Of the top of my head I would say you have a correlation issue. Probably some sort of authentication that fails before this step. Check for timestamps, randomly generated session ids, etc.
↧