137696fc583 GET 303 177 /ext-login/rest/protected/application.wadl 01a1cb11-7d8c-73fc-9333-a24a97613a9a GET 303 174 /ext-login/rest/public/application.wadl 01a1cb15-f0a7-75f9-9cc2-1f4f9a46b818 GET 303 183 /ext-login/this-path-must-not-exist-14269251 01a1cb15-f393-7344-a6c4-ee86f4cc197d GET 303 148 /ext-login/ui/app 01a1cb15-efa9-7169-9a22-98e5e9a9b24f GET 504 936 /ext-servicecontainer/startTask/ 01a1dc1b-799f-73a7-af42-25923e481928 GET 504 936 /h2/ 01a1dc1b-03ad-7152-8f23-319b5adf76e6 GET 303 141 /login-oneshot 01a1caa8-d7c1-7071-b901-a57dd116a3b2 GET 303 145 /management/health 01a1c654-013e-77ba-b8e1-6185d785c474 GET 303 155 /sas/sas-environment.xml 01a1c76e-c32d-7158-b734-27a8a54b2358 GET 303 156 /service-container/actuator 01a1c653-ffc8-7053-9690-612c38691eec GET 504 936 /service-container/startTask/ 01a1dc1b-79c5-7a7e-afb3-90070198880a GET 303 169 /this-path-must-not-exist-14269251 01a1cb15-f6ab-7036-97bb-f2139cefdc20 GET 504 936 /this-path-must-not-exist-bugbounty 01a1dc1b-efa0-79b2-8d8e-e4c3063f59e1 # https://va.baloise.de:4447 in_scope host_id=a32a1c67233f7b1233c269bbe8bc645e last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:17) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:20 Airlock IAM 2026-11-15 00:13:50 Apache 2026-11-14 23:23:19 Jersey 3.1.10 2026-11-15 00:15:18 SAS Visual Analytics 2026-11-14 23:23:21 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-a659-75c1-8e62-cd5dcd704952 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-ae54-7293-8bdf-b813ce38bf72 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-7565-7b4f-8534-3ce82f0aafe4 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-7e46-74e3-96ba-8d381c871d96 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6cb1-73bc-ab37-06b19bec8d41 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5ac5-770f-b273-0a719401af80 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-634a-767a-bcd5-cdcb313e68b8 GET 200 3307 /auth/ui/app 01a1dc8e-526e-7e92-a8bd-fbc01fb5f29f # https://va.baloise.de:5451 in_scope host_id=abe52a7e3518396705d59a533dab3cc9 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:23) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:25 Airlock IAM 2026-11-15 00:13:52 Apache 2026-11-14 23:23:24 Jersey 3.1.10 2026-11-15 00:15:20 SAS Visual Analytics 2026-11-14 23:23:26 ## paths method status size path exchange_id GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-ae88-7dc6-b2d5-875c861066c0 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-770a-7e1b-870e-b920a5540014 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-8084-75b3-b132-72d98099b1ee GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6d84-713d-90c5-8a4d077696ae GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5b21-7c16-a000-207089a99933 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-6378-773f-8912-70a91c3eb0b4 GET 200 3307 /auth/ui/app 01a1dc8e-5261-748e-a25e-5434063610db GET 0 / 01a1dc82-dfc9-75e1-8aaf-71785df072e4 # https://va.baloise.de:5452 in_scope host_id=fbf3fd0442486164078243e3bfd1ec32 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:27) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:30 Airlock IAM 2026-11-15 00:13:53 Apache 2026-11-14 23:23:28 Jersey 3.1.10 2026-11-15 00:15:21 SAS Visual Analytics 2026-11-14 23:23:31 ## paths method status size path exchange_id GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-afe8-7376-b5d6-863a21bccddf GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-76e6-7290-92f0-ce280921d57c GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-8028-7463-ab2b-d9beaa7ea787 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6e47-7c00-b752-e7ffdd699f95 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c72-71ad-8577-fcd0291b56d6 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-64fd-7644-b036-10dbeedc10a5 GET 200 3307 /auth/ui/app 01a1dc8e-529f-782e-b364-4c3a88f07ffc GET 0 / 01a1dc82-5316-7114-aebf-00d967c4a8ec # https://va.baloise.de:7443 in_scope whitelisting_bypass=cloudfront host_id=f45e769b62f5b9fce0770bf942565459 last_seen=2026-11-14 22:05:18 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:03:28) CloudFront-origin-only alternate TLS listener for the VA Apache/Airlock Gateway and Airlock IAM boundary, using Jersey 3.1.10 and fronting the same SAS Visual Analytics application as the canonical origin. Root, SAS Logon, Visual Analytics, environment-descriptor, WIP and BIWS routes enter the canonical `/auth/check-login` handoff, while `/auth/ui/app` and `/CSRFT759.js` expose the shared IAM frontend. Public and OAuth2 WADL roots reach Jersey but return empty HTTP 500 responses. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The SAS, REST and frontend graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-09 14:38:44 Airlock IAM 2026-11-09 14:38:45 Apache HTTP Server 2026-11-09 14:38:44 Jersey 3.1.10 2026-11-13 18:02:51 SAS 2026-11-09 14:38:45 SAS Visual Analytics 2026-11-13 18:19:39 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-f0a1-75ea-8f25-cdf71edf7604 GET 200 9085 /CSRFT759.js 01a1c47f-d4cc-75f0-a6a4-3238eba24288 GET 303 161 /SASBIWS/services/Version 01a1c480-7424-76c4-a7c6-6cf79c392b1a GET 303 142 /SASLogon/login 01a1c655-04b9-7695-849f-974ff02467fe GET 303 138 /SASStudio/ 01a1c243-3b89-7331-8874-febd35dbc86b GET 303 150 /SASVisualAnalyticsHub/ 01a1c0be-f45f-7774-9da6-e4282c9d2241 POST 504 936 /SASWIPClientAccess/remote/ServiceRegistry 01a1dae0-2118-7706-b1bd-1cb4bda72d7f GET 303 173 /airlock/rest/configuration/configurations 01a1c57c-9f98-715a-9054-b8cf04ce5dd2 GET 302 0 /auth/check-login 01a1c0be-f545-7502-97bd-c07f69f1e55e GET 303 123 /auth/login-oneshot 01a1db9d-4a3d-77d8-a03c-60c6cda4279d GET 500 0 /auth/rest/oauth2/application.wadl 01a1ce13-45c0-740c-b22b-91e78ef78b10 GET 500 0 /auth/rest/public/application.wadl 01a1ce10-1b62-7494-92c9-2094e06b0d3f GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbb3-1108-746c-8353-415690082d30 GET 504 936 /ext-servicecontainer/startTask/ 01a1da06-31db-7ca2-b9bc-d99184d9534b GET 404 132 /auth/rest/public/authentication/one-shot/applications/sas_va 01a1c48a-25f5-707b-a502-3883790b99a4 GET 404 9101 /auth/ui/assets/custom/manifest/manifest.%252f..%252f..%252f..%252f..%252f..%252f..%252fWEB-INF%252fweb.xml;.json 01a1daf6-5d1f-7e8f-9bae-15f1063e935f GET 0 /airlock/rest/v3/api-docs 01a1c32b-036a-743b-91d7-e5e1cadadd0d # https://va.baloise.de:7474 in_scope host_id=e53b41c2e50c262c90f740afcff83846 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:33) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:35 Airlock IAM 2026-11-15 00:13:54 Apache 2026-11-14 23:23:34 Jersey 3.1.10 2026-11-15 00:15:23 SAS Visual Analytics 2026-11-14 23:23:37 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-a6dc-7203-be3c-607fb7c04a7c GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-af07-7d4b-af68-a2be08e85872 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-7183-746c-b2e1-d7a467d21c62 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-7b15-782e-a47c-c9c5db6ef623 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6740-7f79-b341-04190d92c7c3 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5649-71cb-bdd0-21023d8e5049 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-5eae-713c-9cdf-ba909a4edee4 GET 200 3307 /auth/ui/app 01a1dc8e-51fa-767a-be1a-1db5a7c80554 # https://va.baloise.de:7980 in_scope whitelisting_bypass=cloudfront host_id=34745c5e3149199146c84e829845e6ae last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:03:32) CloudFront-origin-only alternate TLS listener for the VA Apache/Airlock Gateway and Airlock IAM boundary, using Jersey 3.1.10 and fronting the same SAS Visual Analytics application as the canonical origin. Root, SAS Logon, Visual Analytics, environment-descriptor, WIP and BIWS routes enter the canonical `/auth/check-login` handoff, while `/auth/ui/app` and `/CSRFT759.js` expose the shared IAM frontend. Public and OAuth2 WADL roots reach Jersey but return empty HTTP 500 responses. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The SAS, REST and frontend graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-09 23:45:06 Airlock IAM 2026-11-09 23:45:07 Apache HTTP Server 2026-11-09 23:45:05 Jersey 3.1.10 2026-11-13 18:02:54 SAS 2026-11-09 23:45:08 SAS Visual Analytics 2026-11-13 18:19:44 ## paths method status size path exchange_id GET 504 936 / 01a1dc18-294f-772a-aaf6-647bed4c49ad GET 303 161 /SASBIWS/services/Version 01a1c416-ee64-71e3-bfce-c5a88845d000 POST 504 936 /SASWIPClientAccess/remote/ServiceRegistry 01a1dae0-5309-737d-91c0-e3259bca8b11 GET 303 123 /auth/login-oneshot 01a1db9d-4a62-7ace-996c-a4a105e70b30 GET 500 0 /auth/rest/public/application.wadl 01a1ce10-448e-73ac-a534-39c61d45afce GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbb3-2853-7097-bf25-7b0ae8f4ccd3 GET 200 3307 /auth/ui/app 01a1c2c5-17fb-77d3-af5b-f1af68bae23c GET 504 936 /auth/ui/assets/custom/manifest/manifest.%252f..%252f..%252f..%252f..%252f..%252f..%252fWEB-INF%252fweb.xml;.json 01a1daf6-d2bf-75d0-aa5b-2627a9b8b776 GET 0 /SASVisualAnalyticsHub/ 01a1c2b1-3306-7246-87dd-1477d2a67e3f GET 0 /auth/check-login 01a1c2b5-d600-759f-83eb-06d55745c6b9 # https://va.baloise.de:8009 in_scope host_id=42142d4fbab0c93a76b80efe0406ba67 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:55) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:10:10 Airlock IAM 2026-11-15 00:13:55 Apache 2026-11-14 23:10:07 Jersey 3.1.10 2026-11-15 00:15:24 SAS Visual Analytics 2026-11-14 23:10:13 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b508-7321-a900-4373bc63c1f2 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-af97-74d6-800b-7995b1999194 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-79eb-7b6a-96b8-856341fa97a0 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-8203-7e3d-a165-436ae25a659b GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-70a3-73fc-9326-d3629075fe67 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c77-7e25-a0a1-a7f9e39f150c GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-667c-7b99-a56c-cbc815af60ee GET 200 3307 /auth/ui/app 01a1dc8e-5290-77e6-b5c6-73fcbc74345d # https://va.baloise.de:8080 in_scope whitelisting_bypass=cloudfront host_id=e35f4747534fb118404c5505eb29fd57 last_seen=2026-11-15 00:10:34 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:03:34) CloudFront-origin-only alternate TLS listener for the VA Apache/Airlock Gateway and Airlock IAM boundary, using Jersey 3.1.10 and fronting the same SAS Visual Analytics application as the canonical origin. Root, SAS Logon, Visual Analytics, environment-descriptor, WIP and BIWS routes enter the canonical `/auth/check-login` handoff, while `/auth/ui/app` and `/CSRFT759.js` expose the shared IAM frontend. Public and OAuth2 WADL roots reach Jersey but return empty HTTP 500 responses. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The SAS, REST and frontend graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-09 23:45:09 Airlock IAM 2026-11-09 23:45:10 Apache HTTP Server 2026-11-09 23:45:08 Jersey 3.1.10 2026-11-13 18:02:56 SAS 2026-11-09 23:45:10 SAS Visual Analytics 2026-11-13 18:19:47 ## paths method status size path exchange_id CONNECT 303 277 / 01a1dc8a-a04c-7875-a075-f70c9086a895 GET 504 936 /SASBIWS/services/Version 01a1dbb9-e9d5-7499-b2a5-c5f2326f52ca GET 303 147 /SASVisualAnalytics/ 01a1d622-bcc5-75cf-9f28-5d43387c00a7 GET 504 936 /SASWIPClientAccess/rest/ServiceRegistry 01a1dbba-110d-7d5d-92d5-e03967b65761 GET 504 936 /auth-admin/rest/authentication/settings/instance 01a1dbba-5fd4-7eab-b06b-0cfcee5adbfd GET 504 936 /auth-transaction-approval/rest/transaction-approval/flows/bugbounty/select 01a1dbb4-5bea-795e-bf23-ac1ef0e29d5b GET 522 7242 /auth/check-login 01a1c2b6-4ebb-74e2-9d96-d3b77cd0f61f GET 303 123 /auth/login-oneshot 01a1db9d-4a86-7cd8-a3f1-b73c4135e27c GET 500 0 /auth/rest/public/application.wadl 01a1ce10-6d69-7357-81bf-778958f7b5c6 GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbbe-fc59-741c-a625-ab83bdf34de8 GET 200 6783 /auth/ui/assets/airlock/js/iam.6adab415bcef891c.js 01a1c2d4-53e9-7340-b66b-697624d449d7 GET 303 123 /auth/ui/assets/custom/manifest/%252e%252e/%252e%252e/%252e%252e/%252e%252e/WEB-INF/web.xml 01a1cc09-39e0-7215-a744-910442525b6f GET 504 936 /ext-admin/rest/authentication/settings/instance 01a1dbba-8766-7ea7-95ea-dde0ab157fa5 GET 504 936 /ext-api-policy-service/rest/health/ready 01a1dbbb-50e2-78e2-b6e0-6d0b11b5163f GET 504 936 /ext-transaction-approval/rest/health/ready 01a1dbbb-50cc-73e6-890d-e68469aa913f GET 504 936 /sas/sas-environment.xml 01a1dbba-3847-70c7-9f0f-87f517e0c035 GET 0 /SASLogon/login 01a1c2b2-451a-760c-8a59-34b2bf16cf2f GET 0 /auth/ui/app 01a1c2c8-a910-7796-9e7b-bb7f1f7bb8cb # https://va.baloise.de:8081 in_scope host_id=1f64e39605575efc0745ac0b13daf5b6 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:03:11) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:10:19 Airlock IAM 2026-11-15 00:13:57 Apache 2026-11-14 23:10:15 Jersey 3.1.10 2026-11-15 00:15:25 SAS Visual Analytics 2026-11-14 23:10:25 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b501-7cc3-b41d-c32cdf61bf19 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-afa3-7fda-b727-cc03e85f3ea2 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-74e6-7c85-a430-1f63ffa7b8be GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-7e1b-7328-ad6b-1a8423ce9f34 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6b93-787f-8c4b-24c84128f518 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-59d9-727e-990e-9e1c8dc3ed45 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-623f-7328-9143-308ac57ac976 GET 200 3307 /auth/ui/app 01a1dc8e-5241-7c46-9fe0-1d7f957eea4d # https://va.baloise.de:8082 in_scope host_id=5566d75d9e11192377fd268799fd384b last_seen=2026-11-15 00:15:00 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:01) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:04:40 Airlock IAM 2026-11-15 00:13:58 Apache 2026-11-14 23:04:31 Jersey 3.1.10 2026-11-15 00:15:27 SAS Visual Analytics 2026-11-14 23:04:41 ## paths method status size path exchange_id GET 303 277 / 01a1dc54-0044-78f4-8e99-b24f43d04af7 GET 504 936 /auth-admin/ 01a1dc1c-dad8-738b-9f0e-f26a3cc782bf GET 504 936 /auth-admin/rest/configuration/configurations 01a1dc1c-db9a-70d5-89dc-32bdf5417643 GET 504 936 /auth-servicecontainer/startTask/ 01a1dc1c-6581-79ce-9cce-18509e70f7ff GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b8e2-73df-beea-b5c17c6fa4a0 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-763e-7c6a-ae2f-4c6d196307f6 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-7f3f-72c7-badb-108c76bcecfa GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6c33-7872-b667-2d1ee18ed198 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5a17-7bd1-95b8-8bac8fd49382 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-63b9-765e-8d99-f5d5b897bcef GET 200 3307 /auth/ui/app 01a1dc8e-5230-7729-9930-dde1ad418040 GET 504 936 /ext-admin/ 01a1dc21-37a6-7b7e-99d2-82f589e8b51b GET 504 936 /ext-admin/admin/ui/app 01a1dc21-ad41-71bb-bae0-30e4170273d8 GET 504 936 /ext-admin/rest/configuration/configurations 01a1dc22-22d6-73e7-8296-2fc54ea82d66 GET 504 936 /ext-h2/ 01a1dc1b-efa4-7d3a-b57e-980aacc814bb GET 504 936 /ext-servicecontainer/startTask/ 01a1dc1c-658f-7313-bfd1-4addae2f13f0 GET 504 936 /h2/ 01a1dc1c-6531-75dc-bec6-0a21e3824d04 GET 504 936 /service-container/startTask/ 01a1dc1c-6581-7eb5-8420-7eb51d3f1958 GET 504 936 /this-path-must-not-exist-bugbounty 01a1dc22-9899-7681-90ef-a247b327e861 GET 0 /auth-h2/ 01a1dc2e-c405-7bff-997a-3179d1c36f5a # https://va.baloise.de:8180 in_scope host_id=5fba3de7a7869f6b626f44ae38776d79 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:03:27) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:10:41 Airlock IAM 2026-11-15 00:13:59 Apache 2026-11-14 23:10:39 Jersey 3.1.10 2026-11-15 00:15:28 SAS Visual Analytics 2026-11-14 23:10:44 ## paths method status size path exchange_id GET 504 936 / 01a1dc19-51e0-790d-9cca-459dcd4ccb64 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-aef3-7eb9-920e-4ecb0bd6a828 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-7984-782a-b412-9f73ce2060af GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-818a-735d-bf1e-a1240bc53f9e GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-70b8-7118-b217-62f09d5cf8b5 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c51-757a-bed3-d2cda620c4dc GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-6613-72f6-8575-1e873f93bfd7 GET 200 3307 /auth/ui/app 01a1dc8e-528a-786f-8bce-3071c5bcc114 # https://va.baloise.de:8280 in_scope host_id=acd2428cf7a7597b7d3a4c7b760c54ac last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:46) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:10:02 Airlock IAM 2026-11-15 00:14:00 Apache 2026-11-14 23:10:00 Jersey 3.1.10 2026-11-15 00:15:30 SAS Visual Analytics 2026-11-14 23:10:05 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b55a-7391-bb27-45db25afb05b GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-afc3-7feb-b2e7-a73da6d1b0a0 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-773e-7ffb-b5fa-2e3b155aa691 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-8071-729d-ba93-f02ae21d467e GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6da5-7cc6-91e4-5f320a047aeb GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5b45-783a-b794-0b65d2e1f5d2 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-6471-78a8-a72d-2da1c88941a3 GET 200 3307 /auth/ui/app 01a1dc8e-5272-7f6d-8ce1-d6c59bda6c48 # https://va.baloise.de:8343 in_scope whitelisting_bypass=cloudfront host_id=644ff211419c984fbcf77f3380c6b191 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:03:35) CloudFront-origin-only alternate TLS listener for the VA Apache/Airlock Gateway and Airlock IAM boundary, using Jersey 3.1.10 and fronting the same SAS Visual Analytics application as the canonical origin. Root, SAS Logon, Visual Analytics, environment-descriptor, WIP and BIWS routes enter the canonical `/auth/check-login` handoff, while `/auth/ui/app` and `/CSRFT759.js` expose the shared IAM frontend. Public and OAuth2 WADL roots reach Jersey but return empty HTTP 500 responses. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The SAS, REST and frontend graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-09 14:38:47 Airlock IAM 2026-11-09 14:38:47 Apache HTTP Server 2026-11-09 14:38:46 Jersey 3.1.10 2026-11-13 18:02:59 SAS 2026-11-09 14:38:48 SAS Visual Analytics 2026-11-13 18:19:48 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b52c-7c87-b8f9-e6e571984290 POST 303 154 /SASBIWS/services/Version 01a1c217-8b2d-74ab-afd7-8f8bda2d035e GET 303 142 /SASLogon/login 01a1c0be-f6f7-7597-a468-1c5714748029 GET 303 150 /SASVisualAnalyticsHub/ 01a1c0ba-1f25-7100-af85-5dfa6bc44f9a GET 302 0 /auth/check-login 01a1c0be-f8d6-7063-865a-92caf5f992ce GET 303 123 /auth/login-oneshot 01a1db9d-4aab-766d-b7db-475fd06da785 GET 500 0 /auth/rest/public/application.wadl 01a1ce10-9680-71ef-856d-731c9bed06cc GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbb3-40f0-71e0-825c-a61f406592f6 GET 0 /airlock/rest/v3/api-docs 01a1c32b-51c7-76e4-9215-3abdf2f4d8d4 # https://va.baloise.de:8443 in_scope whitelisting_bypass=cloudfront host_id=cac3b488e12917591a919a2aeea516dc last_seen=2026-11-14 22:11:41 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:03:38) CloudFront-origin-accessible alternate TLS listener for the VA Airlock IAM application and its Jersey 3.1.10 REST layer. `/auth/ui/3rdpartylicenses.txt` serves the same 32,193-byte public IAM licence inventory as the canonical `https://va.baloise.de` deployment. The full authentication frontend, REST route graph and SAS server-side application description are represented on the canonical origin. ## tech technology version checked_at Airlock IAM 2026-11-13 01:56:26 Jersey 3.1.10 2026-11-13 18:03:01 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b519-7385-b559-18c5e5127e72 GET 504 936 /auth-admin/ 01a1dc1d-c738-7c16-89d7-50177c530da8 GET 504 936 /auth-admin/rest/configuration/configurations 01a1dc1d-c79b-7450-8061-8a3b99745629 GET 504 936 /auth-h2/ 01a1dc1c-dc5b-7dde-ab25-04b9c5e3a7d8 GET 504 936 /auth-servicecontainer/startTask/ 01a1dc1d-5185-73b5-a556-fded8c224896 POST 504 936 /auth-transaction-approval/rest/transaction-approval/flows/bugbounty/select 01a1dbb2-aae0-75f8-a941-ef6ecc2bf4fa GET 504 936 /auth/check-login 01a1dbbf-cfed-7d4f-909d-54ef600c1b14 GET 303 123 /auth/login-oneshot 01a1db9d-4b08-7e98-be8d-ca6847ca5bbe GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbbe-fc3e-746e-86d1-1f02640db7ab GET 504 936 /ext-admin/ 01a1dc1d-c739-72df-90f1-ce94b6447c4f GET 504 936 /ext-api-policy-service/rest/health/ready 01a1dbbb-50db-7989-96b1-85e55a5126b2 GET 504 936 /ext-h2/ 01a1dc1d-508a-7d4b-a928-506e748d3a4e GET 504 936 /ext-servicecontainer/startTask/ 01a1dc1d-5208-794e-aa64-4faed33ffb12 GET 504 936 /ext-transaction-approval/rest/health/ready 01a1dbbb-50d5-7980-a985-b24f9ae0a995 GET 504 936 /h2/ 01a1dc1d-518f-79e9-8afa-6c0cad9fb799 GET 504 936 /service-container/startTask/ 01a1dc1d-c623-7c8e-a9eb-66e8bcfe9c14 GET 504 936 /this-path-must-not-exist-bugbounty 01a1dc1e-3bc0-7ca2-96de-aa0f5bc4a9c1 # https://va.baloise.de:8561 in_scope host_id=8565ad6b4fbe93e454413c36778dc0e8 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:38) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:40 Airlock IAM 2026-11-15 00:14:01 Apache 2026-11-14 23:23:39 Jersey 3.1.10 2026-11-15 00:15:31 SAS Visual Analytics 2026-11-14 23:23:41 ## paths method status size path exchange_id CONNECT 303 277 / 01a1dc8a-9edf-7b92-a26b-6446c5cdbea6 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b00b-731d-8971-25051d6dc8a5 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-754a-7872-8c56-89049a143887 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-7d36-76be-96e8-baf323c38cfb GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6b90-774f-a2f3-20f768877ef9 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5a1c-7334-92c6-7fbd08d0551c GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-631a-735c-a81b-f88b89cf34e8 