Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
What's spoton.it?
- Thread starter zamboknee
- Start date
- Sort by reaction score
I also have been getting them the past two days on my iPhone 11 Pro and my iPad. No clue what it is...hoping to get an answer as well
Same here. Hopefully someone can shed some light on what it is. I’ve searched my iPhone and the server and it’s not showing up on my phone.
That domain is a parked domain. It has an expired SSL certificate which is why you're seeing that popup. I would have to guess it's some spam/scam email or webpage you're viewing that is trying to display content from that domain.
Code:
❯ openssl s_client -showcerts -connect spoton.it:443 ─╯
CONNECTED(00000005)
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
verify return:1
depth=0 OU = Domain Control Validated, OU = Globe Standard Free SSL, CN = spoton.it
verify error:num=10:certificate has expired
notAfter=Feb 14 23:59:59 2020 GMT
verify return:1
depth=0 OU = Domain Control Validated, OU = Globe Standard Free SSL, CN = spoton.it
notAfter=Feb 14 23:59:59 2020 GMT
verify return:1
---
Certificate chain
0 s:OU = Domain Control Validated, OU = Globe Standard Free SSL, CN = spoton.it
i:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgIRALEC3AqCHZJTmT2Q0f4mQuEwDQYJKoZIhvcNAQELBQAw
gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE
AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0xOTExMTYwMDAwMDBaFw0yMDAyMTQyMzU5NTlaMFkxITAfBgNVBAsTGERv
bWFpbiBDb250cm9sIFZhbGlkYXRlZDEgMB4GA1UECxMXR2xvYmUgU3RhbmRhcmQg
RnJlZSBTU0wxEjAQBgNVBAMTCXNwb3Rvbi5pdDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALF11AIbcvAY33vMdG+iYe693NJAWnA4vGAObVwH2Ej//Kjx
XUcmqQOhkMMzDpe2QJ+t8OYoEt/qJMnGu88rdKynZ/Ib2DMU5aQ7+pR3EAGrwKbS
tJTtJrYsy7EO2rRxZJppoJVqZYfvxplAZ9IE0erdyrViJHnZbIazyNsGBNRyVd4I
BnH86nuV7mPizqKDD5nq0XlZpby+nuMJEmyJXea4O1ebr3DbGtjXKm85wB804DjF
XjO9ZBBh51iGSY+R0K1dveVO+KTqjqho37vaIzSItMKz4i48zgxI+JkZTFoXnqW3
Q9Dx9QMoBkkDeeD/TS1NllAbOGsLvITa6BgAZosCAwEAAaOCAoAwggJ8MB8GA1Ud
IwQYMBaAFI2MXsRUrYrhd+mb+ZsF4bgBjWHhMB0GA1UdDgQWBBRgc4NTD3G/TI2l
Aidt5UJJYazyijAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQIC
BzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwB
AgEwgYQGCCsGAQUFBwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0
aWdvLmNvbS9TZWN0aWdvUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNB
LmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wIwYDVR0R
BBwwGoIJc3BvdG9uLml0gg13d3cuc3BvdG9uLml0MIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFuc8LN
SQAABAMARzBFAiEAxE/rSH4JKS7zqvGOwO2EZkXZsiiIwjqVJbmQqxekU7kCICy9
LwFLj+jSTIKHILdALGEzjUBnGlB46TL+ZtDGdhu/AHYAXqdz+d9WwOe1Nkh90Eng
MnqRmgyEoRIShBh1loFxRVgAAAFuc8LTFgAABAMARzBFAiEApv3Q1Fn4QlK+y2hM
1o19UUfWtxczM/rmzsrbTOR32UECIAaPnJhI0M5cTJXNayi6ivmReno+3jvcNbnc
HiVptXWPMA0GCSqGSIb3DQEBCwUAA4IBAQAo/SA0GogarVSfv1pOJyUAJvl9dlBR
dXcpzmAmbtUMoZJmUJMnBwNS4JBuiOQ5gKbyB8pMtohJ8wkE2lNyj1BMbN5/HdM7
BCbEMsa4LyMe5me5xqHb5gSodDilVy5NlP9ad+UkXqmAtVJZRmw9gurB0UdnS8Lb
RLiHwTUcZ0VK2v6R2zgENFlb6k09yC2OpspiCpxF5YpqDnYezVUkqjfX5d2DtWph
W9aMIoD+qAycppSZXww0U646mqwbkEJYAbIiogL37rfLSLhb7hWMtV5EhyJABodn
28gOtUAcE1atn7HHvA0eyqFYf/VSx9/YMe47Iq5yDewiAKaxpezAYrBM
-----END CERTIFICATE-----
1 s:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2 s:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
i:C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN = AddTrust External CA Root
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgIQE+oocFv07O0MNmMJgGFDNjANBgkqhkiG9w0BAQwFADBv
MQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFk
ZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBF
eHRlcm5hbCBDQSBSb290MB4XDTAwMDUzMDEwNDgzOFoXDTIwMDUzMDEwNDgzOFow
gYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK
ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYD
VQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sIs9CsVw127c0n00yt
UINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnGvDoZtF+mvX2do2NC
tnbyqTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQIjy8/hPwhxR79uQf
jtTkUcYRZ0YIUcuGFFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfbIWax1Jt4A8BQOujM
8Ny8nkz+rwWWNR9XWrf/zvk9tyy29lTdyOcSOk2uTIq3XJq0tyA9yn8iNK5+O2hm
AUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnHa4xgk97Exwzf4TKuzJM7UXiV
Z4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNVicQNwZNUMBkTrNN9
N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5D9kCnusSTJV882sF
qV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJWBp/kjbmUZIO8yZ9
HE0XvMnsQybQv0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ5lhCLkMaTLTwJUdZ
+gQek9QmRkpQgbLevni3/GcV4clXhB4PY9bpYrrWX1Uu6lzGKAgEJTm4Diup8kyX
HAc/DVL17e8vgg8CAwEAAaOB9DCB8TAfBgNVHSMEGDAWgBStvZh6NLQm9/rEJlTv
