Strategic Security, Inc. © http://www.strategicsec.com/
Open Source INTelligenc INTelligence e (OSINT) Report for Innophos.com
EXECUTIVE SUMMARY Open Open Sour Source ce Intel Intelli ligen gence ce (OSINT (OSINT)) invo involve lves s fndi fnding ng,, select selectin ing, g, and and acquiring inormation rom publicly available sources and analyzing it to produce actionable intelligence !earn Security Online, Inc perormed independent OSINT gat"ering or Innop"os #oldings, Inc and its subsidiaries T"e ob$ectives ob$ectives o t"e inormation gat"ering %ere to& •
•
'ind, select and acquire inormation rom publicly available sources and analyze it to produce actionable intelligence Identiying relevant and reliable sources rom t"e vast amount o publicly available inormation t"at could lead to eposure and or compromise o company net%ors, assets or "uman capital
*resence o inormation in t"is report, in general, is neit"er positive nor nega negati tive ve It is mer merely ely an atte attemp mptt to list list some some o t"e t"e ino inorm rmat atio ion n available via Open Source +et"ods about t"e client organization t"at %ould be discoverable by anot"er individual or t"ird party
1
Strategic Security, Inc. © http://www.strategicsec.com/
Company Information & Reputation It is important or an organization to be abreast o t"e inormation about itsel available on t"e Internet I alse or derogatory inormation is being publis"ed t"e organization needs to be a%are o t"is as t"is could adv adverse erselly aec aectt busin siness, ss, trust, st, or repu eputati ation or or t"e organization
Innophos Holdings Inc. *rincipal -ecutive O.ces /01 *rospect *lains 2oad 3uilding 4 5ranbury, Ne% 6ersey 7809/ *"one& (:71) ;10;10 'a& a& (:71 (:71)< )<8: 8:7< 7<79 79=8 =8 *O 3o 8777 5ranbury, N6, 7809/<8777
Company !ission"#urpose Innop"os (N>S?>@& I*#S) is one o t"e leading Nort" >merican manuacturers o specialty p"osp"ates, serving a diverse range o customers across multiple applications, geograp"ies, and c"annels T"e company company oers oers a broad broad suite o products products used in in a %ide variety variety o ood and beverage, consumer products, p"armaceutical and industrial applications T"e companyAs maret
2
Strategic Security, Inc. © http://www.strategicsec.com/
3
Strategic Security, Inc. © http://www.strategicsec.com/
Organi$ational Structure
"ttp&BB%%%innop"oscomBenBabout
4
Strategic Security, Inc. © http://www.strategicsec.com/
%ocations Innop"osC "eadquarters are located in 5ranbury, Ne% 6ersey, %it" manuacturing acilities strategically located t"roug"out t"e Dnited States, 5anada, and +eico Ee operate seven acilities %"ic" manuacture t"ree main product lines& Specialty Salts and Specialty >cids, *urifed *"osp"oric >cid, and ST** F Ot"er *roducts T"e largest manuacturing acility is located in 5oatzacoalcos, +eico T"ey operate our medium
ll t"e acilities listed above are o%ned %it" t"e eception o +ission #ills, +eico, %"ere t"e land is leased long +ississauga, Ontario !05 9G8 5anada
!e*ico City !+ 3osque de 5iruelos N98: *iso 3osques de las !omas +iguel #idalgo, ? ' 5* 99H77 +eico
!anufacturing & #lant Operations Innophos Inc. Chicago Heights ,ateray 9979 >rnold Street :9/ -ast 9=8t" Street 5"icago #eig"ts, Illinois :7;99 5"icago, I! :78/H Dnited States Dnited States 5