GET 200 3307 /auth/ui/app 01a1dc8e-522b-755c-95fd-1b819602cd60 # https://va.baloise.de:8580 in_scope host_id=e1bcf941a425b2117c945169f9650f1a last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:03:21) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:10:31 Airlock IAM 2026-11-15 00:14:02 Apache 2026-11-14 23:10:28 Jersey 3.1.10 2026-11-15 00:15:33 SAS Visual Analytics 2026-11-14 23:10:36 ## paths method status size path exchange_id GET 504 936 / 01a1dc19-c62f-75ad-b8cb-a7664d575112 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-af45-7003-a604-23c53e361a44 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-73bf-7e9c-ae01-a496fcd627ec GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-7ce2-70bd-868e-66b70aa3ba95 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-69a0-7e50-94b7-4eba6a0b4ca0 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5918-78c4-94a9-1d12b6aff645 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-617b-777b-901d-42f71be561b0 GET 200 3307 /auth/ui/app 01a1dc8e-5219-7141-a15f-ecce0a48e7de # https://va.baloise.de:8591 in_scope host_id=06ab843b13e3d6ee8e54ce88354bf507 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:42) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:46 Airlock IAM 2026-11-15 00:14:03 Apache 2026-11-14 23:23:44 Jersey 3.1.10 2026-11-15 00:15:35 SAS Visual Analytics 2026-11-14 23:23:47 ## paths method status size path exchange_id CONNECT 303 277 / 01a1dc8a-9f96-7030-a1d3-6ed90ca13be0 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-af62-7948-94a7-77960b8eff8a GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-761b-7440-ba16-bf2768abd7ef GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-7f8f-7eca-ba41-f692b40abadb GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6d50-7fa7-8a88-70bda48e8512 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5bf4-7add-9aad-238cb6031f8d GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-64c0-7756-ba4b-3197f7f98559 GET 200 3307 /auth/ui/app 01a1dc8e-52a5-757a-8d97-3a088e7a494d # https://va.baloise.de:8592 in_scope host_id=f39f9b9a6c6b2f66116886080e2d0d18 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:48) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:51 Airlock IAM 2026-11-15 00:14:06 Apache 2026-11-14 23:23:50 Jersey 3.1.10 2026-11-15 00:15:38 SAS Visual Analytics 2026-11-14 23:23:53 ## paths method status size path exchange_id GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b08a-736d-a7ba-cd0dcf242666 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-776a-7932-b63c-9395149a9386 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-80f6-7b29-b96d-bc55472a5a63 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6e38-781e-892f-16086e3d3a5b GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c19-712e-b10a-2f6d36c45722 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-64be-786d-b593-893dcdfdde88 GET 200 3307 /auth/ui/app 01a1dc8e-52a3-74ba-8e16-cf0219f9af73 GET 0 / 01a1dc82-978b-7d3d-99a2-e2abf42dca54 # https://va.baloise.de:8599 in_scope host_id=0c1eeb4c0292711807da9687aa84cabb last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:54) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:57 Airlock IAM 2026-11-15 00:14:07 Apache 2026-11-14 23:23:56 Jersey 3.1.10 2026-11-15 00:15:40 SAS Visual Analytics 2026-11-14 23:23:59 ## paths method status size path exchange_id GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-afce-7247-9430-0c1affee78b9 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-747b-7ff1-a3b2-d8ef456477cc GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-7eac-788b-b023-bc021500f356 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6b64-7c07-b998-dcb80bca165d GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5aef-716b-9f45-6dbcadc200ad GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-63f9-7854-a079-5eb7702d5796 GET 200 3307 /auth/ui/app 01a1dc8e-52c1-7a69-a16e-eb55116b517d GET 0 / 01a1dc82-ae67-7d74-95e7-d6990fadaab8 # https://va.baloise.de:8601 in_scope host_id=7caa1120168ec327125e470bbc825387 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:24:00) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:24:03 Airlock IAM 2026-11-15 00:14:08 Apache 2026-11-14 23:24:02 Jersey 3.1.10 2026-11-15 00:15:42 SAS Visual Analytics 2026-11-14 23:24:05 ## paths method status size path exchange_id GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b050-7777-9d53-8a35e29ca5d0 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-7b31-7aeb-b769-3f1ef2ed1d90 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-8239-7cd9-8a11-9e92fcf5ed53 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-7053-7d3b-b83e-69a056e13d47 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c06-7fe7-a9c5-05d81b78895d GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-6654-77d3-aac2-2ccf5c204076 GET 200 3307 /auth/ui/app 01a1dc8e-5288-7492-b61d-9a65883f298d GET 0 / 01a1dc82-c75a-7405-9870-9364ad706f60 # https://va.baloise.de:8888 in_scope host_id=80b33d38d8fb2bdb17df5a89ab895676 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:37) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:09:55 Airlock IAM 2026-11-15 00:14:09 Apache 2026-11-14 23:09:52 Jersey 3.1.10 2026-11-15 00:15:44 SAS Visual Analytics 2026-11-14 23:09:57 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b56a-7d94-81fd-803c01fe2be3 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b01f-7078-b105-2e81fad3dee2 