M-Pesa Africa Limited icon M-Pesa Africa Limited HackerOne

mpa.qr.web.uat.m-pesa.com

Endpoints (5 of 5)

Page 1 of 1
Path
Port
Status Code
Content-Length
Title
Resp Headers
/
80
301
167
301 Moved Permanently

Location: https://mpa.qr.web.uat.m-pesa.com/

Content-Type: text/html

/
443
200
795
MPesa

Content-Type: text/html

/static/js/runtime-main.3dba0833.js
443
200
2372
None

Content-Type: application/javascript

/static/js/main.f18d6af6.chunk.js
443
200
483393
None

Content-Type: application/javascript

/static/js/2.f57ac0ad.chunk.js
443
200
3443125
None

Content-Type: application/javascript

mpa.qr.web.uat.m-pesa.com
  • Path: /
  • Port: 80
  • Status Code: 301
  • Title: 301 Moved Permanently

  • Via: 1.1 0b2df4aba1652cc7a2c7e17c670eeec8.cloudfront.net (CloudFront)

    Date: Wed, 01 May 2024 02:58:46 GMT

    Pragma: no-cache

    Server: CloudFront

    X-Cache: Redirect from cloudfront

    Location: https://mpa.qr.web.uat.m-pesa.com/

    X-Amz-Cf-Id: et9iXX_x8U2p4OxKpLiZCBs3gaGjo1DTAlHjdb6g2BFB-CRsbyu2pg==

    Content-Type: text/html

    X-Amz-Cf-Pop: JFK52-P5

    Cache-Control: no-store

    Content-Length: 167

    Referrer-Policy: same-origin

    X-Frame-Options: DENY

    X-Xss-Protection: 1; mode=block

    X-Content-Type-Options: nosniff

    Content-Security-Policy: default-src mpesa-qr-code-uat-eu-west-1-data.s3.eu-west-1.amazonaws.com *.m-pesa.com *.gstatic.com *.googleapis.com; script-src 'self' 'unsafe-eval' 'sha256-TTHUbAvA0DWYUe8iBrsE7GLomxAMTAXrJcYitNIV6Ns='; img-src 'self' data: blob: *.m-pesa.com mpesa-qr-code-uat-eu-west-1-data.s3.eu-west-1.amazonaws.com; style-src *.gstatic.com *.googleapis.com *.m-pesa.com; style-src-elem 'sha256-Sii0QzNsQJQwCjn3+0uS4E8PGcWc5/7oeuTuQ3HAt+8=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' *.gstatic.com *.googleapis.com *.m-pesa.com; font-src *.gstatic.com *.googleapis.com

  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
mpa.qr.web.uat.m-pesa.com
  • Path: /
  • Port: 443
  • Status Code: 200
  • Title: MPesa

  • Via: 1.1 e830c64a8809a708404ba54d59d32214.cloudfront.net (CloudFront)

    Date: Wed, 01 May 2024 02:58:47 GMT

    Etag: "572234e00c6b53f1718843c737e55497"

    Pragma: no-cache

    Server: AmazonS3

    X-Cache: RefreshHit from cloudfront

    X-Amz-Cf-Id: 8G1Bt2UcLdwG1WIMGGld6wZDsVLJ1M3daQsxpQId5bpyk43rUk4USw==

    Content-Type: text/html

    X-Amz-Cf-Pop: YUL62-C1

    Accept-Ranges: bytes

    Cache-Control: no-store

    Last-Modified: Wed, 22 Feb 2023 10:16:05 GMT

    Content-Length: 795

    Referrer-Policy: same-origin

    X-Frame-Options: DENY

    X-Amz-Version-Id: .eunZS13avsy1V5Qna25fh4qtlhPLrwL

    X-Xss-Protection: 1; mode=block

    X-Content-Type-Options: nosniff

    Content-Security-Policy: default-src mpesa-qr-code-uat-eu-west-1-data.s3.eu-west-1.amazonaws.com *.m-pesa.com *.gstatic.com *.googleapis.com; script-src 'self' 'unsafe-eval' 'sha256-TTHUbAvA0DWYUe8iBrsE7GLomxAMTAXrJcYitNIV6Ns='; img-src 'self' data: blob: *.m-pesa.com mpesa-qr-code-uat-eu-west-1-data.s3.eu-west-1.amazonaws.com; style-src *.gstatic.com *.googleapis.com *.m-pesa.com; style-src-elem 'sha256-Sii0QzNsQJQwCjn3+0uS4E8PGcWc5/7oeuTuQ3HAt+8=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' *.gstatic.com *.googleapis.com *.m-pesa.com; font-src *.gstatic.com *.googleapis.com

    Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

    X-Amz-Server-Side-Encryption: AES256

  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
mpa.qr.web.uat.m-pesa.com
  • Path: /static/js/runtime-main.3dba0833.js
  • Port: 443
  • Status Code: 200
  • Title: None
  • Content-Type: application/javascript
  • Content-Length: 2372
  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
mpa.qr.web.uat.m-pesa.com
  • Path: /static/js/main.f18d6af6.chunk.js
  • Port: 443
  • Status Code: 200
  • Title: None
  • Content-Type: application/javascript
  • Content-Length: 483393
  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
mpa.qr.web.uat.m-pesa.com
  • Path: /static/js/2.f57ac0ad.chunk.js
  • Port: 443
  • Status Code: 200
  • Title: None
  • Content-Type: application/javascript
  • Content-Length: 3443125
  • First snapshot: 1 year, 4 months ago
  • Latest snapshot: 1 year, 4 months ago
Page 1 of 1