LeakIX - Host espace-client.hellobankpro.fr

Domain espace-client.hellobankpro.fr

Germany

Akamai International B.V.

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.157
Domain: sandbox.espace-client.hellobankpro.fr
Port: 443
URL: https://sandbox.espace-client.hellobankpro.fr

First seen 2025-11-17 00:10
Last seen 2026-01-23 14:16
Open for 67 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4bff366d864b1e61f16cbc89feef29ab8aca65b50c
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /**/jwks
GET /grid/{gridId}
GET /keepalive
GET /keepaliveSSO
GET /mobile/templatelclf
GET /oidc/jwks
GET /recover-authentication/{uid}
POST /init-authentication
```
  Found on 2026-01-23 14:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.158
Domain: espace-client.hellobankpro.fr
Port: 443
URL: https://espace-client.hellobankpro.fr

First seen 2025-11-17 00:08
Last seen 2026-01-23 13:45
Open for 67 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4bff366d864b1e61f16cbc89feef29ab8aca65b50c
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /**/jwks
GET /grid/{gridId}
GET /keepalive
GET /keepaliveSSO
GET /mobile/templatelclf
GET /oidc/jwks
GET /recover-authentication/{uid}
POST /init-authentication
```
  Found on 2026-01-23 13:45
Create report

Open service 23.50.131.157:443 · sandbox.espace-client.hellobankpro.fr

2026-01-23 14:16

HTTP/1.1 200 OK
requestId: bede057e-62be-4a31-818d-dec3f795afd9
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: object-src 'none';worker-src blob:;  script-src 'unsafe-eval' 'self' 'unsafe-inline' 'unsafe-eval' https://ult-inwebo.com https://assets.adobedtm.com https://cdn.doyoudreamup.com https://*.online-metrix.net https://*.dev.echonet https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net;frame-ancestors 'self' https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net https://*.cardif-iard.fr https://*.biapi.pro https://*.mosaic.fr https://*.protection24.com https://*.facil-iti.com https://*.herokuapp.com https://*.matmut.com https://login.mabanque-s1.dev.echonet:8443;
Content-Type: text/html;charset=UTF-8
Content-Language: en
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Vary: origin
Vary: access-control-request-method
Vary: access-control-request-headers
Date: Fri, 23 Jan 2026 14:16:29 GMT
Content-Length: 1684
Connection: close
Set-Cookie: SESSION=5C09ADD0F0C7E990EE80A2B435EA815D; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_TGC=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_MB=2914119946.47873.0000; path=/; Httponly; Secure; samesite=None
Set-Cookie: TS01ab8141=01a16de8d9babb0f95210baeaccce8379f5a19df78463b1953d4711f328647d4a0c3eb3eab897e8f38dad58e588ed0bf90767a8381; Path=/; Secure; samesite=None

Page title: BNP PARIBAS | la banque et l'assurance d'un monde qui change 

<!DOCTYPE html><html>
<head>
</head>
<html lang="fr" xmlns="http://www.w3.org/1999/xhtml">

<head>
<META http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>BNP PARIBAS | la banque et l'assurance d'un monde qui change </title>
<meta name="keywords" content=""><meta name="description" content=""><meta name="vpath" content=""><meta name="page-locale-name" content=""><meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no"><link type="text/css" href="/error/css/errorStyle-9f3e2b4c2f6b024eb0fd442ce4198e0c.css" rel="stylesheet" /></head><body class="mw-1400">
	<div id="header">
    <header class="bottom-header">     
      <div class="no-mob">         
        <div class="logoBNP-container">        
          <a href="https://mabanque.bnpparibas" class="logoBNP text-hide"></a><span class="logotext">La banque d'un monde qui change</span>
        </div>        
      </div>    
      <header class="bottom-header-connected mobile-only pull-left">
        <ul id="" class="list-header-connected left mobile-only">
          <li class="logo"><a href="/" class="logoBNP"></a></li>        
        </ul>    
      </header>
    </header>
</div>

<div id="wrapper-maintenance" style="height: 83%;">
  <div class="content">
    <h1>Votre site est actuellement indisponible.</h1>
    <p>Afin d’améliorer le service, l’accès à la gestion de vos comptes est actuellement en cours de maintenance. <br>
    Les équipes BNP Paribas font le nécessaire pour rétablir le service au plus vite.</p>
  </div>
</div>


<div id="footer">
  <div class="footer-contact-bel">
    <h2></h2>
  </div>
</div>
</body>
</html>
<body>
</body>
</html>