A73gJMtUGjAdBgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rIDZsswDgYDVR0PAQH/
BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0gBAowCDAGBgRVHSAAMEQGA1Ud
HwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9BZGRUcnVzdEV4
dGVybmFsQ0FSb290LmNybDA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0
dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggEBAJNl9jeD
lQ9ew4IcH9Z35zyKwKoJ8OkLJvHgwmp1ocd5yblSYMgpEg7wrQPWCcR23+WmgZWn
RtqCV6mVksW2jwMibDN3wXsyF24HzloUQToFJBv2FAY7qCUkDrvMKnXduXBBP3zQ
YzYhBx9G/2CkkeFnvN4ffhkUyWNnkepnB2u0j4vAbkN9w6GAbLIevFOFfdyQoaS8
Le9Gclc1Bb+7RrtubTeZtv8jkpHGbkD4jylW6l/VXxRTrPBPYer3IsynVgviuDQf
Jtl7GQVoP7o81DgGotPmjw7jtHFtQELFhLRAlSv0ZaBIefYdgWOWnU914Ph85I6p
0fKtirOMxyHNwu8=
-----END CERTIFICATE-----
---
Server certificate
subject=OU = Domain Control Validated, OU = Globe Standard Free SSL, CN = spoton.it
issuer=C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: ECDH, P-521, 521 bits
---
SSL handshake has read 5236 bytes and written 787 bytes
Verification error: certificate has expired
---
New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 10 (certificate has expired)
---
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
Protocol : TLSv1.3
Cipher : TLS_AES_128_GCM_SHA256
Session-ID: B5623BC7890CEB501474CE415707E5CC37866E52D7BEC899EBE53981D466EF21
Session-ID-ctx:
Resumption PSK: DB597913A7AC675A8C3516D33E82E5DAA96CF4F9D41E44263BA196D575AAA059
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 604800 (seconds)
TLS session ticket:
0000 - 6b b5 7f a6 23 ff eb c2-57 54 78 6f 68 49 f5 e9 k...#...WTxohI..
0010 - 45 8a 44 10 63 47 ba 99-11 59 33 b2 1e 84 b3 fd E.D.cG...Y3.....
0020 - e5 36 07 eb 1e 8d 34 a3-cc 0f e5 6f 0c 02 5e 35 .6....4....o..^5
0030 - 2e 9c 78 14 1f bc b1 5c-ac 17 c8 74 09 d2 47 85 ..x....\...t..G.
0040 - 0e cf 35 1e 7a bb 19 24-5e 67 e6 87 be 75 ae 0e ..5.z..$^g...u..
0050 - 64 07 2d 1f d3 f0 17 ba-32 fa 5d 1f 33 1d d5 56 d.-.....2.].3..V
0060 - 25 fb 02 dd 48 29 3d d1-a3 6c 04 64 c3 25 f6 26 %...H)=..l.d.%.&
0070 - 97 .
Start Time: 1608090669
Timeout : 7200 (sec)
Verify return code: 10 (certificate has expired)
Extended master secret: no
Max Early Data: 0
---Fascinating, tell me more. Would simply restarting my device knock its out? How might we remedy?
as FuturePilot said, its a misconfigured website. A quick search on google returned an article from PRNewswire (https://www.prnewswire.com/news-rel...funding-and-rebrands-as-stanza-300063202.html) that it used to be an add-to-calendar application.
Now called Stanza, something happened a few days ago that must be using their old url and the expired certificate. They seem to focus on sports schedules, so I would check your calendar application to see if you have a sports team schedule synced (e.g. NBA, NFL, MLB, EPL, college football team). If so, try removing that from your calendar.
Now called Stanza, something happened a few days ago that must be using their old url and the expired certificate. They seem to focus on sports schedules, so I would check your calendar application to see if you have a sports team schedule synced (e.g. NBA, NFL, MLB, EPL, college football team). If so, try removing that from your calendar.
I’m wondering the certificate has something to do with VPN access or something else I allowed at work so I could access the network.
So I did some digging and it looks like spoton.it is some sort of gmail calendar extension? I have one gmail calendar synced so i turned it off and haven’t gotten the message since...again, not sure if that’s correct or anything, but so far I’m about 24 hours in with no message pop up
Thanks, I went into my calendar, and took off an old “NHL Montréal Canadiens” calendar and this seems to have stopped it for now. I will post again if it comes back.
I also started getting it yesterday. I found this article from 2013:
mashable.com
Still trying to figure out if/where I signed up.
SpotOn.It Analyzes Your Google Calendar to Improve Your Social Life
SpotOn.It Analyzes Your Google Calendar to Improve Your Social Life
Still trying to figure out if/where I signed up.
Lol yeah mine was the Ohio State Buckeyes football calendar that was causing my issue
Thanks for the pointer to Calendar! These popups were very concerning without context.
Maddeningly, iOS doesn't let you see the calendar subscription url. You can see it on macOS though, so you can see specifically what was the problem. Note the ⚠️ next to the problematic calendar.
Maddeningly, iOS doesn't let you see the calendar subscription url. You can see it on macOS though, so you can see specifically what was the problem. Note the ⚠️ next to the problematic calendar.
