# http://va.baloise.de in_scope host_id=ea3891610348045b2106f1154798f6ba last_seen=2026-11-13 01:27:22 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:25:37) Plain-HTTP Apache redirect edge for VA. Root and SAS application paths preserve their path while redirecting to HTTPS. The SAS Visual Analytics and Airlock IAM application is represented on the canonical HTTPS origin. ## tech technology version checked_at Apache HTTP Server 2026-11-09 02:39:25 ## paths method status size path exchange_id GET 301 270 / 01a1d284-3895-7236-bc33-651aa8ada70a POST 301 297 /SASBIWS/servlet/AxisServlet 01a1cade-7f82-7576-ac91-b3725c958b97 POST 303 201 /SASWIPClientAccess/remote/ServiceRegistry 01a1c60d-f629-7245-a887-0840853bf633 # http://va.baloise.de:1099 in_scope host_id=62333a63b41c0f9a9e5cb8fb21baa92e last_seen=2026-11-14 22:05:49 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-dbc6-705a-bf01-a730de7ca96a # http://va.baloise.de:4401 in_scope host_id=6d4cc68e4d77e46f94721c771ec2ab28 last_seen=2026-11-14 22:04:33 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:25:40) Unavailable plain-HTTP scheme variant on port 4401. Direct and configured-route requests return only timeouts or provider-generated gateway failures, with no target response, application route graph or identifiable server-side product. ## paths method status size path exchange_id GET 504 936 / 01a1dc17-b488-708a-be4d-93ba3bf21d0f GET 504 936 /SASBIWS/servlet/AxisServlet 01a1cad5-7fba-77d0-8ad6-78ba73691c93 # http://va.baloise.de:4447 in_scope host_id=a4f91fc829b4c7592ed210e052d588d9 last_seen=2026-11-14 22:06:18 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc19-508c-7a3d-a961-323a5ccc5e1b # http://va.baloise.de:7443 in_scope host_id=661e1e0ce4ddf2547f819bf0d84a65c6 last_seen=2026-11-14 22:04:33 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc17-b490-79ff-b598-e99d28599bc1 # http://va.baloise.de:7980 in_scope host_id=786e064577e9a3999ff6cd4209374ef3 last_seen=2026-11-14 05:04:23 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:25:42) Unavailable alternate plain-HTTP listener. Requests to SAS Visual Analytics paths return only timeouts or provider-generated gateway failures, with no target response, application route graph or identifiable server-side product. ## paths method status size path exchange_id GET 504 936 /SASVisualAnalyticsHub/ 01a1c0ba-c351-7095-a7ac-9fe296fe8ac3 GET / 01a1d871-6a94-75b0-8b46-0e2a9f326f10 # http://va.baloise.de:8009 in_scope host_id=9fcb926c3cd23a3520d8fdefd034ea4e last_seen=2026-11-14 22:04:33 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:03:30) Alternate plain-HTTP Apache listener; / permanently redirects to the canonical https://va.baloise.de/ SAS Visual Analytics application. ## tech technology version checked_at Apache 2026-11-14 23:10:46 ## paths method status size path exchange_id GET 504 936 / 01a1dc17-b4e4-7dbe-9127-18a2b5380278 GET 0 /SASWIPClientAccess/remote/ServiceRegistry 01a1dadd-e161-7a4a-9d75-eb059b11e3d4 # http://va.baloise.de:8080 in_scope host_id=743a2d19d635d350951e419f228e251e last_seen=2026-11-14 22:04:39 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:25:45) Unavailable alternate plain-HTTP listener. Requests to SAS Logon paths return only timeouts or provider-generated gateway failures, with no target response, application route graph or identifiable server-side product. ## paths method status size path exchange_id GET 504 936 / 01a1dc17-cdfe-7a07-8689-af6a4dad8a35 GET 303 175 /api/jsonws 01a1dbd0-23ad-73d4-8039-cfde2236855b GET 0 /SASLogon/login 01a1c0bf-af20-724e-90eb-dff89fb543c7 # http://va.baloise.de:8081 in_scope host_id=f725d20e0143e044f13095f73f283ae7 last_seen=2026-11-14 22:04:40 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc17-cf02-7bc5-bd32-893be476556a # http://va.baloise.de:8082 in_scope host_id=559d300a06869ad79d79c383c3e9c3c9 last_seen=2026-11-14 22:05:18 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-6587-780d-beab-b7c9c037b0ee # http://va.baloise.de:8180 in_scope host_id=49ef6e66959b9f6c30b9785382d53b03 last_seen=2026-11-14 22:06:19 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc19-514a-7401-99e5-6eddaa91b1bf # http://va.baloise.de:8280 in_scope host_id=6a77061c43c48fa0add90dda197cf327 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-27ef-739a-be83-f377085541b5 # http://va.baloise.de:8580 in_scope host_id=13ae59ac0e5c803ec9cd323e9e3db007 last_seen=2026-11-14 22:06:49 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc19-c61f-76d4-b7bd-b6ab489b7f43 # http://va.baloise.de:8888 in_scope host_id=91376d86de090a3bfc087457b73db648 last_seen=2026-11-14 22:04:40 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc17-d019-7f29-ad4d-dda0f85a2198 # http://va.baloise.de:8983 in_scope host_id=f829ecefc7ac470463163a438fecf9d8 last_seen=2026-11-14 22:04:40 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc17-cf12-7a97-83d2-a5b14f4eb67b # http://va.baloise.de:9000 in_scope host_id=b64a9f0d6f67a6043bf19e541985a459 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-287c-79a0-9993-8b2c5cc6f1c1 # http://va.baloise.de:9001 in_scope host_id=f8f700ea5cf59fd720656bc07bdb84e1 last_seen=2026-11-14 22:05:18 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-6571-73ec-9142-edaf313783e8 # http://va.baloise.de:9002 in_scope host_id=bd8c972c8084493afe19ed77cceb743c last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-2918-762e-9f0f-b774b04709c1 # http://va.baloise.de:9090 in_scope host_id=b72a578bce511c0fd7c5b3d79437eaa6 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-291a-7bc9-ba2f-e53f34109d44 # http://va.baloise.de:9990 in_scope host_id=4c67995165da9340ce039ebafbfcfbae last_seen=2026-11-14 22:05:18 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-6633-75ba-bc81-455ee79cd05d # http://va.baloise.de:9999 in_scope host_id=68b8d699faaa45460657d55952b4e003 last_seen=2026-11-14 22:05:48 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-db13-71b6-a505-ea117ae7d3b0 # http://va.baloise.de:10000 in_scope host_id=38be294a306be0ab98d14fb195c5f571 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-2933-780e-b086-da6f7bc6d569 # http://va.baloise.de:10080 in_scope host_id=950e130b78d961463f13aaccf7c895f6 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-2942-72e7-b369-aa1a179223c8 # http://va.baloise.de:10443 in_scope host_id=ff3e42ae3b03499918c84f1f2671efcc last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-2949-7d7c-96f9-8ffeadb59bd0 # http://va.baloise.de:12345 in_scope host_id=378736f653552826ea979f9f8ff563a4 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 504 936 / 01a1dc18-294c-76e1-9560-7b7a3c375a35 # https://va.baloise.de:1 in_scope host_id=e0bab2fec784abf642bb533c09df96b4 last_seen=2026-11-14 23:22:32 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## paths method status size path exchange_id GET 0 / 01a1dc5e-a506-7459-8fb7-8b05cc060694 # https://va.baloise.de in_scope host_id=65100d6f9a0711452e95367e3b18dd6f last_seen=2026-11-14 23:31:45 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 13:41:51) SAS Visual Analytics behind Apache HTTP Server, Airlock Gateway and Airlock IAM. Root redirects to `/SASLogon`. SAS Web Infrastructure Platform routes include the WIP shell and client-access root, remote and REST ServiceRegistry, UrlGeneratorService, AuthenticationService, WIP SOAP names and `/sas/sas-environment.xml`. Stored Process, Job Execution, Studio, Environment Manager, Visual Analytics, BIWS and Content Server families enter `/auth/check-login?Location=...` before reaching SAS. That handoff is also the root catch-all for arbitrary unknown names, so only the specifically named SAS families represent installed application contexts. Direct `/auth` redirects to `/auth/`, which creates Airlock session and CSRF state before redirecting relatively to `ui/app`; `/auth/ui` similarly canonicalizes through `/auth/ui/` to `./app`. `/auth/login` creates the same state and redirects directly to `/auth/ui/app/auth/application/access`. Selector `sas_va` starts a `PASSWORD_REQUIRED` flow using `default-username-password`, advertises an optional `portal-redirect` step and links to `password-reset-init`. Airlock state uses `AL_SESS-S`, `CSRFT759-S`, mirrored `X-CSRFT759` and `X-Same-Domain: 1`. The IAM inventory contains 380 normalized REST templates and 390 method/path bindings covering authentication, registration, Airlock 2FA, Cronto, OTP, FIDO, OATH/VASCO/matrix, password, SSI, account-link, token/device, OAuth consent/session, remember-me, representation, migration, password-only, secret-question and language handlers. The complete REST method matrix and 213 requestable shared UI templates are represented once on `mein-portal-registrierung.baloise.de`. Previously served WADLs identify Jersey 3.1.10; current public and OAuth2 WADL GET requests return empty HTTP 500 responses. The current shell links `/auth/ui/styles.aa4c4328f9bb7e9b.css` and `/auth/ui/assets/custom/js/iam-custom.af5b4c4473394040.js`. Its runtime defines 180 lazy chunks and 214 Angular route entries; the shared router composes to 199 concrete paths below `/auth/ui/app`; its requestable route templates are mapped once on the registration tenant. The host export has 31 text entries: 24 real files, six 2–312-byte encoded i18n-dispatcher responses, and `/auth/ui/app/auth/application/assets/airlock/i18n/en.json`, which is a 3,307-byte HTML shell alias rather than JSON. Twenty-one real files are byte-identical to the canonical 193-file Mein Portal IAM frontend. No usable source maps are published. VA has SAS-specific gateway pages: `/error_path/404.html` is an 8,114-byte Visual Analytics error page with ServiceDesk contact details, and `/error_path/maintenance.html` is an 8,171-byte multilingual maintenance page identifying a server maintenance state. Both use inline styling and embedded logos; `/error_path/img/favicon.ico` is the standalone favicon. Alternate TLS listeners expose the same SAS/IAM graph through CloudFront origin-facing addresses. Airlock prevents disclosure of SAS release or maintenance-level details. The formerly public authentication, self-service, tech-client-registration and user-self-registration WADL routes now return empty HTTP 500 responses. Jersey 3.1.10 remains identified from the retained prior WADLs. ## tests tested_at title detail 2026-11-14 22:44:29 unauthenticated: documented SAS demo/default accounts rejected by VA login Fresh Airlock sas_va sessions each submitted one login attempt using SAS documentation examples sasdemo:Orion123, sasadm@saspw:Orion123 and sastrust@saspw:Orion123. Every password/check response returned USERNAME_PASSWORD_WRONG and remained PASSWORD_REQUIRED; no protected SAS route was requested. No other passwords or repeated attempts were used. ## tech technology version checked_at Airlock Gateway 2026-11-13 11:42:14 Airlock IAM 2026-11-13 11:42:12 Apache HTTP Server 2026-11-13 11:42:15 Jersey 3.1.10 2026-11-10 07:59:23 SAS 2026-11-13 00:25:19 SAS Visual Analytics 2026-11-13 06:12:01 ## paths (50 of 529; toadcli paths) method status size path exchange_id GET 303 277 / 01a1dc67-166f-7cab-a181-73e7ebe75430 GET 303 169 /%2E/SASBIWS/services/Version 