Phosagro.com is the official site of PhosAgro, a major Russian fertilizer producer with a domain dating back to 2005. The site has a clean history — no blacklists, no malware reports, and 19 years of web archive records. However, the SSL certificate has expired, which means any data sent to or from the site is not encrypted. That's a serious concern for a company of this scale. While the site is almost certainly not a scam, the broken security is unusual for a legitimate corporate website. Most established companies keep their certificates up to date. If you need to contact PhosAgro, use the phone number listed on the homepage. Check back after the certificate is renewed, or verify the company's contact details through other official channels.
In plain English
Phosagro.com is the website of a real, long-established Russian fertilizer company. The biggest problem is an expired SSL certificate that makes the site unreachable through a secure connection — a technical failure that should be fixed immediately. While the site's history and reputation are clean, the broken security and limited visibility into contact pages mean you should treat it with caution until the certificate is renewed.
Where the score comes from
The SSL certificate has expired, making the site unreachable via HTTPS. For a company of this size, an expired certificate is a serious oversight that undermines trust.
The domain has been registered for 21 years and matches the company name, which is a strong positive. The site does not prominently display its legal entity details, but this is common for Russian companies and not a major concern.
Clean reputation: no blacklists, 19 years of web archive history, and no malware flags. This is consistent with a legitimate long-standing business.
A customer support phone number is visible on the homepage, but the site's JavaScript-heavy design prevented us from verifying a full contact page or social media links. This is a minor gap for a corporate site.
No privacy policy or terms of service pages were detected, though the site's client-rendered architecture may hide them. For a non-EU, non-consumer-facing company, this is not a major red flag.
Basic infrastructure is solid: DNS resolves, email authentication is configured, and the site loads quickly. The lack of DNSSEC is a minor weakness, but the bigger issue is the expired SSL certificate already covered.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →