Guest session
Check Detail

epmis.gov.bd · DNS

Passed Grade A
100.0%
Hostname epmis.gov.bd
Check name DNS
last run 01/02/2026 05:02
Result
Incomplete Grade C 70.5%

Result Detail

DNS
Host Type Answer TTL
103.40.82.203 —

Result Detail

HEADER
Alerts
  • Strict-Transport-Security: Strict-Transport-Security missing
  • Content-Security-Policy: Content-Security-Policy missing
  • X-Content-Type-Options: Header missing
  • X-Frame-Options: Header missing
  • Referrer-Policy: Header missing
  • Permissions-Policy: Permissions-Policy missing
  • Cross-Origin-Opener-Policy: Header missing
  • Cross-Origin-Embedder-Policy: Header missing
  • Cross-Origin-Resource-Policy: Header missing
  • Cache-Control: Cache-Control missing restrictive directives
  • Expect-CT: Expect-CT missing
  • X-Permitted-Cross-Domain-Policies: Header missing
  • Access-Control-Allow-Origin: Access-Control-Allow-Origin missing
  • Server: Sensitive header exposed
  • Origin-Agent-Cluster: Header missing
Normalized headers
date Sun, 01 Feb 2026 04:02:39 GMT
server Apache
last-modified Mon, 26 Jan 2026 09:09:06 GMT
etag "26c1-64946dbe4b080"
accept-ranges bytes
content-length 9921
vary Accept-Encoding
content-type text/html
set-cookie BIGipServerTest_EPMIS_Pool_HTTPS_433=587869706.47873.0000; path=/; Httponly; Secure
Transport
Check name Status Actual Expected Detail Severity Recommendation
Strict-Transport-Security ❌ Missing max-age>=15768000; includeSubDomains; preload Strict-Transport-Security missing Critical Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Expect-CT ❌ Missing enforce; max-age>=86400 Expect-CT missing Medium Expect-CT: enforce, max-age=86400, report-uri="https://report.example.com"
Content Security
Check name Status Actual Expected Detail Severity Recommendation
Content-Security-Policy ❌ Missing default-src 'self'; frame-ancestors 'none' Content-Security-Policy missing Critical Content-Security-Policy: default-src 'self'; frame-ancestors 'none'
MIME
Check name Status Actual Expected Detail Severity Recommendation
X-Content-Type-Options ❌ Missing nosniff Header missing High X-Content-Type-Options: nosniff
Framing
Check name Status Actual Expected Detail Severity Recommendation
X-Frame-Options ❌ Missing DENY or SAMEORIGIN Header missing High X-Frame-Options: DENY
Privacy
Check name Status Actual Expected Detail Severity Recommendation
Referrer-Policy ❌ Missing strict-origin-when-cross-origin / same-origin Header missing Medium Referrer-Policy: strict-origin-when-cross-origin
Browser Features
Check name Status Actual Expected Detail Severity Recommendation
Permissions-Policy ❌ Missing camera=(); geolocation=(); microphone=() Permissions-Policy missing Medium Permissions-Policy: camera=(), geolocation=(), microphone=()
Cross-Origin
Check name Status Actual Expected Detail Severity Recommendation
Cross-Origin-Opener-Policy ❌ Missing same-origin Header missing High Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Embedder-Policy ❌ Missing require-corp Header missing High Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Resource-Policy ❌ Missing same-origin Header missing Medium Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster ❌ Missing ?1 Header missing Low Origin-Agent-Cluster: ?1
Caching
Check name Status Actual Expected Detail Severity Recommendation
Cache-Control ❌ Missing no-store, private, max-age=0 Cache-Control missing restrictive directives High Cache-Control: no-store, private, max-age=0
Legacy
Check name Status Actual Expected Detail Severity Recommendation
X-Permitted-Cross-Domain-Policies ❌ Missing none Header missing Low X-Permitted-Cross-Domain-Policies: none
CORS
Check name Status Actual Expected Detail Severity Recommendation
Access-Control-Allow-Origin ❌ Missing Scoped origin (no wildcard) Access-Control-Allow-Origin missing Medium Access-Control-Allow-Origin: https://app.example.com
Information Disclosure
Check name Status Actual Expected Detail Severity Recommendation
Server ❌ Missing Apache Header removed or generic Sensitive header exposed High Remove Server header or set to a generic token
X-Powered-By ✅ Passed Header removed Header not exposed High Remove X-Powered-By header
X-AspNet-Version ✅ Passed Header removed Header not exposed Medium Remove framework version headers
Raw headers
HTTP/1.1 200 OK
Date: Sun, 01 Feb 2026 04:02:39 GMT
Server: Apache
Last-Modified: Mon, 26 Jan 2026 09:09:06 GMT
ETag: "26c1-64946dbe4b080"
Accept-Ranges: bytes
Content-Length: 9921
Vary: Accept-Encoding
Content-Type: text/html
Set-Cookie: BIGipServerTest_EPMIS_Pool_HTTPS_433=587869706.47873.0000; path=/; Httponly; Secure

Result Detail

SSL
Check name Status Value
certificate chain is complete ✅ Passed 5
root CA is trusted ✅ Passed Trusted
cert valid for ✅ Passed 224
chain certs are valid until ✅ Passed 13.09.2026
CN matches Domainname ✅ Passed epmis.gov.bd
certificate subject ✅ Passed CN=*.epmis.gov.bd
certificate issuer ✅ Passed C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36
signature algorithm ✅ Passed RSA-SHA256
TLS protocol ✅ Passed TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
Subject Alternative Names ✅ Passed *.epmis.gov.bd, epmis.gov.bd
Public Key ✅ Passed RSA 2048
Certificate chain
# Common name Issuer Valid until CA
0 *.epmis.gov.bd C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36 13.09.2026 01:59:59 No
1 *.epmis.gov.bd C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36 13.09.2026 01:59:59 No
2 Sectigo Public Server Authentication CA DV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 22.03.2036 00:59:59 Yes
3 Sectigo Public Server Authentication Root R46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority 19.01.2038 00:59:59 Yes
4 USERTrust RSA Certification Authority C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority 19.01.2038 00:59:59 Yes
TLS details
Negotiated protocol TLSv1.2
Cipher suite ECDHE-RSA-AES128-GCM-SHA256 (128 bit)
Cipher version TLSv1.2
Perfect Forward Secrecy OK
Earliest chain expiry 13.09.2026 01:59
Fingerprints
SHA-256 1D:56:00:19:BC:D5:EB:08:9B:33:F2:88:5B:B4:C3:70:F1:B7:37:B6:7C:9F:BF:1B:9D:30:1F:7B:0A:D7:4A:23
SHA-1 D4:17:B9:14:E5:17:2B:73:63:68:D3:3B:A2:EB:F4:65:1C:2F:CC:DC
Revocation
OCSP URLs
http://ocsp.sectigo.com
CRL URLs
—
Issuer URLs (AIA)
http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt
OCSP Must-Staple No
Trust evaluation

Attempted: Yes

Trusted: Yes

OpenSSL diagnostic command
openssl s_client -connect epmis.gov.bd:443 -servername epmis.gov.bd

Result Detail

WAF
Sign up to use!
Ownership verification required

Real WAF results become available after signing up. Until then we show you a small teaser from the imagination department.

  • Shield level Mythisch
  • Watchers Gremlins im Standby
  • Last attack Story folgt nach Registrierung
← Back to list
We only use technically necessary cookies. Technically necessary cookies are mandatory for the operation of our website. If you continue to use this site we will assume that you are happy with it.