Found 2026-01-23 by HttpPlugin

Create report

Open service 23.50.131.158:443 · espace-client.hellobankpro.fr

2026-01-23 13:45

HTTP/1.1 200 OK
requestId: 4caf71d4-560e-4897-84dc-afeb5d81ba2d
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: object-src 'none';worker-src blob:;  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ult-inwebo.com https://assets.adobedtm.com https://cdn.doyoudreamup.com https://*.online-metrix.net https://*.dev.echonet https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net;frame-ancestors 'self' https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net https://*.cardif-iard.fr https://*.biapi.pro https://*.mosaic.fr https://*.protection24.com https://*.facil-iti.com https://*.herokuapp.com https://*.matmut.com https://login.mabanque-s1.dev.echonet:8443;
Content-Type: text/html;charset=UTF-8
Content-Language: en
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Vary: origin
Vary: access-control-request-method
Vary: access-control-request-headers
Date: Fri, 23 Jan 2026 13:45:40 GMT
Content-Length: 6877
Connection: close
Set-Cookie: SESSION=6C54120A72DA6C515556832064D7A5CA; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_TGC=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_MB=135664183.47873.0000; path=/; Httponly; Secure; samesite=None
Set-Cookie: TS013a6823=01a16de8d95aed8ec4f12bdb97437ba36ec856f32b9e604a28acd4866a6259d04b6bd2ed1c060ac3bfb47e19223bd6125aa02b417d; Path=/; Secure; samesite=None

Page title: Site momentanément en maintenance

<!DOCTYPE html><html>
<head>
</head>
<html lang="fr" xmlns="http://www.w3.org/1999/xhtml">

<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Site momentanément en maintenance</title>
    <script nonce="ac570bed-966c-4a39-96b9-81291e647407" src="/common/js/jquery-3.7.1.min-c9771cc3e90e18f5336eedbd0fffb2cf.js"></script>
    <link  href="/error/css/big-main-4d36c2aa1c23e01f84fdf28e3676807d.css" rel="stylesheet"><link type="image/x-icon" href="/common/faviconHB.ico" rel="shortcut icon"></head><body>
    <header>
        <nav class="aki-nav" id="navbarAki">
            <div class="container">
                <div class="navbar-header navbar-logo">
                    <a class="brand-logo" href="https://www.hellobank.fr/" title="Hello bank! la banque en ligne de BNP Paribas"></a>
                </div>
  
                <div class="navbar-collapse" id="navAki">
                    <div class="container">
                        <ul class="nav-level1">
                            <li><a href="https://www.hellobank.fr/fr/votre-banque-en-ligne/">Banque en ligne</a></li>
                            <li><a href="https://www.hellobank.fr/fr/tarifs/">Tarifs</a></li>
                            <li><a href="https://www.hellobank.fr/fr/vos-cartes-bancaires/">Cartes bancaires</a></li>
                            <li><a href="https://www.hellobank.fr/fr/votre-offre-parrainage/">Parrainage</a></li>
                        </ul>
                    </div>
                </div>
            </div>
        </nav>
    </header>

    <main class="quatre-cent-quatre">
        <section class="hero-banner">
            <div class="container content">
                <div class="row ">
                    <div class="kol-sm-12">
                        <h1 class="h1"><span class="txt-white">Oooups,</span> ça pique&nbsp;!</h1>
                        <p class="summary">Problème épineux&nbsp;: cette page <br class="visible-xs">n'existe pas.</p>
                        <a class="btn btn-default-neg" href="https://www.hellobank.fr/" title="Retour à l'accueil">Retour à l'accueil</a>
                    </div>
                </div>
            </div>
        </section>
    </main>

    <footer class="main-footer">
        <div class="container">
            <div class="footer-5-col">
                <ul class="liste-liens">
                    <li class="nav-title">Des questions&nbsp;?</li>
                    <li><a href="https://www.hellobank.fr/faq">Consultez les FAQ</a></li>
                    <li><a href="https://forum.hellobank.fr/">Visitez le Forum</a></li>
                    <li><a href="https://www.hellobank.fr/fr/pourquoi-nous-choisir/">Pourquoi nous choisir&nbsp;?</a></li>
                    <li><a href="https://www.hellobank.fr/lexique/">Lexique</a></li>
                </ul>
                <ul class="liste-liens">
                    <li class="nav-title">Les essentiels</li>
                    <li><a href="https://www.hellobank.fr/fr/votre-banque-en-ligne/">Banque en ligne</a></li>
                    <li><a href="https://www.hellobank.fr/fr/offre/credit/credit-immobilier/">Prêt immobilier</a></li>
                    <li><a href="https://www.hellobank.fr/fr/offre/credit/credit-consommation/">Prêt consommation</a></li>
                    <li><a href="https://www.hellobank.fr/fr/offre/compte-et-cartes/services-bancaires/mobilite-bancaire/">Changer pour Hello&nbsp;bank!</a></li>
                </ul>
                <ul class="liste-liens">
                    <li class="nav-title">Extras</li>
                    <li><a href="https://www.hellobank.fr/fr/votre-offre-parrainage/">Parrainage</a></li>
                    <li><a href="https://www.hellobank.fr/fr/financement-participatif/">Financement participatif</a></li>
                    <li><a href="https://www.hellobank.fr/fr/recrutement/">Recrutement</a></li>
                    <li