01a1c4ae-a00b-771e-90d0-b0fcb05a709d POST 303 179 /%2E/SASWIPClientAccess/remote/ServiceRegistry 01a1c500-5dc6-7147-8dff-7476532213be GET 303 166 /%2FSASBIWS/services/Version 01a1c4ae-9f54-763d-932f-ed5745b6a3ea GET 303 165 /%53ASBIWS/services/Version 01a1c2c3-0735-72ca-b3b9-8511224c6436 GET 303 151 /%53ASStoredProcess/do 01a0fa14-5f35-771f-884d-70e1e2a21e16 GET 303 166 /%5CSASBIWS/services/Version 01a1c4ae-a1f2-76e4-8fa3-065024b53a80 OPTIONS 200 0 /* 01a1dbd0-245d-75db-9db4-666f64f8cea0 GET 303 156 /.;/SASStoredProcess/do 01a0fa14-459f-7313-886b-9cdcec0f2dba GET 303 174 /.well-known/oauth-authorization-server 01a1c5df-f829-7051-b099-6f8baa63aec5 GET 303 166 /.well-known/openid-configuration 01a1c5df-f7a3-7538-9ff3-de6c3b735681 GET 303 164 //SASBIWS/services/Version 01a1c413-2f23-718d-a8f4-311dbafad9c1 GET 303 150 //SASStoredProcess/do 01a0fa14-3c72-7266-bcf7-6ffb0bd20975 GET 303 208 //auth-servicecontainer/startTask/ 01a1da03-484e-78d1-aa3d-831e9190193d GET 303 197 /;jsessionid=bugbounty-dwbzn/SASBIWS/services/Version 01a1c4d9-af0d-753d-890c-abf213b08c0c GET 200 9085 /CSRFT759.js 01a1c644-bc5b-74ca-b08f-97fe1f07add9 GET 303 202 /CSRFT759.js%252f..%252fSASBIWS%252fservices%252fVersion 01a1c2c3-4f23-7679-b01c-f7bc2b8eaee5 GET 303 194 /CSRFT759.js%2F..%2FSASBIWS%2Fservices%2FVersion 01a1c2c3-4cb2-721c-8797-cbd41fb5f33d GET 303 191 /CSRFT759.js%3F/../SASBIWS/services/Version 01a1c488-807f-76e7-a1a0-e026ab105fb5 GET 303 194 /CSRFT759.js%5C..%5CSASBIWS%5Cservices%5CVersion 01a1c488-57ab-72a9-ad70-be31233c94f2 GET 303 186 /CSRFT759.js/%2E%2E/SASBIWS/servlet/AxisServlet 01a1c244-3420-7276-8840-7df14ecb4643 GET 303 213 /CSRFT759.js/../SASBIWS/servlet/AxisServlet 01a1cad2-c969-74eb-9f4d-a5f7e6a3c3c9 GET 303 185 /CSRFT759.js/..;/SASBIWS/servlet/AxisServlet 01a1c244-322a-73a9-8a22-e09cc4182c57 GET 303 137 /SASAdmin/ 01a1c64b-3cb3-7290-bcfb-3253bc6cc663 GET 303 153 /SASAuthorizationServices/ 01a1c64b-3e42-77e8-b32a-e5c81f60e27f GET 303 165 /SASBIWS%2Fservices%2FVersion 01a1c413-2f92-709e-86e1-3f3afc3d2737 GET 303 166 /SASBIWS%3B/services/Version 01a1c2c3-0140-76a7-9299-91294730998d GET 303 196 /SASBIWS%3Bjsessionid=bugbounty-dwbzn/services/Version 01a1c4d9-b144-73ee-abba-6fb8bdf7749c GET 303 167 /SASBIWS//services//Version 01a1c2c3-0538-73d8-a88a-4efa89ee77ba GET 303 140 /SASBIWS/rest 01a1c136-41c4-776a-b375-ac3b05132a5b GET 303 144 /SASBIWS/services 01a1c136-3e26-77eb-a234-7aba9cf1be92 GET 421 362 /SASBIWS/services/Version 01a1dbd2-764b-7433-a251-faa01b5c6081 GET 303 170 /SASBIWS/services/Version;.css 01a1c413-2e92-7164-84eb-e576f29ab8ca GET 303 167 /SASBIWS/services/Version;/ 01a1c2c3-0361-70e4-8d6b-415266e7c0de GET 303 194 /SASBIWS/services/Version;jsessionid=bugbounty-dwbzn 01a1c4d9-b319-72cd-98f2-a5b071df5dbb GET 303 157 /SASBIWS/servlet/AxisServlet 01a1da17-6b2f-7e50-82b8-ce5281afa283 GET 303 164 /SASBIWS;/services/Version 01a1c413-2df7-71d9-8aff-137a66ab4173 GET 303 194 /SASBIWS;jsessionid=bugbounty-dwbzn/services/Version 01a1c4d9-ad0d-71b5-92f9-488dfc12fa5f GET 303 168 /SASContentServer/repository/default/ 01a0f9e1-290d-70bb-ab4f-cc3bb7dcb019 GET 303 148 /SASDeploymentBackup/ 01a1c64b-3fc6-7537-a44b-682d506de9d4 GET 303 150 /SASEnvironmentManager/ 01a0f9e1-0777-738e-8f6d-ae2675af1409 GET 303 148 /SASIdentityServices/ 01a1c64b-415b-74fe-8204-c7754f47c0e3 GET 303 144 /SASJobExecution/ 01a0f9e0-f696-74ae-9b72-6f6bacd04f29 GET 303 134 /SASLogon 01a1da17-69d0-7cc6-993e-5e4cb16ce8e8 GET 303 167 /SASLogon/../SASStoredProcess/do 01a0fa14-4dd4-7000-9d0b-8ab47b83a08a GET 303 170 /SASLogon/..;/SASStoredProcess/do 01a0fa14-562a-730e-95bf-7cb6b54a447e GET 303 142 /SASLogon/guest 01a1c655-d7f2-76d1-9000-26a9d953476a GET 303 142 /SASLogon/login 01a1d24a-9924-702d-96ba-dcd6c24d09fc GET 303 160 /SASLogon/proxy/oauth/clients 01a0f9e1-39b1-739b-ba03-1e0bae525c0c GET 303 149 /SASPermissionManager/ 01a1c64b-42f9-73e5-b4b5-87fa5e305135 # https://va.baloise.de:1099 in_scope host_id=ae7993c4c6bd3e948169327754131077 last_seen=2026-11-14 23:22:32 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:13) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:15 Apache 2026-11-14 23:23:14 SAS Visual Analytics 2026-11-14 23:23:16 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-a6c8-7f4c-8051-22e579ef3be2 # https://va.baloise.de:4401 in_scope whitelisting_bypass=cloudfront host_id=eee5c682fbbe6c823d31cfea21b248e7 last_seen=2026-11-14 22:09:10 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:03:26) CloudFront-origin-only alternate TLS listener for the VA Apache/Airlock Gateway and Airlock IAM boundary, using Jersey 3.1.10 and fronting the same SAS Visual Analytics application as the canonical origin. Root, SAS Logon, Visual Analytics, environment-descriptor, WIP and BIWS routes enter the canonical `/auth/check-login` handoff, while `/auth/ui/app` and `/CSRFT759.js` expose the shared IAM frontend. Public and OAuth2 WADL roots reach Jersey but return empty HTTP 500 responses. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The SAS, REST and frontend graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-10 21:59:07 Airlock IAM 2026-11-10 21:59:06 Apache HTTP Server 2026-11-10 21:59:05 Jersey 3.1.10 2026-11-13 18:02:48 SAS 2026-11-10 21:59:09 SAS Visual Analytics 2026-11-13 18:19:36 ## paths method status size path exchange_id GET 504 936 / 01a1dc18-294d-7201-a4d9-6a59cd843589 GET 200 9085 /CSRFT759.js 01a1c771-be5e-70c2-a2c8-39a9a0a1b3bf GET 303 153 /SASVisualAnalyticsViewer/ 01a1c76e-c201-7118-9272-c9b5ddf74efa POST 504 936 /SASWIPClientAccess/remote/ServiceRegistry 01a1dadf-ba47-7c44-a806-2eb154a6bab3 GET 303 169 /SASWIPClientAccess/rest/ServiceRegistry 01a1caae-1be8-70b3-a381-ac6a97535ae1 GET 303 134 /actuator 01a1c653-f50e-7182-b400-c29f9418b32b GET 303 140 /actuator/env 01a1c653-f7f2-77ed-a96b-6f54a83f3960 GET 303 143 /actuator/health 01a1c653-f66a-7255-afc2-d64a05ee9a4b GET 504 936 /auth-admin/ 01a1dc1b-799b-7b80-ac8b-6dabf2a378b6 GET 303 149 /auth-admin/actuator 01a1c653-fcb8-73d2-ac3f-fbed0732b279 GET 504 936 /auth-admin/rest/configuration/configurations 01a1dc1b-ef79-7597-9f89-7ef97dd15ae0 GET 504 936 /auth-h2/ 01a1dc1b-03a2-7869-8b46-3b59a3a4b5a3 GET 303 160 /auth-servicecontainer/actuator 01a1c653-f9e5-7695-8bb5-a886fefe7521 GET 303 169 /auth-servicecontainer/actuator/health 01a1c653-fb63-7498-bc91-54ab750f12a3 GET 504 936 /auth-servicecontainer/startTask/ 01a1dc1b-03c2-7007-a065-9a4a9f841e6b GET 303 123 /auth/login-oneshot 01a1db9d-49e3-7495-953f-4c38cd8683ac GET 500 0 /auth/rest/oauth2/application.wadl 01a1c76e-bff5-77b7-b825-708cfad3b1f8 GET 400 161 /auth/rest/protected/my/self 01a1c76e-b4b7-7352-ad45-730786241658 GET 500 0 /auth/rest/public/application.wadl 01a1ce0f-ef0e-7347-a6dd-7a83c561a5a9 POST 400 8102 /auth/rest/public/baloise/saml2/transform 01a1cc1f-7549-738d-9f58-7fe79b16391f GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbb2-f8f5-7462-87ef-3da826d26b5b GET 200 3307 /auth/ui/app 01a1cc1f-7531-763e-bbde-de47dd3dae6d GET 303 123 /auth/ui/assets/custom/manifest/%252e%252e/%252e%252e/%252e%252e/%252e%252e/WEB-INF/web.xml 01a1cc3a-d4f1-7281-ad84-e03aeef29608 GET 504 936 /auth/ui/assets/custom/manifest/manifest.%252f..%252f..%252f..%252f..%252f..%252f..%252fWEB-INF%252fweb.xml;.json 01a1daf6-6fb2-79ba-919c-866d0e984b5a GET 200 417 /auth/ui/assets/custom/manifest/manifest.json 01a1cc06-7923-77b4-be73-6bcaafe4e379 GET 502 932 /baloise-venta/a4j_3_2_1-SNAPSHOTorg/richfaces/renderkit/html/css/basic_classes.xcss/DATB/eAELXT5DOhSIAQ.sA18_.c1 01a1cb73-86c3-767e-980b-c4e30c2672f3 GET 504 936 /ext-admin/ 01a1dc1b-79be-744e-a17b-c41779b44894 GET 303 152 /ext-admin/rest/users 01a1cb15-f488-74d4-ac27-b5e8eaa67170 GET 303 183 /ext-admin/this-path-must-not-exist-14269251 01a1cb15-f5a5-7758-9a26-27232da469d0 GET 504 936 /ext-h2/ 01a1dc1b-03bf-7e3f-992e-0448c45f9b3b GET 303 140 /ext-login/ 01a1caa8-d5da-7087-aa1a-7d5196524867 GET 303 148 /ext-login/actuator 01a1cb15-f198-7791-b538-fbe90397b30c GET 303 155 /ext-login/login-oneshot 01a1cb15-f28a-7796-bc50-2137696fc583 GET 303 177 /ext-login/rest/protected/application.wadl 01a1cb11-7d8c-73fc-9333-a24a97613a9a GET 303 174 /ext-login/rest/public/application.wadl 01a1cb15-f0a7-75f9-9cc2-1f4f9a46b818 GET 303 183 /ext-login/this-path-must-not-exist-14269251 01a1cb15-f393-7344-a6c4-ee86f4cc197d GET 303 148 /ext-login/ui/app 01a1cb15-efa9-7169-9a22-98e5e9a9b24f GET 504 936 /ext-servicecontainer/startTask/ 01a1dc1b-799f-73a7-af42-25923e481928 GET 504 936 /h2/ 01a1dc1b-03ad-7152-8f23-319b5adf76e6 GET 303 141 /login-oneshot 01a1caa8-d7c1-7071-b901-a57dd116a3b2 GET 303 145 /management/health 01a1c654-013e-77ba-b8e1-6185d785c474 GET 303 155 /sas/sas-environment.xml 01a1c76e-c32d-7158-b734-27a8a54b2358 GET 303 156 /service-container/actuator 01a1c653-ffc8-7053-9690-612c38691eec GET 504 936 /service-container/startTask/ 01a1dc1b-79c5-7a7e-afb3-90070198880a GET 303 169 /this-path-must-not-exist-14269251 01a1cb15-f6ab-7036-97bb-f2139cefdc20 GET 504 936 /this-path-must-not-exist-bugbounty 01a1dc1b-efa0-79b2-8d8e-e4c3063f59e1 # https://va.baloise.de:4447 in_scope host_id=a32a1c67233f7b1233c269bbe8bc645e last_seen=2026-11-14 23:22:32 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:17) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:20 Apache 2026-11-14 23:23:19 SAS Visual Analytics 2026-11-14 23:23:21 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-a659-75c1-8e62-cd5dcd704952 # https://va.baloise.de:5451 in_scope host_id=abe52a7e3518396705d59a533dab3cc9 last_seen=2026-11-14 23:22:32 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:23) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:25 Apache 2026-11-14 23:23:24 SAS Visual Analytics 2026-11-14 23:23:26 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-a6e5-7286-a7b8-cafbcf4bae44 # https://va.baloise.de:5452 in_scope host_id=fbf3fd0442486164078243e3bfd1ec32 last_seen=2026-11-14 23:22:32 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:27) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:30 Apache 2026-11-14 23:23:28 SAS Visual Analytics 2026-11-14 23:23:31 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-a697-7413-9fe3-a394f0d798ff # https://va.baloise.de:7443 in_scope whitelisting_bypass=cloudfront host_id=f45e769b62f5b9fce0770bf942565459 last_seen=2026-11-14 22:05:18 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:03:28) CloudFront-origin-only alternate TLS listener for the VA Apache/Airlock Gateway and Airlock IAM boundary, using Jersey 3.1.10 and fronting the same SAS Visual Analytics application as the canonical origin. Root, SAS Logon, Visual Analytics, environment-descriptor, WIP and BIWS routes enter the canonical `/auth/check-login` handoff, while `/auth/ui/app` and `/CSRFT759.js` expose the shared IAM frontend. Public and OAuth2 WADL roots reach Jersey but return empty HTTP 500 responses. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The SAS, REST and frontend graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-09 14:38:44 Airlock IAM 2026-11-09 14:38:45 Apache HTTP Server 2026-11-09 14:38:44 Jersey 3.1.10 2026-11-13 18:02:51 SAS 2026-11-09 14:38:45 SAS Visual Analytics 2026-11-13 18:19:39 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-f0a1-75ea-8f25-cdf71edf7604 GET 200 9085 /CSRFT759.js 01a1c47f-d4cc-75f0-a6a4-3238eba24288 GET 303 161 /SASBIWS/services/Version 01a1c480-7424-76c4-a7c6-6cf79c392b1a GET 303 142 /SASLogon/login 01a1c655-04b9-7695-849f-974ff02467fe GET 303 138 /SASStudio/ 01a1c243-3b89-7331-8874-febd35dbc86b GET 303 150 /SASVisualAnalyticsHub/ 01a1c0be-f45f-7774-9da6-e4282c9d2241 POST 504 936 /SASWIPClientAccess/remote/ServiceRegistry 01a1dae0-2118-7706-b1bd-1cb4bda72d7f GET 303 173 /airlock/rest/configuration/configurations 01a1c57c-9f98-715a-9054-b8cf04ce5dd2 GET 302 0 /auth/check-login 01a1c0be-f545-7502-97bd-c07f69f1e55e GET 303 123 /auth/login-oneshot 01a1db9d-4a3d-77d8-a03c-60c6cda4279d GET 500 0 /auth/rest/oauth2/application.wadl 01a1ce13-45c0-740c-b22b-91e78ef78b10 GET 500 0 /auth/rest/public/application.wadl 01a1ce10-1b62-7494-92c9-2094e06b0d3f GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbb3-1108-746c-8353-415690082d30 GET 504 936 /ext-servicecontainer/startTask/ 01a1da06-31db-7ca2-b9bc-d99184d9534b GET 404 132 /auth/rest/public/authentication/one-shot/applications/sas_va 01a1c48a-25f5-707b-a502-3883790b99a4 GET 404 9101 /auth/ui/assets/custom/manifest/manifest.%252f..%252f..%252f..%252f..%252f..%252f..%252fWEB-INF%252fweb.xml;.json 01a1daf6-5d1f-7e8f-9bae-15f1063e935f GET 0 /airlock/rest/v3/api-docs 01a1c32b-036a-743b-91d7-e5e1cadadd0d # https://va.baloise.de:7474 in_scope host_id=e53b41c2e50c262c90f740afcff83846 last_seen=2026-11-14 23:22:32 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:33) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:35 Apache 2026-11-14 23:23:34 SAS Visual Analytics 2026-11-14 23:23:37 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-a6dc-7203-be3c-607fb7c04a7c # https://va.baloise.de:7980 in_scope whitelisting_bypass=cloudfront host_id=34745c5e3149199146c84e829845e6ae last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:03:32) CloudFront-origin-only alternate TLS listener for the VA Apache/Airlock Gateway and Airlock IAM boundary, using Jersey 3.1.10 and fronting the same SAS Visual Analytics application as the canonical origin. Root, SAS Logon, Visual Analytics, environment-descriptor, WIP and BIWS routes enter the canonical `/auth/check-login` handoff, while `/auth/ui/app` and `/CSRFT759.js` expose the shared IAM frontend. Public and OAuth2 WADL roots reach Jersey but return empty HTTP 500 responses. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The SAS, REST and frontend graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-09 23:45:06 Airlock IAM 2026-11-09 23:45:07 Apache HTTP Server 2026-11-09 23:45:05 Jersey 3.1.10 2026-11-13 18:02:54 SAS 2026-11-09 23:45:08 SAS Visual Analytics 2026-11-13 18:19:44 ## paths method status size path exchange_id GET 504 936 / 01a1dc18-294f-772a-aaf6-647bed4c49ad GET 303 161 /SASBIWS/services/Version 01a1c416-ee64-71e3-bfce-c5a88845d000 POST 504 936 /SASWIPClientAccess/remote/ServiceRegistry 01a1dae0-5309-737d-91c0-e3259bca8b11 GET 303 123 /auth/login-oneshot 01a1db9d-4a62-7ace-996c-a4a105e70b30 GET 500 0 /auth/rest/public/application.wadl 01a1ce10-448e-73ac-a534-39c61d45afce GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbb3-2853-7097-bf25-7b0ae8f4ccd3 GET 200 3307 /auth/ui/app 01a1c2c5-17fb-77d3-af5b-f1af68bae23c GET 504 936 /auth/ui/assets/custom/manifest/manifest.%252f..%252f..%252f..%252f..%252f..%252f..%252fWEB-INF%252fweb.xml;.json 01a1daf6-d2bf-75d0-aa5b-2627a9b8b776 GET 0 /SASVisualAnalyticsHub/ 01a1c2b1-3306-7246-87dd-1477d2a67e3f GET 0 /auth/check-login 01a1c2b5-d600-759f-83eb-06d55745c6b9 # https://va.baloise.de:8009 in_scope host_id=42142d4fbab0c93a76b80efe0406ba67 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:55) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:10:10 Apache 2026-11-14 23:10:07 SAS Visual Analytics 2026-11-14 23:10:13 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b508-7321-a900-4373bc63c1f2 # https://va.baloise.de:8080 in_scope whitelisting_bypass=cloudfront host_id=e35f4747534fb118404c5505eb29fd57 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:03:34) CloudFront-origin-only alternate TLS listener for the VA Apache/Airlock Gateway and Airlock IAM boundary, using Jersey 3.1.10 and fronting the same SAS Visual Analytics application as the canonical origin. Root, SAS Logon, Visual Analytics, environment-descriptor, WIP and BIWS routes enter the canonical `/auth/check-login` handoff, while `/auth/ui/app` and `/CSRFT759.js` expose the shared IAM frontend. Public and OAuth2 WADL roots reach Jersey but return empty HTTP 500 responses. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The SAS, REST and frontend graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-09 23:45:09 Airlock IAM 2026-11-09 23:45:10 Apache HTTP Server 2026-11-09 23:45:08 Jersey 3.1.10 2026-11-13 18:02:56 SAS 2026-11-09 23:45:10 SAS Visual Analytics 2026-11-13 18:19:47 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b4f5-7861-8dcd-6aae07484d45 GET 504 936 /SASBIWS/services/Version 01a1dbb9-e9d5-7499-b2a5-c5f2326f52ca GET 303 147 /SASVisualAnalytics/ 01a1d622-bcc5-75cf-9f28-5d43387c00a7 GET 504 936 /SASWIPClientAccess/rest/ServiceRegistry 01a1dbba-110d-7d5d-92d5-e03967b65761 GET 504 936 /auth-admin/rest/authentication/settings/instance 01a1dbba-5fd4-7eab-b06b-0cfcee5adbfd GET 504 936 /auth-transaction-approval/rest/transaction-approval/flows/bugbounty/select 01a1dbb4-5bea-795e-bf23-ac1ef0e29d5b GET 522 7242 /auth/check-login 01a1c2b6-4ebb-74e2-9d96-d3b77cd0f61f GET 303 123 /auth/login-oneshot 01a1db9d-4a86-7cd8-a3f1-b73c4135e27c GET 500 0 /auth/rest/public/application.wadl 