[{"e.exchange_id":"01a1c30c-1e51-74aa-9c96-00e4631a60f9","url":"https://infoportal.baloise.de/auth/login-oneshot","response_status":303,"head":"GET /auth/login-oneshot HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_HTTPS=on; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_REQUEST_ID=bugbountydwbzn; AL_ENV_ROLES=none; AL_ENV_SESSION_ID=none; AL_ENV_SERVER_NAME=infoportal.baloise.de; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_PROTOCOL=HTTP%2F1.1; AL_ENV_SERVER_REQUEST=%2Fapi%2Fjsonws; AL_ENV_SERVER_REQUEST_QUERY=\r\nHost: infoportal.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\nAuthorization: Bearer security-test-bugbounty-dwbzn-invalid\r\n\r\n"},{"e.exchange_id":"01a1c30c-2027-75ac-ba88-b5ec4cea2517","url":"https://infoportal.baloise.de/auth/login-oneshot","response_status":303,"head":"POST /auth/login-oneshot HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_HTTPS=on; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_REQUEST_ID=bugbountydwbzn; AL_ENV_ROLES=none; AL_ENV_SESSION_ID=none; AL_ENV_SERVER_NAME=infoportal.baloise.de; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_PROTOCOL=HTTP%2F1.1; AL_ENV_SERVER_REQUEST=%2Fapi%2Fjsonws; AL_ENV_SERVER_REQUEST_QUERY=\r\nHost: infoportal.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\nAuthorization: Bearer security-test-bugbounty-dwbzn-invalid\r\nContent-Type: application/octet-stream\r\nContent-Length: 0\r\n\r\n"},{"e.exchange_id":"01a1c323-3d2d-76ee-98dc-7b73cb130a37","url":"https://infoportal.baloise.de/auth-admin/adminapp","response_status":303,"head":"GET /auth-admin/adminapp HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_ROLES=admin:3600:3600,portal_ao:3600:3600; AL_ENV_SERVER_NAME=infoportal.baloise.de; AL_ENV_SERVER_REQUEST=/auth-admin/adminapp; AL_ENV_HTTPS=on; AL_ENV_REMOTE_ADDR=127.0.0.1\r\nHost: infoportal.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\n\r\n"},{"e.exchange_id":"01a1c417-4698-712e-8a2e-1873ea590fe4","url":"https://infoportal.baloise.de/auth/login-oneshot","response_status":303,"head":"GET /auth/login-oneshot HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_HTTPS=on; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_REQUEST_ID=bugbounty-dwbzn; AL_ENV_ROLES=portal_ao:3600:3600; AL_ENV_SESSION_ID=bugbounty-dwbzn; AL_ENV_SERVER_NAME=infoportal.baloise.de; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_REQUEST=/api/jsonws; AL_ENV_AUTH_USER=bugbounty-dwbzn; AL_ENV_REMOTE_USER=bugbounty-dwbzn\r\nHost: infoportal.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\nAuthorization: Basic YnVnYm91bnR5LWR3YnpuOlNlY3VyaXR5LVRlc3QtTm90LUEtUGFzc3dvcmQtMjAyNiE=\r\n\r\n"},{"e.exchange_id":"01a1c417-4929-7334-8549-88a28a698cdf","url":"https://infoportal.baloise.de:8443/auth/login-oneshot","response_status":303,"head":"GET /auth/login-oneshot HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_HTTPS=on; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_REQUEST_ID=bugbounty-dwbzn; AL_ENV_ROLES=portal_ao:3600:3600; AL_ENV_SESSION_ID=bugbounty-dwbzn; AL_ENV_SERVER_NAME=infoportal.baloise.de; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_REQUEST=/api/jsonws; AL_ENV_AUTH_USER=bugbounty-dwbzn; AL_ENV_REMOTE_USER=bugbounty-dwbzn\r\nHost: infoportal.baloise.de:8443\r\nX-Bug-Bounty: BBS:dwbzn\r\nAuthorization: Basic YnVnYm91bnR5LWR3YnpuOlNlY3VyaXR5LVRlc3QtTm90LUEtUGFzc3dvcmQtMjAyNiE=\r\nAccept-Encoding: identity\r\n\r\n"},{"e.exchange_id":"01a1c450-47ce-73f3-979c-5aa84c48155e","url":"https://infoportal.baloise.de/auth/login-oneshot","response_status":303,"head":"GET /auth/login-oneshot HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_HTTPS=on; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_REQUEST_ID=bugbounty-dwbzn; AL_ENV_ROLES=none; AL_ENV_SESSION_ID=none; AL_ENV_SERVER_NAME=infoportal.baloise.de; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_PROTOCOL=HTTP%2F1.1; AL_ENV_SERVER_REQUEST=%2Fapi%2Fjsonws; AL_ENV_SERVER_REQUEST_QUERY=\r\nHost: infoportal.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\nDate: Tue, 10 Nov 2026 07:15:57 GMT\r\nSignature: keyId=\"bugbounty-dwbzn\",algorithm=\"rsa-sha256\",headers=\"(request-target) host date\",signature=\"AA==\"\r\nAuthorization: Bearer SecurityTest-bugbounty-dwbzn-invalid\r\n\r\n"},{"e.exchange_id":"01a1c451-99e2-74f1-a960-8cf6a5359278","url":"https://infoportal.baloise.de/auth/rest/public/authentication/applications/portal_ao/access","response_status":401,"head":"POST /auth/rest/public/authentication/applications/portal_ao/access HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\nAccept: application/json\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_SERVER_REQUEST=/api/jsonws; AL_ENV_REMOTE_USER=bugbounty-dwbzn; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_NAME=infoportal.baloise.de; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_SESSION_ID=bugbounty-dwbzn; AL_ENV_REQUEST_ID=bugbounty-dwbzn; AL_ENV_AUTH_USER=bugbounty-dwbzn; AL_ENV_ROLES=portal_ao:3600:3600; AL_ENV_HTTPS=on; CSRFT759-S=GpwVZwaGpxUKoWN83EqNJA; AL_SESS-S=ARVGUZlGGhT17SYHUQXk2!kEzHIP2kDMZvOI8TvvVVcOrRxMJHx71a6PbBtkrB37Z!7K\r\nHost: infoportal.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\nContent-Type: application/json\r\nX-Same-Domain: 1\r\nX-CSRFT759: GpwVZwaGpxUKoWN83EqNJA\r\nContent-Length: 4\r\n\r\n"},{"e.exchange_id":"01a1c451-a1cb-7141-8b23-9816485a9ef5","url":"https://infoportal.baloise.de/auth/rest/protected/my/tokens/device-tokens","response_status":401,"head":"GET /auth/rest/protected/my/tokens/device-tokens HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\nAccept: application/json\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_SERVER_REQUEST=/api/jsonws; AL_ENV_REMOTE_USER=bugbounty-dwbzn; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_NAME=infoportal.baloise.de; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_SESSION_ID=bugbounty-dwbzn; AL_ENV_REQUEST_ID=bugbounty-dwbzn; AL_ENV_AUTH_USER=bugbounty-dwbzn; AL_ENV_ROLES=portal_ao:3600:3600; AL_ENV_HTTPS=on; CSRFT759-S=GpwVZwaGpxUKoWN83EqNJA; AL_SESS-S=ARVGUZlGGhT17SYHUQXk2!kEzHIP2kDMZvOI8TvvVVcOrRxMJHx71a6PbBtkrB37Z!7K\r\nHost: infoportal.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\nX-Same-Domain: 1\r\nX-CSRFT759: GpwVZwaGpxUKoWN83EqNJA\r\n\r\n"},{"e.exchange_id":"01a1c451-a1dc-738c-9432-117e7569ac98","url":"https://infoportal.baloise.de/api/jsonws","response_status":303,"head":"GET /api/jsonws HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_SERVER_REQUEST=/api/jsonws; AL_ENV_REMOTE_USER=bugbounty-dwbzn; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_NAME=infoportal.baloise.de; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_SESSION_ID=bugbounty-dwbzn; AL_ENV_REQUEST_ID=bugbounty-dwbzn; AL_ENV_AUTH_USER=bugbounty-dwbzn; AL_ENV_ROLES=portal_ao:3600:3600; AL_ENV_HTTPS=on; CSRFT759-S=GpwVZwaGpxUKoWN83EqNJA; AL_SESS-S=ARVGUZlGGhT17SYHUQXk2!kEzHIP2kDMZvOI8TvvVVcOrRxMJHx71a6PbBtkrB37Z!7K\r\nHost: infoportal.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\n\r\n"},{"e.exchange_id":"01a1c479-3e70-77e0-87cb-4856ba75694f","url":"https://infoportal.baloise.de/auth/rest/public/authentication/applications/portal_ao/access","response_status":401,"head":"POST /auth/rest/public/authentication/applications/portal_ao/access HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_SESS-S=AUA_R5N8XP5QfLD2igb2VY1HpRWyFyMvTx1QjTRTWlAI0gZES43AKcQXfe569wFvnNvz; CSRFT759-S=Hw7OyOwcRVZ08E0HrQ4phA\r\nCookie: AL_ENV_ROLES=portal_ao:3600:3600; AL_ENV_AUTH_USER=bugbounty-dwbzn; AL_ENV_REMOTE_USER=bugbounty-dwbzn; AL_ENV_SESSION_ID=bugbounty-dwbzn; AL_ENV_REQUEST_ID=bugbounty-dwbzn\r\nHost: infoportal.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\nContent-Type: application/json\r\nX-Same-Domain: 1\r\nX-CSRFT759: Hw7OyOwcRVZ08E0HrQ4phA\r\nContent-Length: 4\r\n\r\n"},{"e.exchange_id":"01a1c479-3f2c-74db-9ec6-79ee4fff9369","url":"https://infoportal.baloise.de/auth/rest/public/authentication/applications/portal_ao/access","response_status":303,"head":"POST /auth/rest/public/authentication/applications/portal_ao/access HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_ROLES=portal_ao:3600:3600; AL_ENV_AUTH_USER=bugbounty-dwbzn; AL_ENV_REMOTE_USER=bugbounty-dwbzn; AL_ENV_SESSION_ID=bugbounty-dwbzn; AL_ENV_REQUEST_ID=bugbounty-dwbzn\r\nCookie: AL_SESS-S=AUA_R5N8XP5QfLD2igb2VY1HpRWyFyMvTx1QjTRTWlAI0gZES43AKcQXfe569wFvnNvz; CSRFT759-S=Hw7OyOwcRVZ08E0HrQ4phA\r\nHost: infoportal.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\nContent-Type: application/json\r\nX-Same-Domain: 1\r\nX-CSRFT759: Hw7OyOwcRVZ08E0HrQ4phA\r\nContent-Length: 4\r\n\r\n"},{"e.exchange_id":"01a1c5f3-d727-7304-ad91-3a1fb9eaba32","url":"https://infoportal.baloise.de/auth/login-oneshot","response_status":303,"head":"GET /auth/login-oneshot HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_SERVER_REQUEST=%2Fapi%2Fspring%2Fportal; AL_ENV_SERVER_REQUEST_QUERY=; AL_ENV_SERVER_NAME=infoportal.baloise.de; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_PROTOCOL=HTTP%2F1.1; AL_ENV_HTTPS=on; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_ROLES=none; AL_ENV_SESSION_ID=none; AL_ENV_WAF_VERSION=8.5.0\r\nHost: infoportal.