Found 2026-01-23 by HttpPlugin

Create report

Open service 23.50.131.157:443 · sandbox.espace-client.hellobankpro.fr

2026-01-09 16:59

HTTP/1.1 200 OK
requestId: 7efbdb01-0b75-4c74-bce8-f2fa92757982
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: object-src 'none';worker-src blob:;  script-src 'unsafe-eval' 'self' 'unsafe-inline' 'unsafe-eval' https://ult-inwebo.com https://assets.adobedtm.com https://cdn.doyoudreamup.com https://*.online-metrix.net https://*.dev.echonet https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net;frame-ancestors 'self' https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net https://*.cardif-iard.fr https://*.biapi.pro https://*.mosaic.fr https://*.protection24.com https://*.facil-iti.com https://*.herokuapp.com https://*.matmut.com https://login.mabanque-s1.dev.echonet:8443;
Content-Type: text/html;charset=UTF-8
Content-Language: en
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Vary: origin
Vary: access-control-request-method
Vary: access-control-request-headers
Date: Fri, 09 Jan 2026 16:59:42 GMT
Content-Length: 1684
Connection: close
Set-Cookie: SESSION=4D369CCC089A0E20A987A3C678F08FF5; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_TGC=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_MB=2914119946.47873.0000; path=/; Httponly; Secure; samesite=None
Set-Cookie: TS01ab8141=01a16de8d9084e6d7059b82883683136d643e891f098e063792cd845a21321592cbfa02d2b5eedac5e47f0a6b4789fa88f6de249da; Path=/; Secure; samesite=None

Page title: BNP PARIBAS | la banque et l'assurance d'un monde qui change 

<!DOCTYPE html><html>
<head>
</head>
<html lang="fr" xmlns="http://www.w3.org/1999/xhtml">

<head>
<META http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>BNP PARIBAS | la banque et l'assurance d'un monde qui change </title>
<meta name="keywords" content=""><meta name="description" content=""><meta name="vpath" content=""><meta name="page-locale-name" content=""><meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no"><link type="text/css" href="/error/css/errorStyle-9f3e2b4c2f6b024eb0fd442ce4198e0c.css" rel="stylesheet" /></head><body class="mw-1400">
	<div id="header">
    <header class="bottom-header">     
      <div class="no-mob">         
        <div class="logoBNP-container">        
          <a href="https://mabanque.bnpparibas" class="logoBNP text-hide"></a><span class="logotext">La banque d'un monde qui change</span>
        </div>        
      </div>    
      <header class="bottom-header-connected mobile-only pull-left">
        <ul id="" class="list-header-connected left mobile-only">
          <li class="logo"><a href="/" class="logoBNP"></a></li>        
        </ul>    
      </header>
    </header>
</div>

<div id="wrapper-maintenance" style="height: 83%;">
  <div class="content">
    <h1>Votre site est actuellement indisponible.</h1>
    <p>Afin d’améliorer le service, l’accès à la gestion de vos comptes est actuellement en cours de maintenance. <br>
    Les équipes BNP Paribas font le nécessaire pour rétablir le service au plus vite.</p>
  </div>
</div>


<div id="footer">
  <div class="footer-contact-bel">
    <h2></h2>
  </div>
</div>
</body>
</html>
<body>
</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.50.131.158:443 · espace-client.hellobankpro.fr

2026-01-09 13:53

HTTP/1.1 200 OK
requestId: ebcb3b39-a861-47cf-b366-6ee5985fd267
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: object-src 'none';worker-src blob:;  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ult-inwebo.com https://assets.adobedtm.com https://cdn.doyoudreamup.com https://*.online-metrix.net https://*.dev.echonet https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net;frame-ancestors 'self' https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net https://*.cardif-iard.fr https://*.biapi.pro https://*.mosaic.fr https://*.protection24.com https://*.facil-iti.com https://*.herokuapp.com https://*.matmut.com https://login.mabanque-s1.dev.echonet:8443;
Content-Type: text/html;charset=UTF-8
Content-Language: en
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Vary: origin
Vary: access-control-request-method
Vary: access-control-request-headers
Date: Fri, 09 Jan 2026 13:53:47 GMT
Content-Length: 6877
Connection: close
Set-Cookie: SESSION=3EA036F3F11F563995C60D6A97C0B181; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_TGC=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_MB=152441399.47873.0000; path=/; Httponly; Secure; samesite=None
Set-Cookie: TS013a6823=01a16de8d9213f4f729c25c1039545fc4e0db6d0e618523532620389bc92faec52ddf839b8f429bede10248f6e2ce3cd780021c51d; Path=/; Secure; samesite=None