01a1ce10-6d69-7357-81bf-778958f7b5c6 GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbbe-fc59-741c-a625-ab83bdf34de8 GET 200 6783 /auth/ui/assets/airlock/js/iam.6adab415bcef891c.js 01a1c2d4-53e9-7340-b66b-697624d449d7 GET 303 123 /auth/ui/assets/custom/manifest/%252e%252e/%252e%252e/%252e%252e/%252e%252e/WEB-INF/web.xml 01a1cc09-39e0-7215-a744-910442525b6f GET 504 936 /ext-admin/rest/authentication/settings/instance 01a1dbba-8766-7ea7-95ea-dde0ab157fa5 GET 504 936 /ext-api-policy-service/rest/health/ready 01a1dbbb-50e2-78e2-b6e0-6d0b11b5163f GET 504 936 /ext-transaction-approval/rest/health/ready 01a1dbbb-50cc-73e6-890d-e68469aa913f GET 504 936 /sas/sas-environment.xml 01a1dbba-3847-70c7-9f0f-87f517e0c035 GET 0 /SASLogon/login 01a1c2b2-451a-760c-8a59-34b2bf16cf2f GET 0 /auth/ui/app 01a1c2c8-a910-7796-9e7b-bb7f1f7bb8cb # https://va.baloise.de:8081 in_scope host_id=1f64e39605575efc0745ac0b13daf5b6 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:03:11) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:10:19 Apache 2026-11-14 23:10:15 SAS Visual Analytics 2026-11-14 23:10:25 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b501-7cc3-b41d-c32cdf61bf19 # https://va.baloise.de:8082 in_scope host_id=5566d75d9e11192377fd268799fd384b last_seen=2026-11-14 23:10:54 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:01) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:04:40 Apache 2026-11-14 23:04:31 SAS Visual Analytics 2026-11-14 23:04:41 ## paths method status size path exchange_id GET 303 277 / 01a1dc54-0044-78f4-8e99-b24f43d04af7 GET 504 936 /auth-admin/ 01a1dc1c-dad8-738b-9f0e-f26a3cc782bf GET 504 936 /auth-admin/rest/configuration/configurations 01a1dc1c-db9a-70d5-89dc-32bdf5417643 GET 504 936 /auth-servicecontainer/startTask/ 01a1dc1c-6581-79ce-9cce-18509e70f7ff GET 504 936 /ext-admin/ 01a1dc21-37a6-7b7e-99d2-82f589e8b51b GET 504 936 /ext-admin/admin/ui/app 01a1dc21-ad41-71bb-bae0-30e4170273d8 GET 504 936 /ext-admin/rest/configuration/configurations 01a1dc22-22d6-73e7-8296-2fc54ea82d66 GET 504 936 /ext-h2/ 01a1dc1b-efa4-7d3a-b57e-980aacc814bb GET 504 936 /ext-servicecontainer/startTask/ 01a1dc1c-658f-7313-bfd1-4addae2f13f0 GET 504 936 /h2/ 01a1dc1c-6531-75dc-bec6-0a21e3824d04 GET 504 936 /service-container/startTask/ 01a1dc1c-6581-7eb5-8420-7eb51d3f1958 GET 504 936 /this-path-must-not-exist-bugbounty 01a1dc22-9899-7681-90ef-a247b327e861 GET 0 /auth-h2/ 01a1dc2e-c405-7bff-997a-3179d1c36f5a # https://va.baloise.de:8180 in_scope host_id=5fba3de7a7869f6b626f44ae38776d79 last_seen=2026-11-14 22:06:19 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:03:27) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:10:41 Apache 2026-11-14 23:10:39 SAS Visual Analytics 2026-11-14 23:10:44 ## paths method status size path exchange_id GET 504 936 / 01a1dc19-51e0-790d-9cca-459dcd4ccb64 # https://va.baloise.de:8280 in_scope host_id=acd2428cf7a7597b7d3a4c7b760c54ac last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:46) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:10:02 Apache 2026-11-14 23:10:00 SAS Visual Analytics 2026-11-14 23:10:05 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b55a-7391-bb27-45db25afb05b # https://va.baloise.de:8343 in_scope whitelisting_bypass=cloudfront host_id=644ff211419c984fbcf77f3380c6b191 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:03:35) CloudFront-origin-only alternate TLS listener for the VA Apache/Airlock Gateway and Airlock IAM boundary, using Jersey 3.1.10 and fronting the same SAS Visual Analytics application as the canonical origin. Root, SAS Logon, Visual Analytics, environment-descriptor, WIP and BIWS routes enter the canonical `/auth/check-login` handoff, while `/auth/ui/app` and `/CSRFT759.js` expose the shared IAM frontend. Public and OAuth2 WADL roots reach Jersey but return empty HTTP 500 responses. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The SAS, REST and frontend graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-09 14:38:47 Airlock IAM 2026-11-09 14:38:47 Apache HTTP Server 2026-11-09 14:38:46 Jersey 3.1.10 2026-11-13 18:02:59 SAS 2026-11-09 14:38:48 SAS Visual Analytics 2026-11-13 18:19:48 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b52c-7c87-b8f9-e6e571984290 POST 303 154 /SASBIWS/services/Version 01a1c217-8b2d-74ab-afd7-8f8bda2d035e GET 303 142 /SASLogon/login 01a1c0be-f6f7-7597-a468-1c5714748029 GET 303 150 /SASVisualAnalyticsHub/ 01a1c0ba-1f25-7100-af85-5dfa6bc44f9a GET 302 0 /auth/check-login 01a1c0be-f8d6-7063-865a-92caf5f992ce GET 303 123 /auth/login-oneshot 01a1db9d-4aab-766d-b7db-475fd06da785 GET 500 0 /auth/rest/public/application.wadl 01a1ce10-9680-71ef-856d-731c9bed06cc GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbb3-40f0-71e0-825c-a61f406592f6 GET 0 /airlock/rest/v3/api-docs 01a1c32b-51c7-76e4-9215-3abdf2f4d8d4 # https://va.baloise.de:8443 in_scope whitelisting_bypass=cloudfront host_id=cac3b488e12917591a919a2aeea516dc last_seen=2026-11-14 22:11:41 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:03:38) CloudFront-origin-accessible alternate TLS listener for the VA Airlock IAM application and its Jersey 3.1.10 REST layer. `/auth/ui/3rdpartylicenses.txt` serves the same 32,193-byte public IAM licence inventory as the canonical `https://va.baloise.de` deployment. The full authentication frontend, REST route graph and SAS server-side application description are represented on the canonical origin. ## tech technology version checked_at Airlock IAM 2026-11-13 01:56:26 Jersey 3.1.10 2026-11-13 18:03:01 