Strategic Security, Inc. © http://www.strategicsec.com/
*"one- H78
*"one& (HH=) ;:8=77
eismar 97897 #ig"%ay H0 4eismar, !> H7H=; Dnited States *"one& (//0) :H=<0:77
Nash/ille ;:77 5entennial 3lvd Nas"ville, Tennessee =H/71 Dnited States *"one& (:90) /:1<=;9;
Innophos 0osfatados de !1*ico S. de R.%. de C.2"Innophos !e*icana S.3. de C.2. Coat$acoalcos uana4uato (!ission Hills) Innop"os 'osatados de +eico m ;H0 >utopista 0H @ueretaro 97 5anada #hone- (170) /H7<1=/8 0a*- (170) 0::<1HH8
( Source: http://www.innophos.com/en/contact-us/contact-uslocations)
0inancial O/er/ie (s o! "ecem#er $%& ')
Company 5nancial performance in 6778 Net sales o J:::8 million compared to a record J1=;8 million or /778, %it" lo%er volume and mi accounting or most o t"e J/:87 million declineK Operating income o J9/:1 million compared to t"e pea o J/181 million or /778, %it" DS F 5anada ac"ieving a proft improvement and +eico do%n s"arply, due to lo%er selling prices and volumes, %it" t"e business signifcantly disadvantaged versus maret price ra% material costs in t"e periodK •
•
Strategic Security, Inc. © http://www.strategicsec.com/
•
• •
•
• •
Net Interest epense improvement o J971 million as a result o J9=:0 million o debt retirements in /771K Net income o J:=9 million or J/8H per s"are (diluted)K Net cas" rom operations o J9H;9 million %it" a net increase in cas" o JH9 millionK > /8L decrease in net %oring capital (current assets ecluding cas" minus current liabilities ecluding current portion o long< term debt) to J9;70 million at ?ecember =9, /771K 5apital ependitures o J91: millionK ?ividends o J:8 per s"are paid on t"e 5ommon Stoc
Net Sales Net sales or t"e year ended ?ecember =9, /771 %ere J:::8 million, a decrease o J/:87 million, or /8HL, as compared to J1=;8 million or t"e same period in /778 Selling price decreases "ad a negative impact on revenue o 71L or J8; million !o%er prices or 4TS* ertilizer cocid, %ere mostly oset by increased prices in Specialty Salts F Specialty >cids Golume and mi eects upon revenue "ad a negative eect o /H8L or J/01: million %"ic" occurred across all product lines and reporting segments, but most signifcantly in *urifed *"osp"oric >cid in +eico, %"ere Innop"osA largest customer reduced volumes due to a permanent s"utdo%n o t"eir largest ST** plant in t"e frst quarter o /771 ross #ro5t 4ross proft or t"e year ended ?ecember =9, /771 %as J91:7 million, a decrease o J9:8: million, or ;:/L, as compared to J=:;: million or t"e same period in /778 4ross margin decreased to /1;L or t"e year ended ?ecember =9, /771 versus =17L or t"e same period in /778 T"e c"ange in gross proft %as due to lo%er selling prices, %"ic" "ad a negative impact o J8; million, unavorable sales volume and mi impact upon revenue and "ig"er ra% material costs %"ic" "ad a combined unavorable impact o J9089 million >s a result o reduced operating rates and "ig"er ra% material costs or /771, t"e company incurred J9// million o reduced fed cost absorptions and unavorable inventory related variances In addition, t"e company too a c"arge o approimately JH7 million as a result o t"e settlement o t"e O5* arbitration matter and also too a c"arge o J9: million or +eican %ororce reduction costs
!