Page title: Site momentanément en maintenance

<!DOCTYPE html><html>
<head>
</head>
<html lang="fr" xmlns="http://www.w3.org/1999/xhtml">

<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Site momentanément en maintenance</title>
    <script nonce="665d3b61-8840-4a04-a4f1-4c16d0915cdd" src="/common/js/jquery-3.7.1.min-c9771cc3e90e18f5336eedbd0fffb2cf.js"></script>
    <link  href="/error/css/big-main-4d36c2aa1c23e01f84fdf28e3676807d.css" rel="stylesheet"><link type="image/x-icon" href="/common/faviconHB.ico" rel="shortcut icon"></head><body>
    <header>
        <nav class="aki-nav" id="navbarAki">
            <div class="container">
                <div class="navbar-header navbar-logo">
                    <a class="brand-logo" href="https://www.hellobank.fr/" title="Hello bank! la banque en ligne de BNP Paribas"></a>
                </div>
  
                <div class="navbar-collapse" id="navAki">
                    <div class="container">
                        <ul class="nav-level1">
                            <li><a href="https://www.hellobank.fr/fr/votre-banque-en-ligne/">Banque en ligne</a></li>
                            <li><a href="https://www.hellobank.fr/fr/tarifs/">Tarifs</a></li>
                            <li><a href="https://www.hellobank.fr/fr/vos-cartes-bancaires/">Cartes bancaires</a></li>
                            <li><a href="https://www.hellobank.fr/fr/votre-offre-parrainage/">Parrainage</a></li>
                        </ul>
                    </div>
                </div>
            </div>
        </nav>
    </header>

    <main class="quatre-cent-quatre">
        <section class="hero-banner">
            <div class="container content">
                <div class="row ">
                    <div class="kol-sm-12">
                        <h1 class="h1"><span class="txt-white">Oooups,</span> ça pique&nbsp;!</h1>
                        <p class="summary">Problème épineux&nbsp;: cette page <br class="visible-xs">n'existe pas.</p>
                        <a class="btn btn-default-neg" href="https://www.hellobank.fr/" title="Retour à l'accueil">Retour à l'accueil</a>
                    </div>
                </div>
            </div>
        </section>
    </main>

    <footer class="main-footer">
        <div class="container">
            <div class="footer-5-col">
                <ul class="liste-liens">
                    <li class="nav-title">Des questions&nbsp;?</li>
                    <li><a href="https://www.hellobank.fr/faq">Consultez les FAQ</a></li>
                    <li><a href="https://forum.hellobank.fr/">Visitez le Forum</a></li>
                    <li><a href="https://www.hellobank.fr/fr/pourquoi-nous-choisir/">Pourquoi nous choisir&nbsp;?</a></li>
                    <li><a href="https://www.hellobank.fr/lexique/">Lexique</a></li>
                </ul>
                <ul class="liste-liens">
                    <li class="nav-title">Les essentiels</li>
                    <li><a href="https://www.hellobank.fr/fr/votre-banque-en-ligne/">Banque en ligne</a></li>
                    <li><a href="https://www.hellobank.fr/fr/offre/credit/credit-immobilier/">Prêt immobilier</a></li>
                    <li><a href="https://www.hellobank.fr/fr/offre/credit/credit-consommation/">Prêt consommation</a></li>
                    <li><a href="https://www.hellobank.fr/fr/offre/compte-et-cartes/services-bancaires/mobilite-bancaire/">Changer pour Hello&nbsp;bank!</a></li>
                </ul>
                <ul class="liste-liens">
                    <li class="nav-title">Extras</li>
                    <li><a href="https://www.hellobank.fr/fr/votre-offre-parrainage/">Parrainage</a></li>
                    <li><a href="https://www.hellobank.fr/fr/financement-participatif/">Financement participatif</a></li>
                    <li><a href="https://www.hellobank.fr/fr/recrutement/">Recrutement</a></li>
                    <li

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.50.131.157:443 · sandbox.espace-client.hellobankpro.fr