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\nX-IAM-SSO-Ticket: SecurityTest-bugbounty-dwbzn-invalid-sso-ticket\r\nAuthorization: Bearer SecurityTest-bugbounty-dwbzn-invalid\r\n\r\n"},{"e.exchange_id":"01a1c727-e584-779e-a881-49d43bc06297","url":"https://mein-portal.baloise.de/auth/login-oneshot","response_status":303,"head":"GET /auth/login-oneshot HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_SERVER_NAME=mein-portal.baloise.de; AL_ENV_HTTPS=on; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_PROTOCOL=HTTP/1.1; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_ROLES=none; AL_ENV_SESSION_ID=none; AL_ENV_SERVER_REQUEST=/security-test-bugbounty-dwbzn\r\nHost: mein-portal.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\n\r\n"},{"e.exchange_id":"01a1c727-e620-7300-a064-f468a2da4b9b","url":"https://mein-portal.baloise.de/auth/login-oneshot?sso=AaG3MuptyiQ%2FpvUEORbX3yxFTMMNgqvFxVnvM71LQfEcQ72i3ovCWFiK%2BuM6ydhMBfLRyMANGDDmyXau%2F5sZFQF1c2VyaWRzOmVTZXJ2aWNlVXNlcj1idWdib3VudHktZHdiem47cm9sZXM6YWRtaW4lMkNhZG1pbmlzdHJhdG9yOwAAAaHI3Cmv","response_status":303,"head":"GET /auth/login-oneshot?sso=AaG3MuptyiQ%2FpvUEORbX3yxFTMMNgqvFxVnvM71LQfEcQ72i3ovCWFiK%2BuM6ydhMBfLRyMANGDDmyXau%2F5sZFQF1c2VyaWRzOmVTZXJ2aWNlVXNlcj1idWdib3VudHktZHdiem47cm9sZXM6YWRtaW4lMkNhZG1pbmlzdHJhdG9yOwAAAaHI3Cmv HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_SERVER_NAME=mein-portal.baloise.de; AL_ENV_HTTPS=on; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_PROTOCOL=HTTP/1.1; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_ROLES=none; AL_ENV_SESSION_ID=none; AL_ENV_SERVER_REQUEST=/baloise-venta/portal/loginsso.c1; AL_ENV_SERVER_REQUEST_QUERY=sso%3DAaG3MuptyiQ%2FpvUEORbX3yxFTMMNgqvFxVnvM71LQfEcQ72i3ovCWFiK%2BuM6ydhMBfLRyMANGDDmyXau%2F5sZFQF1c2VyaWRzOmVTZXJ2aWNlVXNlcj1idWdib3VudHktZHdiem47cm9sZXM6YWRtaW4lMkNhZG1pbmlzdHJhdG9yOwAAAaHI3Cmv\r\nHost: mein-portal.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\n\r\n"},{"e.exchange_id":"01a1caa3-d786-752b-afc9-8fa9734972e8","url":"https://mein-portal.baloise.de/auth/login-oneshot","response_status":303,"head":"GET /auth/login-oneshot HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_SERVER_NAME=gwde.baloise.de; AL_ENV_HTTPS=on; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_PROTOCOL=HTTP/1.1; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_ROLES=none; AL_ENV_SESSION_ID=none; AL_ENV_SERVER_REQUEST=/bc/rest/test-util/v1/swagger.json; AL_ENV_SERVER_REQUEST_QUERY=\r\nHost: mein-portal.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\nAL_ENV_REQUEST_LINE: GET /bc/rest/test-util/v1/swagger.json HTTP/1.1\r\nX-IAM-SSO-Ticket: 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\r\nX-ESP-Ticket: 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\r\nAuthorization: Bearer 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\r\n\r\n"},{"e.exchange_id":"01a1caa3-fdbd-72c6-87b3-d41f1f7cc83b","url":"https://mein-portal.baloise.de:4401/auth/login-oneshot","response_status":303,"head":"GET /auth/login-oneshot HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_SERVER_NAME=gwde.baloise.de; AL_ENV_HTTPS=on; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_PROTOCOL=HTTP/1.1; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_ROLES=none; AL_ENV_SESSION_ID=none; AL_ENV_SERVER_REQUEST=/bc/rest/test-util/v1/swagger.json; AL_ENV_SERVER_REQUEST_QUERY=\r\nHost: mein-portal.baloise.de:4401\r\nX-Bug-Bounty: BBS:dwbzn\r\nAL_ENV_REQUEST_LINE: GET /bc/rest/test-util/v1/swagger.json HTTP/1.1\r\nX-IAM-SSO-Ticket: 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\r\nAccept-Encoding: identity\r\n\r\n"},{"e.exchange_id":"01a1caa4-f15e-7718-a59b-4e20aef100da","url":"https://gwde.baloise.de/bc/rest/test-util/v1/swagger.json","response_status":303,"head":"GET /bc/rest/test-util/v1/swagger.json HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\naccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_ROLES=guidewire_bc:600:28732,admin:600:28732; AL_ENV_SESSION_ID=bugbounty-dwbzn\r\nHost: gwde.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\n\r\n"},{"e.exchange_id":"01a1caaa-21b7-76f2-9350-facc3f190631","url":"https://va.baloise.de/auth/login-oneshot","response_status":303,"head":"GET /auth/login-oneshot HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/json\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_SERVER_NAME=va.baloise.de; AL_ENV_HTTPS=on; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_PROTOCOL=HTTP/1.1; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_ROLES=none; AL_ENV_SESSION_ID=none; AL_ENV_SERVER_REQUEST=/SASVisualAnalyticsHub/; AL_ENV_SERVER_REQUEST_QUERY=\r\nHost: va.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\nAL_ENV_REQUEST_LINE: GET /SASVisualAnalyticsHub/ HTTP/1.1\r\nX-SSO-Auth-Token: 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\r\n\r\n"},{"e.exchange_id":"01a1caaa-21eb-7344-bd62-41bbf4ec34c7","url":"https://va.baloise.de/auth/login-oneshot","response_status":303,"head":"GET /auth/login-oneshot HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/json\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_SERVER_NAME=va.baloise.de; AL_ENV_HTTPS=on; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_PROTOCOL=HTTP/1.1; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_ROLES=none; AL_ENV_SESSION_ID=none; AL_ENV_SERVER_REQUEST=/SASVisualAnalyticsHub/; AL_ENV_SERVER_REQUEST_QUERY=\r\nHost: va.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\nAL_ENV_REQUEST_LINE: GET /SASVisualAnalyticsHub/ HTTP/1.1\r\nX-SSO-Auth-Token: AYf+Dq8CR8rT/7wgUhaFFPugESjt3ASAZjE/L6vBE+OPUWNTUCh2CMDuZiVcA23QUCdGdAEAbu6V0XM7amUK7j11c2VyaWRzOmVTZXJ2aWNlVXNlcj1idWdib3VudHktZHdiem47cm9sZXM6YWRtaW4lMkNhZG1pbmlzdHJhdG9yJTJDYXV0aGVudGljYXRlZCUyQ3BvcnRhbF9hbyUyQ3BvcnRhbF9tbyUyQ3BvcnRhbF9zaSUyQ2d1aWRld2lyZV9iYyUyQ2d1aWRld2lyZV9wYyUyQ2d1aWRld2lyZV9jYyUyQ3ZlbnRhJTJDc2FzX3ZhO0lkZW50aWZpZXI9YnVnYm91bnR5LWR3YnpuO1VzZXJUb2tlbj1idWdib3VudHktZHdiem47U2Vzc2lvblRva2VuPWJ1Z2JvdW50eS1kd2J6bjt1c2VySWQ9YnVnYm91bnR5LWR3YnpuO3VzZXJpZD1idWdib3VudHktZHdiem47dWlkPWJ1Z2JvdW50eS1kd2J6bjtlU2VydmljZVVzZXI9YnVnYm91bnR5LWR3YnpuO1BhcnRuZXJJZD1idWdib3VudHktZHdiem47V2Vic2VydmljZUlkPWJ1Z2JvdW50eS1kd2J6bjtzdWI9YnVnYm91bnR5LWR3YnpuO21haWw9YnVnYm91bnR5LWR3YnpuJTQwOWIuYXU7AAABocxhA5Q=\r\n\r\n"},{"e.exchange_id":"01a1caaa-6c03-7342-bdcc-4cb81f1e2714","url":"https://va.baloise.de/auth/login-oneshot?sso=AYf%2BDq8CR8rS%2F7wgUhaFFPugESjt3ASAZjE%2FL6vBE%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%3D","response_status":303,"head":"GET /auth/login-oneshot?sso=AYf%2BDq8CR8rS%2F7wgUhaFFPugESjt3ASAZjE%2FL6vBE%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%3D HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/json\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_SERVER_NAME=va.baloise.de; AL_ENV_HTTPS=on; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_PROTOCOL=HTTP/1.1; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_ROLES=none; AL_ENV_SESSION_ID=none; AL_ENV_SERVER_REQUEST=/SASVisualAnalyticsHub/; AL_ENV_SERVER_REQUEST_QUERY=\r\nHost: va.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\nAL_ENV_REQUEST_LINE: GET /SASVisualAnalyticsHub/ HTTP/1.1\r\n\r\n"},{"e.exchange_id":"01a1caaa-6c72-70ee-904e-3dfcc057b9a3","url":"https://va.baloise.de/auth/login-oneshot?sso=AYf%2BDq8CR8rT%2F7wgUhaFFPugESjt3ASAZjE%2FL6vBE%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%3D","response_status":303,"head":"GET /auth/login-oneshot?sso=AYf%2BDq8CR8rT%2F7wgUhaFFPugESjt3ASAZjE%2FL6vBE%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%3D HTTP/1.1\r\nsec-ch-ua: \"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"Windows\"\r\nupgrade-insecure-requests: 1\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/json\r\nsec-fetch-site: none\r\nsec-fetch-mode: navigate\r\nsec-fetch-user: ?1\r\nsec-fetch-dest: document\r\naccept-encoding: gzip, deflate, br, zstd\r\naccept-language: en-US,en;q=0.9\r\ncache-control: max-age=0\r\nCookie: AL_ENV_SERVER_NAME=va.baloise.de; AL_ENV_HTTPS=on; AL_ENV_SERVER_PORT=443; AL_ENV_SERVER_PROTOCOL=HTTP/1.1; AL_ENV_REMOTE_ADDR=127.0.0.1; AL_ENV_ROLES=none; AL_ENV_SESSION_ID=none; AL_ENV_SERVER_REQUEST=/SASVisualAnalyticsHub/; AL_ENV_SERVER_REQUEST_QUERY=\r\nHost: va.baloise.de\r\nX-Bug-Bounty: BBS:dwbzn\r\nAL_ENV_REQUEST_LINE: GET /SASVisualAnalyticsHub/ HTTP/1.1\r\n\r\n"},{"e.exchange_id":"01a1cb1a-84c4-72c8-8fb1-03ac73b73c7d","url":"https://mein-portal.baloise.de/auth/rest/public/authentication/applications/venta/access","response_status":401,"head":"POST /auth/rest/public/authentication/applications/venta/access HTTP/1.1\r\nHost: mein-portal.baloise.de\r\nCookie: AL_ENV_SERVER_REQUEST_QUERY=; AL_ENV_SERVER_REQUEST=/baloise-venta/portal/loginsso.c1; AL_ENV_REMOVED_ROLES=; AL_ENV_REQUEST_LINE=GET /baloise-venta/portal/loginsso.c1 HTTP/1.1; AL_ENV_ROLES=venta:600:3600; CSRFT759-S=O8EKwZgTjYPT_Sp5enFyeQ; AL_SESS-S=ARcK1utEAXtEm2i7VEvQF6bJM_!WYa6zY7RtyaiUt5l9F_dh2k8heue6FUZFWESEiNtC\r\nsec-ch-ua: \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"macOS\"\r\nUpgrade-Insecure-Requests: 1\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36\r\nAccept: application/json\r\nSec-Fetch-Site: none\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-User: ?1\r\nSec-Fetch-Dest: document\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccept-Language: en-US,en;q=0.9\r\nX-Bug-Bounty: BBS:dwbzn\r\nContent-Type: application/json\r\nX-Same-Domain: 1\r\nX-CSRFT759: O8EKwZgTjYPT_Sp5enFyeQ\r\nContent-Length: 