# 01a1c4c7-bfd5-777c-b2ec-57dc3fe9639e  2026-11-10 09:26:25  curl_cffi.requests/hunter-2  status=500  2045ms
POST https://maklerportal.baloise.de/auth/rest/public/baloise/saml2/transform
--- request (16072 B application/x-www-form-urlencoded)
POST /auth/rest/public/baloise/saml2/transform HTTP/1.1
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Google Chrome";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: application/json
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cache-control: max-age=0
Cookie: CSRFT759-S=v3dn!hk39!G!itX9R2yJbg; AL_SESS-S=AQrNMh2OKrbg4w292Grso2AeZLT3VJfddBEZZPfl6m8wlviLJVW6tZppJh2HB4lOm63f
Host: maklerportal.baloise.de
X-Bug-Bounty: BBS:dwbzn
X-CSRFT759: v3dn!hk39!G!itX9R2yJbg
X-Same-Domain: 1
Content-Type: application/x-www-form-urlencoded
Content-Length: 15201

context=Easylogin&SAMLResponse=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%2BaHR0cHM6Ly9wb3J0YWwuZWFzeS1sb2dpbi5kZS9hdXRoLXBvcnRhbDwvc2FtbDpJc3N1ZXI%2BPHNhbWxwOlN0YXR1cz48c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8%2BPC9zYW1scDpTdGF0dXM%2BPHNhbWw6RW5jcnlwdGVkQXNzZXJ0aW9uPjx4ZW5jOkVuY3J5cHRlZERhdGEgSWQ9IkVELWU4YmY2MDVkZjBhYTRlMTg4NzhjYzFiOGRjNTg0MmY0IiBUeXBlPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzA0L3htbGVuYyNFbGVtZW50Ij48eGVuYzpFbmNyeXB0aW9uTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxlbmMjYWVzMTI4LWNiYyIvPjxkczpLZXlJbmZvPjx4ZW5jOkVuY3J5cHRlZEtleSBJZD0iRUstOTdkYzRmMmU3ZjBhNDc3ZGJmMTc2YmIwMmFiNjdlMjEiPjx4ZW5jOkVuY3J5cHRpb25NZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzA0L3htbGVuYyNyc2Etb2FlcC1tZ2YxcCIvPjxkczpLZXlJbmZvPjxkczpYNTA5RGF0YT48ZHM6WDUwOUNlcnRpZmljYXRlPk1JSUkwakNDQnJxZ0F3SUJBZ0lVWm5XR2FhSG9MS3UwM09wS2VxRXFJV29QMmZzd0RRWUpLb1pJaHZjTkFRRUxCUUF3VURFTE1Ba0dBMVVFQmhNQ1EwZ3hGVEFUQmdOVkJBb1RERk4zYVhOelUybG5iaUJCUnpFcU1DZ0dBMVVFQXhNaFUzZHBjM05UYVdkdUlGSlRRU0JVVEZNZ1QxWWdTVU5CSURJd01qSWdMU0F4TUI0WERUSTJNRGN4TXpBMk1qSTBOMW9YRFRJM01ERXlOekEyTWpJME4xb3daekVMTUFrR0ExVUVCaE1DUTBneEN6QUpCZ05WQkFnTUFrSlRNUTR3REFZRFZRUUhEQVZDWVhObGJERWdNQjRHQTFVRUNnd1hRbUZzYjJselpTQldaWEp6YVdOb1pYSjFibWNnUVVjeEdUQVhCZ05WQkFNTUVDb3VZbUZzWjNKdmRYQnBkQzVqYjIwd2dnRWlNQTBHQ1NxR1NJYjNEUUVCQVFVQUE0SUJEd0F3Z2dFS0FvSUJBUURkMHJLL1Z6UkZrS0NaMWIraHFRc3Y4QWNOMWg3TFlKMjVacXJPaDF2V1hRNG9NM25ja1NxM09jbDVRN
…[+13201 body chars; --range 2871: or --grep TEXT]
--- response (897 B application/json;charset=utf-8)
HTTP/1.1 500 Internal Server Error
Date: Tue, 10 Nov 2026 09:26:25 GMT
Server: Apache
Content-Length: 132
Expires: 0
Last-Modified: Tue, 10 Nov 2026 09:26:25 GMT
Cache-Control: no-store, no-cache, must-revalidate
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Permissions-Policy: accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), camera=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), usb=(self), xr-spatial-tracking=(self)
Connection: close
Content-Type: application/json;charset=utf-8

{"meta":{"type":"jsonapi.metadata.document","timestamp":"2026-11-10T10:26:25.557+01:00"},"errors":[{"id":"5556:2102","status":500}]}