2026-01-02 20:59

HTTP/1.1 200 OK
requestId: f020dab3-eedd-4f29-8321-113a2037687a
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: object-src 'none';worker-src blob:;  script-src 'unsafe-eval' 'self' 'unsafe-inline' 'unsafe-eval' https://ult-inwebo.com https://assets.adobedtm.com https://cdn.doyoudreamup.com https://*.online-metrix.net https://*.dev.echonet https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net;frame-ancestors 'self' https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net https://*.cardif-iard.fr https://*.biapi.pro https://*.mosaic.fr https://*.protection24.com https://*.facil-iti.com https://*.herokuapp.com https://*.matmut.com https://login.mabanque-s1.dev.echonet:8443;
Content-Type: text/html;charset=UTF-8
Content-Language: en
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Vary: origin
Vary: access-control-request-method
Vary: access-control-request-headers
Date: Fri, 02 Jan 2026 20:59:18 GMT
Content-Length: 1684
Connection: close
Set-Cookie: SESSION=FF1A594DCC93A411079C623825B26759; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_TGC=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_MB=2914119946.47873.0000; path=/; Httponly; Secure; samesite=None
Set-Cookie: TS01ab8141=01a16de8d9ec885e83a73ea226553ad12675fde572a4124390471e5dc9d009e341e83b445a94b2700a77deca2f1223c6054db47394; Path=/; Secure; samesite=None

Page title: BNP PARIBAS | la banque et l'assurance d'un monde qui change 

<!DOCTYPE html><html>
<head>
</head>
<html lang="fr" xmlns="http://www.w3.org/1999/xhtml">

<head>
<META http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>BNP PARIBAS | la banque et l'assurance d'un monde qui change </title>
<meta name="keywords" content=""><meta name="description" content=""><meta name="vpath" content=""><meta name="page-locale-name" content=""><meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no"><link type="text/css" href="/error/css/errorStyle-9f3e2b4c2f6b024eb0fd442ce4198e0c.css" rel="stylesheet" /></head><body class="mw-1400">
	<div id="header">
    <header class="bottom-header">     
      <div class="no-mob">         
        <div class="logoBNP-container">        
          <a href="https://mabanque.bnpparibas" class="logoBNP text-hide"></a><span class="logotext">La banque d'un monde qui change</span>
        </div>        
      </div>    
      <header class="bottom-header-connected mobile-only pull-left">
        <ul id="" class="list-header-connected left mobile-only">
          <li class="logo"><a href="/" class="logoBNP"></a></li>        
        </ul>    
      </header>
    </header>
</div>

<div id="wrapper-maintenance" style="height: 83%;">
  <div class="content">
    <h1>Votre site est actuellement indisponible.</h1>
    <p>Afin d’améliorer le service, l’accès à la gestion de vos comptes est actuellement en cours de maintenance. <br>
    Les équipes BNP Paribas font le nécessaire pour rétablir le service au plus vite.</p>
  </div>
</div>


<div id="footer">
  <div class="footer-contact-bel">
    <h2></h2>
  </div>
</div>
</body>
</html>
<body>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 23.50.131.158:443 · espace-client.hellobankpro.fr

2026-01-02 13:26

HTTP/1.1 200 OK
traceresponse: 00-60afdf83467cda856678b1619b359cd6-187380a4554ab63c-01
x-dt-tracestate: 191c3167-19ec4e7c@dt
requestId: cc44dade-e1af-44b4-aa1b-b9453ce56b86
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: object-src 'none';worker-src blob:;  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ult-inwebo.com https://assets.adobedtm.com https://cdn.doyoudreamup.com https://*.online-metrix.net https://*.dev.echonet https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net;frame-ancestors 'self' https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net https://*.cardif-iard.fr https://*.biapi.pro https://*.mosaic.fr https://*.protection24.com https://*.facil-iti.com https://*.herokuapp.com https://*.matmut.com https://login.mabanque-s1.dev.echonet:8443;
Content-Type: text/html;charset=UTF-8
Content-Language: en
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Vary: origin
Vary: access-control-request-method
Vary: access-control-request-headers
Date: Fri, 02 Jan 2026 13:26:16 GMT
Content-Length: 6877
Connection: close
Set-Cookie: SESSION=5B6C8606EB833D6A46BD9806742B1AC8; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_TGC=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_MB=700248330.47873.0000; path=/; Httponly; Secure; samesite=None
Set-Cookie: TS013a6823=01a16de8d94890fc1bfea7c0d5b3b61f78cffd00cc915a175e41f8b3a1dae75dca2be30cd9eb9580ee83379d9eb7c28176e76a8d16; Path=/; Secure; samesite=None

Page title: Site momentanément en maintenance

<!DOCTYPE html><html>
<head>
</head>
<html lang="fr" xmlns="http://www.w3.org/1999/xhtml">

<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Site momentanément en maintenance</title>
    <script nonce="595efabb-bd8d-4b1a-92e7-39475e334b8b" src="/common/js/jquery-3.7.1.min-c9771cc3e90e18f5336eedbd0fffb2cf.js"></script>
    <link  href="/error/css/big-main-4d36c2aa1c23e01f84fdf28e3676807d.css" rel="stylesheet"><link type="image/x-icon" href="/common/faviconHB.ico" rel="shortcut icon"></head><body>
    <header>
        <nav class="aki-nav" id="navbarAki">
            <div class="container">
                <div class="navbar-header navbar-logo">
                    <a class="brand-logo" href="https://www.hellobank.fr/" title="Hello bank! la banque en ligne de BNP Paribas"></a>
                </div>
  