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b519-7385-b559-18c5e5127e72 GET 504 936 /auth-admin/ 01a1dc1d-c738-7c16-89d7-50177c530da8 GET 504 936 /auth-admin/rest/configuration/configurations 01a1dc1d-c79b-7450-8061-8a3b99745629 GET 504 936 /auth-h2/ 01a1dc1c-dc5b-7dde-ab25-04b9c5e3a7d8 GET 504 936 /auth-servicecontainer/startTask/ 01a1dc1d-5185-73b5-a556-fded8c224896 POST 504 936 /auth-transaction-approval/rest/transaction-approval/flows/bugbounty/select 01a1dbb2-aae0-75f8-a941-ef6ecc2bf4fa GET 504 936 /auth/check-login 01a1dbbf-cfed-7d4f-909d-54ef600c1b14 GET 303 123 /auth/login-oneshot 01a1db9d-4b08-7e98-be8d-ca6847ca5bbe GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbbe-fc3e-746e-86d1-1f02640db7ab GET 504 936 /ext-admin/ 01a1dc1d-c739-72df-90f1-ce94b6447c4f GET 504 936 /ext-api-policy-service/rest/health/ready 01a1dbbb-50db-7989-96b1-85e55a5126b2 GET 504 936 /ext-h2/ 01a1dc1d-508a-7d4b-a928-506e748d3a4e GET 504 936 /ext-servicecontainer/startTask/ 01a1dc1d-5208-794e-aa64-4faed33ffb12 GET 504 936 /ext-transaction-approval/rest/health/ready 01a1dbbb-50d5-7980-a985-b24f9ae0a995 GET 504 936 /h2/ 01a1dc1d-518f-79e9-8afa-6c0cad9fb799 GET 504 936 /service-container/startTask/ 01a1dc1d-c623-7c8e-a9eb-66e8bcfe9c14 GET 504 936 /this-path-must-not-exist-bugbounty 01a1dc1e-3bc0-7ca2-96de-aa0f5bc4a9c1 # https://va.baloise.de:8561 in_scope host_id=8565ad6b4fbe93e454413c36778dc0e8 last_seen=2026-11-14 23:22:32 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:38) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:40 Apache 2026-11-14 23:23:39 SAS Visual Analytics 2026-11-14 23:23:41 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-a6bc-7f97-9fd3-07c588e50114 # https://va.baloise.de:8580 in_scope host_id=e1bcf941a425b2117c945169f9650f1a last_seen=2026-11-14 22:06:49 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:03:21) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:10:31 Apache 2026-11-14 23:10:28 SAS Visual Analytics 2026-11-14 23:10:36 ## paths method status size path exchange_id GET 504 936 / 01a1dc19-c62f-75ad-b8cb-a7664d575112 # https://va.baloise.de:8591 in_scope host_id=06ab843b13e3d6ee8e54ce88354bf507 last_seen=2026-11-14 23:22:38 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:42) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:46 Apache 2026-11-14 23:23:44 SAS Visual Analytics 2026-11-14 23:23:47 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-bc93-714a-8239-ef212298cdb8 # https://va.baloise.de:8592 in_scope host_id=f39f9b9a6c6b2f66116886080e2d0d18 last_seen=2026-11-14 23:22:38 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:48) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:51 Apache 2026-11-14 23:23:50 SAS Visual Analytics 2026-11-14 23:23:53 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-bca9-74e1-b026-f9da9629f5d5 # https://va.baloise.de:8599 in_scope host_id=0c1eeb4c0292711807da9687aa84cabb last_seen=2026-11-14 23:22:38 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:23:54) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:23:57 Apache 2026-11-14 23:23:56 SAS Visual Analytics 2026-11-14 23:23:59 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-bc8c-71a4-9fb4-386f06bb018e # https://va.baloise.de:8601 in_scope host_id=7caa1120168ec327125e470bbc825387 last_seen=2026-11-14 23:22:38 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:24:00) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:24:03 Apache 2026-11-14 23:24:02 SAS Visual Analytics 2026-11-14 23:24:05 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-bc0d-7681-a0bc-78278886fb58 # https://va.baloise.de:8888 in_scope host_id=80b33d38d8fb2bdb17df5a89ab895676 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:37) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:09:55 Apache 2026-11-14 23:09:52 SAS Visual Analytics 2026-11-14 23:09:57 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b56a-7d94-81fd-803c01fe2be3 # https://va.baloise.de:8983 in_scope host_id=c4172ab1c57d6e756cf5e3e12f287a32 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:36) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:09:43 Apache 2026-11-14 23:09:37 SAS Visual Analytics 2026-11-14 23:09:48 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b571-7601-bbb0-fd0a91fa7412 # https://va.baloise.de:8999 in_scope host_id=ff83ac73e837db0e11872e6f34e3151b last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:35) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:09:26 Apache 2026-11-14 23:09:26 SAS Visual Analytics 2026-11-14 23:09:31 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b573-7282-8df2-10f14aa7f14b # https://va.baloise.de:9000 in_scope host_id=5333d10aea02b227815822524aedd96c last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:34) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:09:26 Apache 2026-11-14 23:09:26 SAS Visual Analytics 2026-11-14 23:09:26 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b584-75d1-9a82-c51e306ad454 # https://va.baloise.de:9001 in_scope host_id=0eb9a2c7fb249d8c296d62a5a2351149 last_seen=2026-11-14 22:05:18 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:32) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:09:25 Apache 2026-11-14 23:09:25 SAS Visual Analytics 2026-11-14 23:09:26 ## paths method status size path exchange_id GET 504 936 / 01a1dc18-6629-7e32-994a-f9eb7a9bdf53 # https://va.baloise.de:9002 in_scope host_id=3737c2a264a42db407bab1145f165e19 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:31) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b5b0-7918-ab2f-a5341a44a4bc # https://va.baloise.de:9090 