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-775a-76cf-8df4-8b96ec6d73f7 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-804f-73e8-b040-e2bba76b84c3 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6e9e-73be-8df2-5f2f0ada7900 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c78-7fec-bc24-c217aa0da7ed GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-6535-77a6-bd63-14bfb1830ecf GET 200 3307 /auth/ui/app 01a1dc8e-52c4-7883-a36f-1b083b8c84dc # https://va.baloise.de:8983 in_scope host_id=c4172ab1c57d6e756cf5e3e12f287a32 last_seen=2026-11-15 00:15:00 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:36) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:09:43 Airlock IAM 2026-11-15 00:14:10 Apache 2026-11-14 23:09:37 Jersey 3.1.10 2026-11-15 00:15:46 SAS Visual Analytics 2026-11-14 23:09:48 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b571-7601-bbb0-fd0a91fa7412 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b8b4-732c-9e67-8933ffcbeffb GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-78a4-7fc3-98d9-979d5b654ad0 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-8132-76d3-98b5-f6578976e5c0 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6ef1-785e-aad4-4ada88296f05 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c6f-773d-9046-3a28b01074c2 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-651c-774f-b345-a24db170f6ae GET 200 3307 /auth/ui/app 01a1dc8e-52c4-7d2a-b47d-9977612bad2b # https://va.baloise.de:8999 in_scope host_id=ff83ac73e837db0e11872e6f34e3151b last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:35) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:09:26 Airlock IAM 2026-11-15 00:14:11 Apache 2026-11-14 23:09:26 Jersey 3.1.10 2026-11-15 00:15:48 SAS Visual Analytics 2026-11-14 23:09:31 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b573-7282-8df2-10f14aa7f14b GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-af65-7e7f-93b4-5f3ad52b72a5 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-74e9-70aa-9608-d86b61d69c09 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-7d69-7b4a-b483-fdef9dcda731 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6ab5-77f3-b7b4-afe60c6cdbec GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5a31-75ad-b6a3-a57c7b767ed5 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-62dd-7081-82f5-0b4219bcab39 GET 200 3307 /auth/ui/app 01a1dc8e-5251-72a2-bff6-a0536989b279 # https://va.baloise.de:9000 in_scope host_id=5333d10aea02b227815822524aedd96c last_seen=2026-11-15 00:15:00 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:34) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:09:26 Airlock IAM 2026-11-15 00:14:12 Apache 2026-11-14 23:09:26 Jersey 3.1.10 2026-11-15 00:15:49 SAS Visual Analytics 2026-11-14 23:09:26 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b584-75d1-9a82-c51e306ad454 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b800-7248-8d1d-6a36add1ade1 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-7655-74bf-bb67-991435e767d0 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-7fc4-771a-a1ac-5257c299fee8 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6da2-7754-9fcd-bbf21cdb63dc GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5be8-7826-b174-663bf024be48 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-6482-7963-9fde-1ee9c15f4623 GET 200 3307 /auth/ui/app 01a1dc8e-5291-7cae-a974-8f4a2ef11a19 # https://va.baloise.de:9001 in_scope host_id=0eb9a2c7fb249d8c296d62a5a2351149 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:32) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:09:25 Airlock IAM 2026-11-15 00:14:13 Apache 2026-11-14 23:09:25 Jersey 3.1.10 2026-11-15 00:15:51 SAS Visual Analytics 2026-11-14 23:09:26 ## paths method status size path exchange_id GET 504 936 / 01a1dc18-6629-7e32-994a-f9eb7a9bdf53 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b05c-7a95-9e3c-7efd5c530583 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-79bd-78a7-8159-17f4cebbf292 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-81cb-78bd-803b-7e21cee393d3 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-70af-7f8d-b365-015e57a0e0d9 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c79-7895-adf3-882be6541242 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-667b-75c3-bc79-6177ff189dbf GET 200 3307 /auth/ui/app 01a1dc8e-5299-7ce2-a157-450206f847f0 # https://va.baloise.de:9002 in_scope host_id=3737c2a264a42db407bab1145f165e19 last_seen=2026-11-15 00:15:00 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:31) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:56:34 Airlock IAM 2026-11-15 00:14:15 Apache 2026-11-14 23:56:32 Jersey 3.1.10 2026-11-15 00:15:53 SAS Visual Analytics 2026-11-14 23:56:35 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b5b0-7918-ab2f-a5341a44a4bc GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b8e0-7e3c-abae-6ecb694b461d GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-7866-75e3-bd55-25abaa4ac637 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-8163-7090-a034-1c36516f5525 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6f23-7aee-b3f2-820f8cbc860d GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c3f-74b8-8c60-dce2e35eaef4 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-64dd-7428-b3e1-f92f4d0c0c61 GET 200 3307 /auth/ui/app 01a1dc8e-52c7-70f8-851d-bca13cf06cf9 # https://va.baloise.de:9090 in_scope host_id=b45bc9f3c5c5dddecc2ec2316a9b8aa8 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:30) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:56:39 