                <div class="navbar-collapse" id="navAki">
                    <div class="container">
                        <ul class="nav-level1">
                            <li><a href="https://www.hellobank.fr/fr/votre-banque-en-ligne/">Banque en ligne</a></li>
                            <li><a href="https://www.hellobank.fr/fr/tarifs/">Tarifs</a></li>
                            <li><a href="https://www.hellobank.fr/fr/vos-cartes-bancaires/">Cartes bancaires</a></li>
                            <li><a href="https://www.hellobank.fr/fr/votre-offre-parrainage/">Parrainage</a></li>
                        </ul>
                    </div>
                </div>
            </div>
        </nav>
    </header>

    <main class="quatre-cent-quatre">
        <section class="hero-banner">
            <div class="container content">
                <div class="row ">
                    <div class="kol-sm-12">
                        <h1 class="h1"><span class="txt-white">Oooups,</span> ça pique&nbsp;!</h1>
                        <p class="summary">Problème épineux&nbsp;: cette page <br class="visible-xs">n'existe pas.</p>
                        <a class="btn btn-default-neg" href="https://www.hellobank.fr/" title="Retour à l'accueil">Retour à l'accueil</a>
                    </div>
                </div>
            </div>
        </section>
    </main>

    <footer class="main-footer">
        <div class="container">
            <div class="footer-5-col">
                <ul class="liste-liens">
                    <li class="nav-title">Des questions&nbsp;?</li>
                    <li><a href="https://www.hellobank.fr/faq">Consultez les FAQ</a></li>
                    <li><a href="https://forum.hellobank.fr/">Visitez le Forum</a></li>
                    <li><a href="https://www.hellobank.fr/fr/pourquoi-nous-choisir/">Pourquoi nous choisir&nbsp;?</a></li>
                    <li><a href="https://www.hellobank.fr/lexique/">Lexique</a></li>
                </ul>
                <ul class="liste-liens">
                    <li class="nav-title">Les essentiels</li>
                    <li><a href="https://www.hellobank.fr/fr/votre-banque-en-ligne/">Banque en ligne</a></li>
                    <li><a href="https://www.hellobank.fr/fr/offre/credit/credit-immobilier/">Prêt immobilier</a></li>
                    <li><a href="https://www.hellobank.fr/fr/offre/credit/credit-consommation/">Prêt consommation</a></li>
                    <li><a href="https://www.hellobank.fr/fr/offre/compte-et-cartes/services-bancaires/mobilite-bancaire/">Changer pour Hello&nbsp;bank!</a></li>
                </ul>
                <ul class="liste-liens">
                    <li class="nav-title">Extras</li>
                    <li><a href="https://www.hellobank.fr/fr/votre-offre-parrainage/">Parrainage</a></li>
                    <li><a href="https://www.hellobank.fr/fr/financement-participatif/">Financement participatif</a></li>
                    <li><a href="https://www.hellobank.fr/fr/recrutement/">Recrutement</a></li>
                    <li

Found 2026-01-02 by HttpPlugin

Create report

Open service 23.50.131.157:443 · sandbox.espace-client.hellobankpro.fr

2025-12-22 23:45

HTTP/1.1 200 OK
requestId: 1f82ac6e-3254-4b68-bae9-b40fa77c7f8e
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: object-src 'none';worker-src blob:;  script-src 'unsafe-eval' 'self' 'unsafe-inline' 'unsafe-eval' https://ult-inwebo.com https://assets.adobedtm.com https://cdn.doyoudreamup.com https://*.online-metrix.net https://*.dev.echonet https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net;frame-ancestors 'self' https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net https://*.cardif-iard.fr https://*.biapi.pro https://*.mosaic.fr https://*.protection24.com https://*.facil-iti.com https://*.herokuapp.com https://*.matmut.com https://login.mabanque-s1.dev.echonet:8443;
Content-Type: text/html;charset=UTF-8
Content-Language: en
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Vary: origin
Vary: access-control-request-method
Vary: access-control-request-headers
Date: Mon, 22 Dec 2025 23:45:57 GMT
Content-Length: 1684
Connection: close
Set-Cookie: SESSION=53D944DD3EFA522F906F9D97560D76C7; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_TGC=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_MB=2914119946.47873.0000; path=/; Httponly; Secure; samesite=None
Set-Cookie: TS01ab8141=01a16de8d9ca01cefe213ba33f43ac2e7f47abee2dd83d8720938a24fee12c19b9d82f019710f6f71fce4054132d4aa45640ebc02d; Path=/; Secure; samesite=None

Page title: BNP PARIBAS | la banque et l'assurance d'un monde qui change 

<!DOCTYPE html><html>
<head>
</head>
<html lang="fr" xmlns="http://www.w3.org/1999/xhtml">

<head>
<META http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>BNP PARIBAS | la banque et l'assurance d'un monde qui change </title>
<meta name="keywords" content=""><meta name="description" content=""><meta name="vpath" content=""><meta name="page-locale-name" content=""><meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no"><link type="text/css" href="/error/css/errorStyle-9f3e2b4c2f6b024eb0fd442ce4198e0c.css" rel="stylesheet" /></head><body class="mw-1400">
	<div id="header">
    <header class="bottom-header">     
      <div class="no-mob">         
        <div class="logoBNP-container">        
          <a href="https://mabanque.bnpparibas" class="logoBNP text-hide"></a><span class="logotext">La banque d'un monde qui change</span>
        </div>        
      </div>    
      <header class="bottom-header-connected mobile-only pull-left">
        <ul id="" class="list-header-connected left mobile-only">
          <li class="logo"><a href="/" class="logoBNP"></a></li>        
        </ul>    
      </header>
    </header>
</div>

<div id="wrapper-maintenance" style="height: 83%;">
  <div class="content">
    <h1>Votre site est actuellement indisponible.</h1>
    <p>Afin d’améliorer le service, l’accès à la gestion de vos comptes est actuellement en cours de maintenance. <br>
    Les équipes BNP Paribas font le nécessaire pour rétablir le service au plus vite.</p>
  </div>
</div>


<div id="footer">
  <div class="footer-contact-bel">
    <h2></h2>
  </div>
</div>
</body>
</html>
<body>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 23.50.131.158:443 · espace-client.hellobankpro.fr

2025-12-22 17:48

HTTP/1.1 200 OK
requestId: 93ecfdb6-eefa-4e3d-a543-a0ee1da9affe
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: object-src 'none';worker-src blob:;  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ult-inwebo.com https://assets.adobedtm.com https://cdn.doyoudreamup.com https://*.online-metrix.net https://*.dev.echonet https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net;frame-ancestors 'self' https://*.hellobankpro.fr https://*.hellobank.fr https://*.bnpparibas https://*.bnpparibas.net https://*.cardif-iard.fr https://*.biapi.pro https://*.mosaic.fr https://*.protection24.com https://*.facil-iti.com https://*.herokuapp.com https://*.matmut.com https://login.mabanque-s1.dev.echonet:8443;
Content-Type: text/html;charset=UTF-8
Content-Language: en
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Vary: origin
Vary: access-control-request-method
Vary: access-control-request-headers
Date: Mon, 22 Dec 2025 17:48:28 GMT
Content-Length: 6877
Connection: close
Set-Cookie: SESSION=8DE2F4D8743370A3AA37852024FFF916; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_TGC=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; HttpOnly; samesite=None
Set-Cookie: CAS_MB=2947674378.47873.0000; path=/; Httponly; Secure; samesite=None
Set-Cookie: TS013a6823=01a16de8d9348d7792b37a020e132e7d09cd007d700846e4565f5756a615dab5e017b50faed392bbe3c8c25d682548d7fb036f5633; Path=/; Secure; samesite=None

Page title: Site momentanément en maintenance

<!DOCTYPE html><html>
<head>
</head>
<html lang="fr" xmlns="http://www.w3.org/1999/xhtml">

<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Site momentanément en maintenance</title>
    <script nonce="bb485720-5b36-479e-af0f-af3943d97bce" src="/common/js/jquery-3.7.1.min-c9771cc3e90e18f5336eedbd0fffb2cf.js"></script>
    <link  href="/error/css/big-main-4d36c2aa1c23e01f84fdf28e3676807d.css" rel="stylesheet"><link type="image/x-icon" href="/common/faviconHB.ico" rel="shortcut icon"></head><body>
    <header>
        <nav class="aki-nav" id="navbarAki">
            <div class="container">
                <div class="navbar-header navbar-logo">
                    <a class="brand-logo" href="https://www.hellobank.fr/" title="Hello bank! la banque en ligne de BNP Paribas"></a>
                </div>
  
                <div class="navbar-collapse" id="navAki">
                    <div class="container">
                        <ul class="nav-level1">
                            <li><a href="https://www.hellobank.fr/fr/votre-banque-en-ligne/">Banque en ligne</a></li>
                            <li><a href="https://www.hellobank.fr/fr/tarifs/">Tarifs</a></li>
                            <li><a href="https://www.hellobank.fr/fr/vos-cartes-bancaires/">Cartes bancaires</a></li>
                            <li><a href="https://www.hellobank.fr/fr/votre-offre-parrainage/">Parrainage</a></li>
                        </ul>
                    </div>
                </div>
            </div>
        </nav>
    </header>