Strategic Security, Inc. © http://www.strategicsec.com/
Operating 9*penses and Research and :e/elopment Operating epenses in /771 consisted primarily o selling, general and administrative and researc" and development epenses Operating epenses or t"e year ended ?ecember =9, /771 %ere J:19 million, an increase o J=; million, or 0/L, as compared to J:0H million or /778 T"e c"ange in operating epenses %as due to an increase o J:; million or our -2* pro$ect, and J07 million increased legal epenses related to our O5* arbitration, partially oset by J/9 million lo%er legal and ot"er ees %"ic" %ere incurred in /778 to comply %it" t"e ?O6 ST** document request subpoena, J/0 million lo%er proessional ees used to support gro%t" and ot"er corporate initiatives, net J9H million lo%er postvailability and *ricing -nvironmental, *roduct 2egulations and Sustainability Initiative 5oncerns Increased 5osts and *ricing +ay >ccelerate Substitution o 5ompeting *roducts 5ompetitive 'actors Supplier 5ontract 5oncentration 5"anging Tec"nologies 2eliance on 2"odia International Operations *roduct !iability -posure *roduction 'acility Operating #azards Intellectual *roperty 2ig"ts 5ontingency *lanning • •
•
• • • • • • • • •
Recent Trends and Outloo; +anagement currently epects frst quarter /797 volumes (ecluding commodity ertilizer co
"
Strategic Security, Inc. © http://www.strategicsec.com/
Selling prices (ecluding 4TS*) in t"e frst quarter /797 are epected to decline sequentially at no more t"an :L 3eyond t"e frst quarter /797, management believes t"e correction related to t"e all in commodity prices in early /771 %ill "ave run its course, and t"at Innop"os %ill "ave ac"ieved an improvement in t"e margins o its DS and 5anadian businesses over t"is cycle T"e 5ompany epects a portion o its DS and 5anada ra% material cost structure to ad$ust do%n in t"e frst quarter /797 reMecting maret conditions at t"e beginning o t"e year #o%ever ot"er ra% materials, in particular sulur and ammonia are epected to increase in t"e quarter +aret prices or p"osp"ate ertilizers and 5"inese eports "ave also increased and %"ile it is di.cult to predict t"e sustainability o t"ese trends, Innop"os is also epecting to increase prices during t"e 9st quarter Specifcally or 4TS*, "ig"er prices s"ould allo% t"e business to mae a small proft on co
#
Strategic Security, Inc. © http://www.strategicsec.com/
Other Miscellaneous Corporate Information State o Incorporation& ?ela%are • •
• • • • • •
1$
I2S -mployer Identifcation No o Innop"os #oldings, Inc& /7<9=87H08 o Innop"os, Inc& /7<9=87H9/ >nnual revenues J::H million (' /771) Total assets& J::/ million (' /771) Nasdaq symbol& I*#S 'ormerly part o 2"odia, taen private by 3ain 5apital in /77; Innop"os I*O date& November /, /77: Innop"os "as approimately 9,977 employees t"roug"out Nort" >merica
Strategic Security, Inc. © http://www.strategicsec.com/
o' #ostings *roduction -ngineer < 5"icago #eig"ts, I! "ttp&BB%%%careerbuildercomB6obSeeerB6obsB6ob?etailsasp ipat"P-QIN?FsiteidPcbindeedF6obR?I?P6=I:Q6H7/QG?Q6:+HS
11
Strategic Security, Inc. © http://www.strategicsec.com/
-lectrical Instrumentation +aintenance Supervisor < 5"icago #eig"ts, I! "ttp&BB"ot$obsya"oocomB$ob< 61E-:1N8N0KRylcPQ=o?+T-%d4'9+$'o3'1T>z+0N$D+?+zN@2$Q@?T92I3#3$b/2l>zD%NT g7sourcePpartnerFscodeP0708;
Infrastructure 0ootprinting 12
Strategic Security, Inc. © http://www.strategicsec.com/
-very organization %it" an Internet presence must "ave some sort o Inrastructure to support t"at business Inrastructure 'ootprinting attempts to identiy t"at inormation T"is inormation can be interesting or& 4etting an idea o Innop"osA internet and geograp"ical presence ?iscover tec"nology used by t"e organization • •
Source:whois.domaintools.com/Innophos.com
13
Strategic Security, Inc. © http://www.strategicsec.com/
Critical Ser/ers Domain Name Server (DNS) Innop"oscom (Innop"os #omepage) is delegated to t"ree name servers, "o%ever one etra name server is listed in t"e zone T"e primary name server is nscibernet
14
Strategic Security, Inc. © http://www.strategicsec.com/
Mail Servers Incoming mail or innop"oscom is "andled by t%o mail servers at innop"oscom t"emselves 3ot" are on t"e same I* net%or innop"oscom "as one I* number (:09:711/=1) , %"ic" also "as a corresponding reverse pointer
(Source: http://www.hashermian.com/tools/domain-email.php*#+innophos.com )
15
Strategic Security, Inc. © http://www.strategicsec.com/
Operating Sstems of critical servers
(Source: Netcraft.com)
1
Strategic Security, Inc. © http://www.strategicsec.com/
Shared :NS and :omain Information ?urableprintingpapercom, durablepapercom, $eanlabelscom, %as"abletagcom, neena"papersurveycom and at least 81 ot"er "osts s"are name servers %it" t"is domain 'aecocom, cibernet, neena"papercom and rpapercom s"are mail servers under anot"er name %it" t"is domain
1!
