M-Pesa Africa Limited icon M-Pesa Africa Limited HackerOne

mpa.qr.web.oat.m-pesa.com

Endpoints (5 of 5)

Page 1 of 1
Path
Port
Status Code
Content-Length
Title
Resp Headers
/
80
301
167
301 Moved Permanently

Location: https://mpa.qr.web.oat.m-pesa.com/

Content-Type: text/html

/
443
200
795
MPesa

Content-Type: text/html

/static/js/runtime-main.3dba0833.js
443
200
2372
None

Content-Type: application/javascript

/static/js/main.2d5818e1.chunk.js
443
200
483550
None

Content-Type: application/javascript

/static/js/2.f57ac0ad.chunk.js
443
200
3443125
None

Content-Type: application/javascript

mpa.qr.web.oat.m-pesa.com
  • Path: /
  • Port: 80
  • Status Code: 301
  • Title: 301 Moved Permanently

  • Via: 1.1 a6f2e7c3dd76750ec70d32e7fcf09838.cloudfront.net (CloudFront)

    Date: Wed, 01 May 2024 02:58:25 GMT

    Pragma: no-cache

    Server: CloudFront

    X-Cache: Redirect from cloudfront

    Location: https://mpa.qr.web.oat.m-pesa.com/

    X-Amz-Cf-Id: _JGT6jYwkmiIXh0BFFv_rLGfuj1A5sue-3u4iF3KQ0jATKM8q8EWSA==

    Content-Type: text/html

    X-Amz-Cf-Pop: YUL62-P1

    Cache-Control: no-store

    Content-Length: 167

    Referrer-Policy: same-origin

    X-Frame-Options: DENY

    X-Xss-Protection: 1; mode=block

    X-Content-Type-Options: nosniff

    Content-Security-Policy: default-src mpesa-qr-code-oat-eu-west-1-data.s3.eu-west-1.amazonaws.com *.m-pesa.com *.gstatic.com *.googleapis.com; script-src 'self' 'unsafe-eval' 'sha256-TTHUbAvA0DWYUe8iBrsE7GLomxAMTAXrJcYitNIV6Ns='; img-src 'self' data: blob: *.m-pesa.com mpesa-qr-code-oat-eu-west-1-data.s3.eu-west-1.amazonaws.com; style-src *.gstatic.com *.googleapis.com *.m-pesa.com; style-src-elem 'sha256-Sii0QzNsQJQwCjn3+0uS4E8PGcWc5/7oeuTuQ3HAt+8=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' *.gstatic.com *.googleapis.com *.m-pesa.com; font-src *.gstatic.com *.googleapis.com

  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
mpa.qr.web.oat.m-pesa.com
  • Path: /
  • Port: 443
  • Status Code: 200
  • Title: MPesa

  • Via: 1.1 d8231fd704ad0bc5e49083372d79c2c0.cloudfront.net (CloudFront)

    Date: Wed, 01 May 2024 02:58:27 GMT

    Etag: "82c0288bf685c31b04ab56ffa8960570"

    Pragma: no-cache

    Server: AmazonS3

    X-Cache: RefreshHit from cloudfront

    X-Amz-Cf-Id: tvujKFVx6Kp0tkw3uzfGVKHsXmvB8OHBwHFdSe8-O40AI14bKri1FA==

    Content-Type: text/html

    X-Amz-Cf-Pop: EWR53-C2

    Accept-Ranges: bytes

    Cache-Control: no-store

    Last-Modified: Tue, 13 Sep 2022 11:52:27 GMT

    Content-Length: 795

    Referrer-Policy: same-origin

    X-Frame-Options: DENY

    X-Amz-Version-Id: x6OqfNOzTI.qE7w4bg6cci.SQO01gFbc

    X-Xss-Protection: 1; mode=block

    X-Content-Type-Options: nosniff

    Content-Security-Policy: default-src mpesa-qr-code-oat-eu-west-1-data.s3.eu-west-1.amazonaws.com *.m-pesa.com *.gstatic.com *.googleapis.com; script-src 'self' 'unsafe-eval' 'sha256-TTHUbAvA0DWYUe8iBrsE7GLomxAMTAXrJcYitNIV6Ns='; img-src 'self' data: blob: *.m-pesa.com mpesa-qr-code-oat-eu-west-1-data.s3.eu-west-1.amazonaws.com; style-src *.gstatic.com *.googleapis.com *.m-pesa.com; style-src-elem 'sha256-Sii0QzNsQJQwCjn3+0uS4E8PGcWc5/7oeuTuQ3HAt+8=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' *.gstatic.com *.googleapis.com *.m-pesa.com; font-src *.gstatic.com *.googleapis.com

    Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

    X-Amz-Server-Side-Encryption: AES256

  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
mpa.qr.web.oat.m-pesa.com
  • Path: /static/js/runtime-main.3dba0833.js
  • Port: 443
  • Status Code: 200
  • Title: None
  • Content-Type: application/javascript
  • Content-Length: 2372
  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
mpa.qr.web.oat.m-pesa.com
  • Path: /static/js/main.2d5818e1.chunk.js
  • Port: 443
  • Status Code: 200
  • Title: None
  • Content-Type: application/javascript
  • Content-Length: 483550
  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
mpa.qr.web.oat.m-pesa.com
  • Path: /static/js/2.f57ac0ad.chunk.js
  • Port: 443
  • Status Code: 200
  • Title: None
  • Content-Type: application/javascript
  • Content-Length: 3443125
  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
Page 1 of 1