Skip to main content

Is cphi-online.com a Scam? Security Check Results - Informa Markets Reviews

cphi-online.com favicon

Is cphi-online.com Safe? Security Analysis for Informa Markets

Check if cphi-online.com is a scam or legitimate. Free security scan and reviews.

HealthcareN/aenterprise
JavaScriptjQuery 3.6.0Google Tag ManagerGoogle AnalyticsFacebook Pixel+6 more
Analyzed 8/1/2025Completed 10:49:40 PM
58
Security Score
MEDIUM RISK

AI Summary

CPHI Online is a professionally operated global marketplace platform focused on the pharmaceutical ingredients industry, connecting suppliers, buyers, and industry professionals. It is managed by Informa Markets, a reputable enterprise in the events and information sector. The website offers a comprehensive product database, supplier directories, industry news, and event information, positioning itself as a leading resource in its niche. Technically, the site employs modern JavaScript libraries, tracking and analytics tools, and is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies could be improved. The absence of WHOIS data is a notable gap but likely due to privacy or registry limitations rather than malicious intent. Overall, the site is trustworthy, professional, and compliant with privacy regulations.

Detected Technologies

JavaScriptjQuery 3.6.0Google Tag ManagerGoogle AnalyticsFacebook PixelFullStoryLinkedIn Insight TagTranscend Cookie ConsentModernizrBootstrap CSSAwesomplete

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The platform serves pharmaceutical professionals globally, offering a marketplace and information hub. Its business model revolves around connecting suppliers and buyers, supported by advertising and event promotion. The parent company, Informa Markets, lends credibility and scale. The site leverages multiple third-party analytics and advertising services to optimize marketing and user engagement. Growth potential is supported by extensive product listings and supplier participation. The lack of direct contact information on the site suggests a focus on digital self-service and lead generation rather than direct sales. Strategic partnerships and parent company backing strengthen market position.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

g*****@fisvi.com

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a mature security posture with HTTPS and cookie consent compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, representing an area for enhancement. No exposed sensitive data or vulnerable libraries were detected in the HTML content. The site lacks a published security policy or incident response contact, which could improve transparency and trust. The extensive use of third-party tracking scripts increases the attack surface and privacy considerations. Overall, the security posture is good but could benefit from formalized policies and additional header protections.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement comprehensive security headers including CSP, X-Frame-Options, and X-Content-Type-Options.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Informa Markets

Description:

CPHI Online is the largest global marketplace in the pharma ingredients industry, connecting pharmaceutical professionals with suppliers, products, and industry news.

Key Services:
product database searchsupplier directoryindustry newspharmaceutical conferences and events
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
JavaScriptjQuery 3.6.0Google Tag ManagerGoogle AnalyticsFacebook PixelFullStoryLinkedIn Insight TagTranscend Cookie ConsentModernizrBootstrap CSSAwesomplete
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
80/100
Best Practices:
  • HTTPS enforced
  • Cookie consent implemented
  • No exposed sensitive data in HTML
  • Use of hashed email in tracking scripts

Analytics & Tracking

Services:
Google AnalyticsFullStoryLinkedIn InsightFacebook Pixel
Tracking Level:extensive
Privacy Compliance:good

Advertising & Marketing

Ad Networks:
Google Ad Manager
Tracking Pixels:
Facebook PixelLinkedIn InsightFullStory
Marketing Tools:
Awesomplete
Transparency Level:good

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is a professional pharma industry marketplace operated by Informa Markets

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

0/100
Score
Analysis failed - content could not be retrieved

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

70/100
Score

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

GDPR Compliance Analysis

Privacy Policy85% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

0/100
Score
Analysis failed - content could not be retrieved

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

60/100
Score

Complex SPF record

LOW

Too many include statements can cause lookup limits

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

DMARC Partial Enforcement

LOW

DMARC only applies to 5% of messages

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:spf.protection.outlook.com include:us._netblocks.mimecast.com include:eu._netblocks.mimecast.com include:mailgun.org include:sendgrid.net -all
DNS Lookups:5/10
Policy:-all
DMARC Details
Policy:quarantine(5% enforcement)
Aggregate Reports:1ecfd3b0388748eb9d83cba2b5d5702e@dmarc-reports.cloudflare.net

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

75/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 33 days

Weak SSL Key Length

HIGH

SSL certificate uses 256-bit key, which is considered weak

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:www.cphi-online.com
Issuer:WE1
Valid Until:9/4/2025 (33 days)
SANs:www.cphi-online.com

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

85/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Registration Details

Domain Age
15 years(mature)
Expiry Risk
low(272 days)
Protection Level
strongDNSSEC OFF

DNS Records

A Records:172.64.155.231, 104.18.32.25
AAAA Records:2606:4700:4400::ac40:9be7, 2606:4700:4400::6812:2019
Name Servers:
nick.ns.cloudflare.com
vera.ns.cloudflare.com
MX Records:
10: us-smtp-inbound-1.mimecast.com
10: us-smtp-inbound-2.mimecast.com
SOA:Serial: 2379021164, TTL: 1800s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:76ms

SPF Analysis

SPF Record:
v=spf1 include:spf.protection.outlook.com include:us._netblocks.mimecast.com include:eu._netblocks.mimecast.com include:mailgun.org include:sendgrid.net -all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website uses a modern JavaScript stack including jQuery 3.6.0, Modernizr, and Bootstrap for responsive design. It integrates multiple analytics and marketing tools such as Google Tag Manager, Google Analytics, Facebook Pixel, LinkedIn Insight, and FullStory. The site loads asynchronously and defers scripts to optimize performance, achieving moderate loading speeds. SEO is supported by structured data (JSON-LD) describing the organization and website. Mobile optimization is good with responsive CSS and viewport settings. No CMS is explicitly detected, suggesting a custom or proprietary platform. Hosting provider details are not disclosed. Technical risks include reliance on multiple third-party scripts and missing some security headers.
Analyze Another Website