    <main class="quatre-cent-quatre">
        <section class="hero-banner">
            <div class="container content">
                <div class="row ">
                    <div class="kol-sm-12">
                        <h1 class="h1"><span class="txt-white">Oooups,</span> ça pique&nbsp;!</h1>
                        <p class="summary">Problème épineux&nbsp;: cette page <br class="visible-xs">n'existe pas.</p>
                        <a class="btn btn-default-neg" href="https://www.hellobank.fr/" title="Retour à l'accueil">Retour à l'accueil</a>
                    </div>
                </div>
            </div>
        </section>
    </main>

    <footer class="main-footer">
        <div class="container">
            <div class="footer-5-col">
                <ul class="liste-liens">
                    <li class="nav-title">Des questions&nbsp;?</li>
                    <li><a href="https://www.hellobank.fr/faq">Consultez les FAQ</a></li>
                    <li><a href="https://forum.hellobank.fr/">Visitez le Forum</a></li>
                    <li><a href="https://www.hellobank.fr/fr/pourquoi-nous-choisir/">Pourquoi nous choisir&nbsp;?</a></li>
                    <li><a href="https://www.hellobank.fr/lexique/">Lexique</a></li>
                </ul>
                <ul class="liste-liens">
                    <li class="nav-title">Les essentiels</li>
                    <li><a href="https://www.hellobank.fr/fr/votre-banque-en-ligne/">Banque en ligne</a></li>
                    <li><a href="https://www.hellobank.fr/fr/offre/credit/credit-immobilier/">Prêt immobilier</a></li>
                    <li><a href="https://www.hellobank.fr/fr/offre/credit/credit-consommation/">Prêt consommation</a></li>
                    <li><a href="https://www.hellobank.fr/fr/offre/compte-et-cartes/services-bancaires/mobilite-bancaire/">Changer pour Hello&nbsp;bank!</a></li>
                </ul>
                <ul class="liste-liens">
                    <li class="nav-title">Extras</li>
                    <li><a href="https://www.hellobank.fr/fr/votre-offre-parrainage/">Parrainage</a></li>
                    <li><a href="https://www.hellobank.fr/fr/financement-participatif/">Financement participatif</a></li>
                    <li><a href="https://www.hellobank.fr/fr/recrutement/">Recrutement</a></li>
                    <li

Found 2025-12-22 by HttpPlugin

Create report

tpc-prev.connexion-mabanque.bnpparibassandbox.espace-client.hellobank.frprev.cledigitale.connexion.mabanque.bnpparibasprev.connexion-mabanque.bnpparibasprev.connexion.mabanque.bnpparibasprev-espace-client.hellobankpro.frsandbox.connexion-mabanque.bnpparibasprev.cledigitale.espace-client.hellobank.frprev-espace-client.hellobank.frsandbox.connexion.mabanque.bnpparibasprev-bast.connexion-mabanque.bnpparibassandbox.espace-client.hellobankpro.frprev-bast.espace-client.hellobank.fr

Fingerprint:

492f7d9a43d34c63288227244a2b097a52a03d53f640c6600467226726bd3f43

CN:

tpc-prev.connexion-mabanque.bnpparibas

Key:

RSA-2048

Issuer:

Thawte EV RSA CA G2

Not before:

2025-10-08 00:00

Not after:

2026-10-07 23:59

tpc-connexion.mabanque.bnpparibascledigitale.connexion.mabanque.bnpparibasespace-client.hellobank.frconnexion-mabanque.bnpparibascledigitale.espace-client.hellobank.frespace-client.hellobankpro.frconnexion.mabanque.bnpparibas

Fingerprint:

cd0a1e605f06f3078e8c3a6ce78bad6d1f25a56a643b329eb261100b75b59ccd

CN:

tpc-connexion.mabanque.bnpparibas

Key:

RSA-2048

Issuer:

Thawte EV RSA CA G2

Not before:

2025-09-03 00:00

Not after:

2026-09-02 23:59

Domain summary

sandbox.espace-client.hellobankpro.fr 4 espace-client.hellobankpro.fr 4

2 recorded

IP summary

23.50.131.157 2 23.50.131.158 2

2 recorded

Domain espace-client.hellobankpro.fr

Germany

Swagger API description is publicly available

Swagger API description is publicly available

tpc-connexion.mabanque.bnpparibascledigitale.connexion.mabanque.bnpparibasespace-client.hellobank.frconnexion-mabanque.bnpparibascledigitale.espace-client.hellobank.frespace-client.hellobankpro.frconnexion.mabanque.bnpparibas

Domain summary

IP summary