in_scope host_id=b45bc9f3c5c5dddecc2ec2316a9b8aa8 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:30) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b598-7104-bac1-a527613aa6b1 # https://va.baloise.de:9443 in_scope whitelisting_bypass=cloudfront host_id=22dbb2114cbf31197b70c4359873248d last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 18:03:40) CloudFront-origin-accessible alternate TLS listener for the VA Airlock IAM application and its Jersey 3.1.10 REST layer. `/auth/ui/3rdpartylicenses.txt` serves the same 32,193-byte public IAM licence inventory as the canonical `https://va.baloise.de` deployment. The full authentication frontend, REST route graph and SAS server-side application description are represented on the canonical origin. ## tech technology version checked_at Airlock IAM 2026-11-13 01:56:27 Jersey 3.1.10 2026-11-13 18:03:06 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b5ee-784b-bfc2-fa8c797456ab POST 504 936 /auth-transaction-approval/rest/transaction-approval/flows/bugbounty/select 01a1dbb2-849b-7e79-8797-808d8a1e7ca0 GET 303 123 /auth/login-oneshot 01a1db9d-4b2e-7141-b167-40f176f5c1ae GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbbe-fc5c-7ef1-88af-721c4792693c GET 504 936 /ext-api-policy-service/rest/health/ready 01a1dbbb-50df-7364-9f63-6d2168b3a716 GET 504 936 /ext-h2/ 01a1dbbd-ad38-7b60-97c3-e5c8fb277767 GET 504 936 /ext-transaction-approval/rest/health/ready 01a1dbbb-50d9-7295-8d6b-cb6f716e66bb GET 504 936 /service-container/startTask/ 01a1da58-091f-7d92-8908-12a116de9e0f # https://va.baloise.de:9990 in_scope host_id=171b44b346244774405fcffc888af747 last_seen=2026-11-14 22:05:48 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:29) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## paths method status size path exchange_id GET 504 936 / 01a1dc18-db00-790b-a1cc-7c3a542ad20b # https://va.baloise.de:9999 in_scope host_id=09acaa5bd6ef58b554ba113f2da741ea last_seen=2026-11-14 22:12:42 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:06) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:04:45 Apache 2026-11-14 23:04:44 SAS Visual Analytics 2026-11-14 23:04:47 ## paths method status size path exchange_id GET 303 277 / 01a1dc18-66d6-789e-bd16-d9b4945708bc GET 504 936 /auth-admin/ 01a1dc1e-b377-7c5b-943c-ed7618c62296 GET 504 936 /auth-admin/rest/configuration/configurations 01a1dc1f-2923-79f1-a019-aaaf0a912bef GET 504 936 /auth-h2/ 01a1dc1e-3cf5-7a0b-b12d-f23995d1cb30 GET 504 936 /auth-servicecontainer/startTask/ 01a1dc1e-b15b-7439-83a4-4910d84c8ade GET 504 936 /ext-admin/ 01a1dc1f-26f2-7ade-a0cc-26e0b42c847c GET 504 936 /ext-h2/ 01a1dc1e-3ce6-736c-b0ef-e21087fdf283 GET 504 936 /ext-servicecontainer/startTask/ 01a1dc1e-b35d-7b4b-abd7-a4af95c4f827 GET 504 936 /h2/ 01a1dc1e-3d33-7260-ac7e-19a10a110636 GET 504 936 /service-container/startTask/ 01a1dc1e-b368-76b7-be48-5dafbf5c4f42 GET 504 936 /this-path-must-not-exist-bugbounty 01a1dc1f-2911-7d3a-a553-cdd708c1ad05 # https://va.baloise.de:10000 in_scope host_id=f3274fb0f99e850cbd23d476d8b42432 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:27) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b5d4-705f-bff2-919fb856cb17 # https://va.baloise.de:10080 in_scope host_id=39a07a133f9c30dceab8464200a3a399 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:26) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:06:22 Apache 2026-11-14 23:06:20 SAS Visual Analytics 2026-11-14 23:06:25 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b5e4-7deb-b364-e52a952d7bcb # https://va.baloise.de:10443 in_scope host_id=fb2caf067b15c37bc0c73184f424d8d0 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:21) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:05:54 Apache 2026-11-14 23:05:40 SAS Visual Analytics 2026-11-14 23:06:06 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b5f7-7c95-8024-9a7ce14079f6 # https://va.baloise.de:12345 in_scope host_id=64a82eb28394b54802c029075b50dc04 last_seen=2026-11-14 22:05:03 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:02:14) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:04:53 Apache 2026-11-14 23:04:50 SAS Visual Analytics 2026-11-14 23:04:56 ## paths method status size path exchange_id GET 303 277 / 01a1dc17-b602-78a1-ae7d-5ab8960d88f3 GET 303 123 /auth/login-oneshot 01a1db9d-4b8c-7126-8bc3-e5692516906f GET 504 936 /auth/ui/3rdpartylicenses.txt 01a1dbb3-87f6-75fb-9e83-297574c9efa6 # https://va.baloise.de:15452 in_scope host_id=a78c677e86d9b7340e277fbf040c4407 last_seen=2026-11-14 23:22:38 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:24:06) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:24:10 Apache 2026-11-14 23:24:08 SAS Visual Analytics 2026-11-14 23:24:12 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-bc4b-79a3-9f75-23c0341dbe3d # https://va.baloise.de:21031 in_scope host_id=fcde47bd80b75c215ae2549236353f6b last_seen=2026-11-14 23:22:38 dns: 193.134.75.15 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:24:14) CloudFront-origin-facing alternate TLS listener for the canonical VA SAS Visual Analytics application behind Apache and Airlock. Root returns HTTP 303 to https://va.baloise.de/SASLogon, matching the canonical virtual host. The installed SAS, IAM, frontend and error-page route families are mapped on https://va.baloise.de; this listener adds no distinct application surface. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:24:18 Apache 2026-11-14 23:24:16 SAS Visual Analytics 2026-11-14 23:24:19 ## paths method status size path exchange_id GET 303 277 / 01a1dc5e-bc1c-7bc7-9c24-0b4b49dc0940