M-Pesa Africa Limited icon M-Pesa Africa Limited HackerOne

mpa.qr.web.m-pesa.com

Endpoints (5 of 5)

Page 1 of 1
Path
Port
Status Code
Content-Length
Title
Resp Headers
/
443
200
795
MPesa

Content-Type: text/html

/
80
301
167
301 Moved Permanently

Location: https://mpa.qr.web.m-pesa.com/

Content-Type: text/html

/static/js/runtime-main.3dba0833.js
443
200
2372
None

Content-Type: application/javascript

/static/js/main.0953bc9f.chunk.js
443
200
483352
None

Content-Type: application/javascript

/static/js/2.f57ac0ad.chunk.js
443
200
3443125
None

Content-Type: application/javascript

mpa.qr.web.m-pesa.com
  • Path: /
  • Port: 443
  • Status Code: 200
  • Title: MPesa

  • Via: 1.1 9ad14e3f9b528d4215643d5af359b816.cloudfront.net (CloudFront)

    Date: Wed, 01 May 2024 02:58:07 GMT

    Etag: "d2b28965194519fdfa154c60a04bd9ce"

    Pragma: no-cache

    Server: AmazonS3

    X-Cache: RefreshHit from cloudfront

    X-Amz-Cf-Id: KqVxkor5BigC6D7Tko1dlTzPOMypqsVfcnVS2oAwmqEOjhJsllJjhw==

    Content-Type: text/html

    X-Amz-Cf-Pop: JFK50-P8

    Accept-Ranges: bytes

    Cache-Control: no-store

    Last-Modified: Thu, 22 Sep 2022 04:44:24 GMT

    Content-Length: 795

    Referrer-Policy: same-origin

    X-Frame-Options: DENY

    X-Amz-Version-Id: QGs6eiNn3LH9QE4OMa26kHGnt_dYVnLl

    X-Xss-Protection: 1; mode=block

    X-Content-Type-Options: nosniff

    Content-Security-Policy: default-src mpesa-qr-code-prod-eu-west-1-data.s3.eu-west-1.amazonaws.com *.m-pesa.com *.gstatic.com *.googleapis.com; script-src 'self' 'unsafe-eval' 'sha256-TTHUbAvA0DWYUe8iBrsE7GLomxAMTAXrJcYitNIV6Ns='; img-src 'self' data: blob: *.m-pesa.com mpesa-qr-code-prod-eu-west-1-data.s3.eu-west-1.amazonaws.com; style-src *.gstatic.com *.googleapis.com *.m-pesa.com; style-src-elem 'sha256-Sii0QzNsQJQwCjn3+0uS4E8PGcWc5/7oeuTuQ3HAt+8=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' *.gstatic.com *.googleapis.com *.m-pesa.com; font-src *.gstatic.com *.googleapis.com

    Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

    X-Amz-Server-Side-Encryption: AES256

  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
mpa.qr.web.m-pesa.com
  • Path: /
  • Port: 80
  • Status Code: 301
  • Title: 301 Moved Permanently

  • Via: 1.1 368bc8b1f5073a6f7cdb40029e9a5a88.cloudfront.net (CloudFront)

    Date: Wed, 01 May 2024 02:58:25 GMT

    Pragma: no-cache

    Server: CloudFront

    X-Cache: Redirect from cloudfront

    Location: https://mpa.qr.web.m-pesa.com/

    X-Amz-Cf-Id: dfjCHEZ7QFxecuaC4-QbO9q9XfWwb8zO1p-S1-CcF-wBgLx0TZnDFg==

    Content-Type: text/html

    X-Amz-Cf-Pop: JFK50-P8

    Cache-Control: no-store

    Content-Length: 167

    Referrer-Policy: same-origin

    X-Frame-Options: DENY

    X-Xss-Protection: 1; mode=block

    X-Content-Type-Options: nosniff

    Content-Security-Policy: default-src mpesa-qr-code-prod-eu-west-1-data.s3.eu-west-1.amazonaws.com *.m-pesa.com *.gstatic.com *.googleapis.com; script-src 'self' 'unsafe-eval' 'sha256-TTHUbAvA0DWYUe8iBrsE7GLomxAMTAXrJcYitNIV6Ns='; img-src 'self' data: blob: *.m-pesa.com mpesa-qr-code-prod-eu-west-1-data.s3.eu-west-1.amazonaws.com; style-src *.gstatic.com *.googleapis.com *.m-pesa.com; style-src-elem 'sha256-Sii0QzNsQJQwCjn3+0uS4E8PGcWc5/7oeuTuQ3HAt+8=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' *.gstatic.com *.googleapis.com *.m-pesa.com; font-src *.gstatic.com *.googleapis.com

  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
mpa.qr.web.m-pesa.com
  • Path: /static/js/runtime-main.3dba0833.js
  • Port: 443
  • Status Code: 200
  • Title: None
  • Content-Type: application/javascript
  • Content-Length: 2372
  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
mpa.qr.web.m-pesa.com
  • Path: /static/js/main.0953bc9f.chunk.js
  • Port: 443
  • Status Code: 200
  • Title: None
  • Content-Type: application/javascript
  • Content-Length: 483352
  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
mpa.qr.web.m-pesa.com
  • Path: /static/js/2.f57ac0ad.chunk.js
  • Port: 443
  • Status Code: 200
  • Title: None
  • Content-Type: application/javascript
  • Content-Length: 3443125
  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
Page 1 of 1