2\r\n\r\n"},{"e.exchange_id":"01a1cb1a-88ba-76c5-9011-e4db428f5365","url":"https://mein-portal.baloise.de/baloise-venta/portal/loginsso.c1","response_status":303,"head":"GET /baloise-venta/portal/loginsso.c1 HTTP/1.1\r\nHost: mein-portal.baloise.de\r\nCookie: AL_ENV_SERVER_REQUEST_QUERY=; AL_ENV_SERVER_REQUEST=/baloise-venta/portal/loginsso.c1; AL_ENV_REMOVED_ROLES=; AL_ENV_REQUEST_LINE=GET /baloise-venta/portal/loginsso.c1 HTTP/1.1; AL_ENV_ROLES=venta:600:3600; CSRFT759-S=O8EKwZgTjYPT_Sp5enFyeQ; AL_SESS-S=ARcK1utEAXtEm2i7VEvQF6bJM_!WYa6zY7RtyaiUt5l9F_dh2k8heue6FUZFWESEiNtC\r\nsec-ch-ua: \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"macOS\"\r\nUpgrade-Insecure-Requests: 1\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nSec-Fetch-Site: none\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-User: ?1\r\nSec-Fetch-Dest: document\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccept-Language: en-US,en;q=0.9\r\nX-Bug-Bounty: BBS:dwbzn\r\n\r\n"},{"e.exchange_id":"01a1cb1a-e7e6-744c-afc1-d084339f8ce1","url":"https://mein-portal.baloise.de:4401/auth/rest/public/authentication/applications/venta/access","response_status":401,"head":"POST /auth/rest/public/authentication/applications/venta/access HTTP/1.1\r\nHost: mein-portal.baloise.de:4401\r\nCookie: AL_ENV_SERVER_REQUEST_QUERY=; AL_ENV_SERVER_REQUEST=/baloise-venta/portal/loginsso.c1; AL_ENV_REMOVED_ROLES=; AL_ENV_REQUEST_LINE=GET /baloise-venta/portal/loginsso.c1 HTTP/1.1; AL_ENV_ROLES=venta:600:3600; CSRFT759-S=DKJgA6EIOzDHZzj0uQcGUQ; AL_SESS-S=ARFF7FTfdev6W2eGcuqzqP0E5jzjpZQvwU5qtd7FVkPalYPXynXNYNlBIfFkOHNSVs9K\r\nsec-ch-ua: \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"macOS\"\r\nUpgrade-Insecure-Requests: 1\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36\r\nAccept: application/json\r\nSec-Fetch-Site: none\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-User: ?1\r\nSec-Fetch-Dest: document\r\nAccept-Language: en-US,en;q=0.9\r\nX-Bug-Bounty: BBS:dwbzn\r\nContent-Type: application/json\r\nX-Same-Domain: 1\r\nX-CSRFT759: DKJgA6EIOzDHZzj0uQcGUQ\r\nContent-Length: 2\r\nAccept-Encoding: identity\r\n\r\n"},{"e.exchange_id":"01a1cb1a-ebe8-723f-a6f8-81de88eb0ee3","url":"https://mein-portal.baloise.de:4401/baloise-venta/portal/loginsso.c1","response_status":303,"head":"GET /baloise-venta/portal/loginsso.c1 HTTP/1.1\r\nHost: mein-portal.baloise.de:4401\r\nCookie: AL_ENV_SERVER_REQUEST_QUERY=; AL_ENV_SERVER_REQUEST=/baloise-venta/portal/loginsso.c1; AL_ENV_REMOVED_ROLES=; AL_ENV_REQUEST_LINE=GET /baloise-venta/portal/loginsso.c1 HTTP/1.1; AL_ENV_ROLES=venta:600:3600; CSRFT759-S=DKJgA6EIOzDHZzj0uQcGUQ; AL_SESS-S=ARFF7FTfdev6W2eGcuqzqP0E5jzjpZQvwU5qtd7FVkPalYPXynXNYNlBIfFkOHNSVs9K\r\nsec-ch-ua: \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"\r\nsec-ch-ua-mobile: ?0\r\nsec-ch-ua-platform: \"macOS\"\r\nUpgrade-Insecure-Requests: 1\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\r\nSec-Fetch-Site: none\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-User: ?1\r\nSec-Fetch-Dest: document\r\nAccept-Language: en-US,en;q=0.9\r\nX-Bug-Bounty: BBS:dwbzn\r\nAccept-Encoding: identity\r\n\r\n"}]