Verdict
eprocure.gov.bd appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Official Bangladesh government e-GP portal (Bangladesh Public Procurement Authority) for electronic procurement, tenders, e-contracts, and related resources and guidelines. Provides user registration, helpdesk, and downloadable documents; supported by World Bank and government bodies. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 15 years oldRegistered history | Clear |
| Web archive | Archived since 2011400 snapshots | Clear |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
The page as captured
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2011.
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Overview
This website is Bangladesh’s national e-Government Procurement (e-GP) portal, presenting electronic tenders, annual procurement plans, e-contracts, procurement guidance, user registration, helpdesk support, and related public-sector resources. Its apparent purpose is to support government procurement and contract-management activities through a public-service platform administered by the Bangladesh Public Procurement Authority (BPPA).
Scam/Impersonation Risk
No contradictions were observed across the site’s identity, content, historical, and reputation signals: there were no findings of phishing, brand impersonation, malicious activity, or suspicious page content. The homepage clearly presents a government procurement function, with navigation for tenders, contracts, registration, guidelines, and BPPA-related resources, rather than a concealed commercial or speculative business model. Automated interaction testing did detect hidden form elements associated with the login workflow, including password-form elements, but found no external password submission, suspicious inline scripts, cloaking, wallet activity, or external network activity. This is a technical observation requiring normal account-security awareness, not evidence of impersonation or compromise. The site also has a long-established and continuous web presence, a strong global traffic footprint, and clean results across the evaluated external reputation checks.
- The homepage identifies the service as the “National e-Government Procurement (e-GP) Portal of the Government of the People’s Republic of Bangladesh” and provides links to eTenders, eContracts, user registration, and helpdesk support.
- Domain continuity dates to 2011, with an established age of 15.18 years.
- Web archives record 400 snapshots spanning 2011–2026, covering 16 tracked years with a maximum observed gap of 1 year.
- The login workflow was observed with hidden form elements during automated testing; no external password forms or suspicious scripts were detected.
Regulatory Verification Notes
The site’s identity and purpose are consistent with a government procurement portal: the homepage and related About, Contact, and resource areas identify BPPA and describe public tendering, contract management, procurement guidelines, and registration requirements. No financial-services license or commercial registration number is claimed, which is consistent with the stated public-sector service model; any organization participating in procurement should nevertheless confirm the applicable institutional eligibility and registration requirements independently. The real-world operator identity is not independently verified by the available evidence, so the institutional attribution should be treated as apparent and evidence-consistent rather than proven. The site’s transport security provides additional technical support for an established service.
- The homepage and About content identify BPPA as the administering authority for Bangladesh’s national e-GP system.
- The site provides procurement guidelines, mandatory registration documents, information-security policy material, and helpdesk resources under its resources and support areas.
- TLS uses an OV certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 for Bangladesh Public Procurement Authority (BPPA), valid through 2027-01-14.
- The site was served through AS54253, ORCL-CHICAGO-PP — Oracle Corporation, US.
What to Verify Next
Before credential submission or consequential procurement activity, an organization should independently confirm BPPA’s institutional authority and the applicable procurement-registration requirements through official government channels. Account administrators should also compare the portal’s login, password-recovery, support, and document-download processes with independently sourced BPPA communications, and review the site’s published information-security and registration requirements before onboarding users.
- The site publishes Contact Us, Help Desk Support, registration-flow, and registration-manual resources for comparison with independently sourced institutional information.
- The site provides an Information Security Policy and Mandatory Registration Documents within its resources area.
- The site’s stated functions are procurement tendering, contract management, registration, and public-sector reporting rather than commercial sales.
Summary Verdict
The available evidence supports a high-trust, low-risk posture consistent with an established, apparently legitimate government public-service website. The trust conclusion is well supported by converging content, historical, technical, and reputation signals, while the independent connection to the real-world operator remains unconfirmed.
Infrastructure Integrity
The site resolves to one identified likely origin address, with no CDN or WAF detected and no separate edge-IP layer observed. Hosting on Oracle’s public-cloud infrastructure provides an identifiable technical context and is a modest mitigating signal, but infrastructure characteristics alone do not establish institutional identity.
- Resolved hosting infrastructure: 1 unique IP, 0 detected edge IPs, and 1 likely origin IP.
- Hosted on AS54253, ORCL-CHICAGO-PP — Oracle Corporation, US.
- The hosting country is recorded as the United States, with ARIN as the registry.
Closing Assessment
Normal browsing and ordinary portal use are proportionate to the available evidence; before credential or payment-related interactions, ordinary independent checks of institutional identity, applicable terms, and available payment protections should be completed.
Written analysis generated 2026-08-17 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 55/100 |
| Identity verification confidence | 60% |
- Identity verified on page
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of eprocure.gov.bd.
- The request stayed on eprocure.gov.bd. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2011-06-13. Clear
- It is hosted on ORCL-CHICAGO-PP, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | ORCL-CHICAGO-PP - Oracle Corporation, US |
| Country | US |
| Server IP | 131.186.50.80 |
| Name servers | Not available |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-01-14 |
| Domain age | 15.18 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2011-06-13 |
| Archive snapshots | 400 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about eprocure.gov.bd at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.