Airlock IAM 2026-11-15 00:14:17 Apache 2026-11-14 23:56:38 Jersey 3.1.10 2026-11-15 00:15:54 SAS Visual Analytics 2026-11-14 23:56:41 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b598-7104-bac1-a527613aa6b1 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b043-73bb-93b0-7c6830060360 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-79a5-7201-bdcc-ee04db93d46f GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-8158-7ef7-9e02-64bae4dcc1dd GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-7130-7139-9f9b-d7c67b58ac61 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c74-7733-b253-594562166568 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-6684-74e9-a8db-ea0e7bc9a691 GET 200 3307 /auth/ui/app 01a1dc8e-52dd-7d98-bd99-2cb808633255 # https://va.baloise.de:9443 in_scope whitelisting_bypass=cloudfront host_id=22dbb2114cbf31197b70c4359873248d last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:03:40) CloudFront-origin-accessible alternate TLS listener for the VA Airlock IAM application and its Jersey 3.1.10 REST layer. `/auth/ui/3rdpartylicenses.txt` serves the same 32,193-byte public IAM licence inventory as the canonical `https://va.baloise.de` deployment. The full authentication frontend, REST route graph and SAS server-side application description are represented on the canonical origin. ## tech technology version checked_at Airlock IAM 2026-11-13 01:56:27 Jersey 3.1.10 2026-11-13 18:03:06 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b5ee-784b-bfc2-fa8c797456ab POST 504 936 /auth-transaction-approval/rest/transaction-approval/flows/bugbounty/select 01a1dbb2-849b-7e79-8797-808d8a1e7ca0 GET 303 123 /auth/login-oneshot 01a1db9d-4b2e-7141-b167-40f176f5c1ae GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbbe-fc5c-7ef1-88af-721c4792693c GET 504 936 /ext-api-policy-service/rest/health/ready 01a1dbbb-50df-7364-9f63-6d2168b3a716 GET 504 936 /ext-h2/ 01a1dbbd-ad38-7b60-97c3-e5c8fb277767 GET 504 936 /ext-transaction-approval/rest/health/ready 01a1dbbb-50d9-7295-8d6b-cb6f716e66bb GET 504 936 /service-container/startTask/ 01a1da58-091f-7d92-8908-12a116de9e0f # https://va.baloise.de:9990 in_scope host_id=171b44b346244774405fcffc888af747 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:29) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:56:44 Airlock IAM 2026-11-15 00:14:18 Apache 2026-11-14 23:56:42 Jersey 3.1.10 2026-11-15 00:15:56 SAS Visual Analytics 2026-11-14 23:56:48 ## paths method status size path exchange_id GET 504 936 / 01a1dc18-db00-790b-a1cc-7c3a542ad20b GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b083-7833-ad1a-4350882cb72f GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-78bb-737a-8478-39213bbbe416 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-80f9-79e6-a3f7-b5c54733d72b GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6f4a-7bfc-8fde-8d2e7512b04e GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c3c-766b-b52a-6cf61697f07b GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-65cd-73e3-80ea-50ab17685954 GET 200 3307 /auth/ui/app 01a1dc8e-5295-76e5-856e-bb4a1e17001a # https://va.baloise.de:9999 in_scope host_id=09acaa5bd6ef58b554ba113f2da741ea last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:06) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:04:45 Airlock IAM 2026-11-15 00:14:19 Apache 2026-11-14 23:04:44 Jersey 3.1.10 2026-11-15 00:15:57 SAS Visual Analytics 2026-11-14 23:04:47 ## paths method status size path exchange_id GET 303 277 / 01a1dc18-66d6-789e-bd16-d9b4945708bc GET 504 936 /auth-admin/ 01a1dc1e-b377-7c5b-943c-ed7618c62296 GET 504 936 /auth-admin/rest/configuration/configurations 01a1dc1f-2923-79f1-a019-aaaf0a912bef GET 504 936 /auth-h2/ 01a1dc1e-3cf5-7a0b-b12d-f23995d1cb30 GET 504 936 /auth-servicecontainer/startTask/ 01a1dc1e-b15b-7439-83a4-4910d84c8ade GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b0ac-7909-bb22-0ae5519a5e60 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-7953-784a-b3cb-33cd4266abab GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-8178-752b-814f-135657fa87a5 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6fee-772c-bedf-7cfc7c8e41f4 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c0f-75f9-b7d8-203447680fb0 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-6651-76fd-9308-f4206d66ffe0 GET 200 3307 /auth/ui/app 01a1dc8e-52c5-79a8-ad6d-7656f44ee6c5 GET 504 936 /ext-admin/ 01a1dc1f-26f2-7ade-a0cc-26e0b42c847c GET 504 936 /ext-h2/ 01a1dc1e-3ce6-736c-b0ef-e21087fdf283 GET 504 936 /ext-servicecontainer/startTask/ 01a1dc1e-b35d-7b4b-abd7-a4af95c4f827 GET 504 936 /h2/ 01a1dc1e-3d33-7260-ac7e-19a10a110636 GET 504 936 /service-container/startTask/ 01a1dc1e-b368-76b7-be48-5dafbf5c4f42 GET 504 936 /this-path-must-not-exist-bugbounty 01a1dc1f-2911-7d3a-a553-cdd708c1ad05 # https://va.baloise.de:10000 in_scope host_id=f3274fb0f99e850cbd23d476d8b42432 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:27) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:56:28 Airlock IAM 2026-11-15 00:14:20 Apache 2026-11-14 23:56:26 Jersey 3.1.10 2026-11-15 00:15:58 SAS Visual Analytics 2026-11-14 23:56:30 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b5d4-705f-bff2-919fb856cb17 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b01f-7783-8cee-6d9c089910eb GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-7ad4-7f2f-8109-89a7cfbfc50a GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-8243-7760-a0b8-3f988c2eb950 