Deep SSL Test Report: mcit.gov.af

 Start 2026-03-09 09:28:03        -->> 103.132.98.226:443 (mcit.gov.af) <<--

 rDNS (103.132.98.226):  moe.gov.af. hds.gov.af. arcs.af. pulekhumri-m.gov.af.
                         ago.gov.af. nixa.af. dhei.edu.af. ai.nic.af.
                         anastu.edu.af. lu.edu.af. farah-m.gov.af.
                         maymana-m.gov.af. molsa.gov.af. sheberghan-m.gov.af.
                         zabu.edu.af. beyhaqi.moic.gov.af. supremecourt.gov.af.
                         mobta.gov.af. kdru.edu.af. tu.edu.af. dab.gov.af.
                         old.mohe.gov.af. mrrd.gov.af. moic.gov.af. spu.edu.af.
                         momp.gov.af. smgu.edu.af. aic.moic.gov.af. jam.edu.af.
                         opa.gov.af. afghanpost.gov.af. mohia.gov.af.
                         arzaq.gov.af. bcvo.gov.af. webmail.moph.gov.af.
                         ict.keu.edu.af. jalalabad-m.gov.af. szu.edu.af.
                         ghru.edu.af. ku.edu.af. ansa.gov.af. ba.edu.af.
                         hu.edu.af. nu.edu.af. parwan.edu.af. iabhj.edu.af.
                         farau.edu.af. andma.gov.af. kunduz-m.gov.af.
                         mot.gov.af. test.supremecourt.gov.af. nvaec.gov.af.
                         abimj.edu.af. pjru.edu.af. moj.gov.af.
                         gdsoc.gov.af.gdsoc.gov.af. ara.gov.af. moec.gov.af.
                         statistic.supremecourt.gov.af. mazar-m.gov.af.
                         milliebus.gov.af. kpu.edu.af. afda.gov.af.
                         logu.edu.af. jobs.supremecourt.gov.af. pktku.edu.af.
                         firouzkoh-m.gov.af. asa.gov.af. ato.gov.af.
                         tveta.gov.af. anic.gov.af. iqisj.edu.af. qaad.edu.af.
                         basu.edu.af. kundoz.edu.af. mcit.gov.af. aiiu.edu.af.
                         teug.edu.af. iayj.edu.af. mail.gov.af. nimu.edu.af.
                         mopw.gov.af. au.edu.af. helu.edu.af. nic.af.
                         badakhshan.edu.af. mudl.gov.af. mopvpe.gov.af.
                         baghlan.edu.af. sjau.edu.af. mmd.gov.af. immj.edu.af.
                         its.gov.af. scloud.andc.gov.af. urzu.edu.af.
                         acjc.gov.af. jin.edu.af. afgnic.af. jamiat.gov.af.
                         onlinerecruitment.momp.gov.af. kums.edu.af.
                         esrj.ku.edu.af. charikar-m.gov.af. nuristan.edu.af.
                         faryab.edu.af. herat-m.gov.af. www.mcit.gov.af.
                         ju.edu.af. moph.gov.af. sao.gov.af. wu.edu.af.
                         pu.edu.af. gemstones.momp.gov.af. bu.edu.af.
                         mudh.gov.af. morr.gov.af. jobs.momp.gov.af.
                         journal.nu.edu.af. mew.gov.af. gdpes.gov.af.
                         alhj.edu.af. andc.gov.af. kandahar-m.gov.af.
                         onlineform.momp.gov.af. www.molsa.gov.af.
                         agriconference.ku.edu.af. anea.gov.af. keu.edu.af.
                         gdm.gov.af. gu.edu.af. apc.gov.af. marafat.keu.edu.af.
                         dpmea.gov.af. mehterlam.gov.af. aiu.edu.af.
                         apra.gov.af.
 Service detected:       HTTP

 Testing for server implementation bugs 

 No bugs found.

 Testing HTTP header response @ "/" 

 HTTP Status Code             200 OK
 HTTP clock skew              -1 sec from localtime
 Strict Transport Security    not offered
 Public Key Pinning           --
 Server banner                Apache/2.4.62 (Unix) OpenSSL/1.1.1k
 Application banner           X-Powered-By: PHP/7.3.1
 Cookie(s)                    (none issued at "/")
 Security headers             X-Frame-Options: SAMEORIGIN
                              X-Content-Type-Options: nosniff
                              X-UA-Compatible: IE=edge
                              Cache-Control: max-age=10800, public
 Reverse Proxy banner         --


 Testing vulnerabilities 

 Secure Renegotiation (RFC 5746)           supported (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    potentially NOT ok, "gzip" HTTP compression detected. - only supplied "/" tested
                                           Can be ignored for static pages or if no secrets in the page
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              No fallback possible (OK), no protocol below TLS 1.2 offered
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           no RSA certificate, thus certificate can't be used with SSLv2 elsewhere
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no DH key detected with <= TLS 1.2
 BEAST (CVE-2011-3389)                     not vulnerable (OK), no SSL3 or TLS1
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses obsolete cipher block chaining ciphers with TLS, see server prefs.
 Winshock (CVE-2014-6321), experimental    not vulnerable (OK)
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Done 2026-03-09 09:29:48 [ 119s] -->> 103.132.98.226:443 (mcit.gov.af) <<--