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-70ef-757c-8826-70fabd343f4b GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c96-7685-aadc-cfc68ada6782 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-665f-7f2b-92c2-d827719298e7 GET 200 3307 /auth/ui/app 01a1dc8e-52e3-7212-afd4-f765a60d4479 # https://va.baloise.de:10080 in_scope host_id=39a07a133f9c30dceab8464200a3a399 last_seen=2026-11-15 00:15:00 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:26) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:06:22 Airlock IAM 2026-11-15 00:14:21 Apache 2026-11-14 23:06:20 Jersey 3.1.10 2026-11-15 00:15:59 SAS Visual Analytics 2026-11-14 23:06:25 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b5e4-7deb-b364-e52a952d7bcb GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b7df-79a6-8dd5-eb4b6699fe8e GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-79f1-7fb4-81e0-d481d4761aee GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-81c0-7b5b-a1cd-225bb1b005ce GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-708d-73f6-9924-7a47528ee297 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5d17-7a19-816b-b9f5d781cadc GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-669d-7c40-9842-b1db4ef9b5d0 GET 200 3307 /auth/ui/app 01a1dc8e-5306-7763-9805-c698114117b1 # https://va.baloise.de:10443 in_scope host_id=fb2caf067b15c37bc0c73184f424d8d0 last_seen=2026-11-15 00:15:00 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:21) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:05:54 Airlock IAM 2026-11-15 00:14:22 Apache 2026-11-14 23:05:40 Jersey 3.1.10 2026-11-15 00:16:00 SAS Visual Analytics 2026-11-14 23:06:06 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b5f7-7c95-8024-9a7ce14079f6 GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b907-7057-b0af-694c350be6c4 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-78a1-7f2c-b2b0-19fa382a5f55 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-8170-752f-8d0d-81a94eb1abea GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6fed-792e-a9a3-655db2dffc11 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c2a-7b9a-98fb-92b89ccebe49 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-65e9-73c3-aa15-3730108b69ee GET 200 3307 /auth/ui/app 01a1dc8e-52ed-70e1-b31f-f9c2707ccd43 # https://va.baloise.de:12345 in_scope host_id=64a82eb28394b54802c029075b50dc04 last_seen=2026-11-15 00:15:00 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:14) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:04:53 Airlock IAM 2026-11-15 00:14:23 Apache 2026-11-14 23:04:50 Jersey 3.1.10 2026-11-15 00:16:01 SAS Visual Analytics 2026-11-14 23:04:56 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b602-78a1-ae7d-5ab8960d88f3 GET 303 123 /auth/login-oneshot 01a1db9d-4b8c-7126-8bc3-e5692516906f GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b8e9-72a1-afab-b9dd2fbb29f8 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-7aa5-75e2-b03b-ff9b4cd2350e GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-8223-7d3a-a74b-7cb493ea1be5 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-7107-793d-919e-6fad58bd059e GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5ca6-7f0d-970d-f7c651bdd200 GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-6676-7651-9f99-e5d57d82a773 GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbb3-87f6-75fb-9e83-297574c9efa6 GET 200 3307 /auth/ui/app 01a1dc8e-5311-7223-b681-2ab1246b034b # https://va.baloise.de:15452 in_scope host_id=a78c677e86d9b7340e277fbf040c4407 last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:24:06) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:24:10 Airlock IAM 2026-11-15 00:14:24 Apache 2026-11-14 23:24:08 Jersey 3.1.10 2026-11-15 00:16:02 SAS Visual Analytics 2026-11-14 23:24:12 ## paths method status size path exchange_id GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-b04c-7dc0-8abe-de4684f544f1 GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-7a74-7f7f-8d44-e86105d00285 GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-81aa-78af-8afb-8ec75c133c36 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-7129-7d28-b488-b8ee9cd1c440 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c31-7e04-9438-38685069a4eb GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-66ac-7aa6-b2a5-9d3ff0544bef GET 200 3307 /auth/ui/app 01a1dc8e-52f2-767e-a6d6-3447055d0f2d GET 0 / 01a1dc82-dfba-7adb-b68d-b9686a098746 # https://va.baloise.de:21031 in_scope host_id=fcde47bd80b75c215ae2549236353f6b last_seen=2026-11-15 00:14:58 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:24:14) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:24:18 Airlock IAM 2026-11-15 00:14:25 Apache 2026-11-14 23:24:16 Jersey 3.1.10 2026-11-15 00:16:03 SAS Visual Analytics 2026-11-14 23:24:19 ## paths method status size path exchange_id GET 500 0 /auth/rest/public/application.wadl 01a1dc8e-af62-79b1-81e4-c213cda1face GET 200 29 /auth/rest/public/authentication/ui/configuration/access 01a1dc8e-76d2-7645-a94c-8f4cf5c295dc GET 200 27 /auth/rest/public/authentication/ui/default/application/id 01a1dc8e-8081-7c46-8328-2127ac284028 GET 200 602 /auth/rest/public/maintenance-messages 01a1dc8e-6d94-76f1-9c72-15d4aa0c9944 GET 200 209 /auth/rest/public/ui/languages 01a1dc8e-5c85-7d6f-8c9c-c7a5d8565fcb GET 200 156 /auth/rest/public/ui/static/configuration 01a1dc8e-64ad-75af-be9c-d4e5df17bda8 GET 200 3307 /auth/ui/app 01a1dc8e-52ee-766e-a1bb-598507b6f631 GET 0 / 01a1dc82-f97e-74f1-9be8-83435f6557a4