Strategic Security, Inc. © http://www.strategicsec.com/
3utonomous System Eit"in t"e Internet, an autonomous system (>S) is a collection o connected Internet *rotocol (I*) routing prefes under t"e control o one or more net%or operators t"at presents a common, clearly defned routing policy to t"e Internet Originally, t"e defnition required control by a single entity, typically an Internet service provider (IS*) or a very large organization %it" independent connections to multiple net%ors, t"at ad"ere to a single and clearly defned routing policy, as originally defned in 2'5 9HH9 T"e ne%er defnition in 2'5 91=7 came into use because multiple organizations can run 34* using private >S numbers to an IS* t"at connects all t"ose organizations to t"e Internet -ven t"oug" t"ere are multiple >utonomous Systems supported by t"e IS*, t"e Internet only sees t"e routing policy o t"e IS* T"at IS* must "ave an o.cially registered >utonomous System Number (>SN) > unique >SN is allocated to eac" >S or use in 34* routing S num#ers are important #ecause the S, uniuel identies each network on the Internet.
1"
Strategic Security, Inc. © http://www.strategicsec.com/
(Source: http://bgp.he.net/net/65.160.96.0/21)
Innophos.com Su'
1#
Strategic Security, Inc. © http://www.strategicsec.com/
(Source: http://bgp.he.net/net/65.160.96.0/21#_dn)
2$
Strategic Security, Inc. © http://www.strategicsec.com/
(Source: http://serversni0.net/su#domains.php )
21
Strategic Security, Inc. © http://www.strategicsec.com/
Company 9mail 3ddresses 4at"ering corporate email addresses is t"e frst stage or any type o p"is"ing or client
T"e ollo%ing email addresses %ere discovered via theHarvester tool (an Open Source +et"od) using t"e ollo%ing command line synta Bt"e"arvesterpy
22
Strategic Security, Inc. © http://www.strategicsec.com/
23
Strategic Security, Inc. © http://www.strategicsec.com/
24
Strategic Security, Inc. © http://www.strategicsec.com/
>ttempts %ere made to veriy selected UInnop"oscomV email addresses T"e ollo%ing email addresses returned UvalidV results
25
Strategic Security, Inc. © http://www.strategicsec.com/
2
Strategic Security, Inc. © http://www.strategicsec.com/
:ocuments and Sensiti/e :ata Organizations need to be a%are o t"e types and availability o corporate documents available to t"e Internet T"ey s"ould also be cognizant o %"at types o internal inormation can be etracted rom document metadata ?ocument metadata can yield enormous amounts o internal inormation and s"ould be sanitized prior to being placed on t"e Internet T"is inormation can includeK employee names, usernames, email addresses types o sot%are used in t"e enterprise, saved fle pat" disclosure, and creationBmodifcation dates
2!
Strategic Security, Inc. © http://www.strategicsec.com/
Saved !ile $ath Disclosure T"is inormation %as discovered in a pd result rom a google searc"< USite&Innop"oscom fletype&pdV
T"e ollo%ing lin produced a pd %it" a net%or drive mapping or an internal net%or s"are http://www.innophos.com/__sitedocs/innophospogeneraltccontractorscanada.pdf
2"
Strategic Security, Inc. © http://www.strategicsec.com/
%n e&le of disclosure of technologies used 'ithin the enterprise
>ccording to t"e frm t"at developed t"e current %%%innop"oscom %ebsite, t"e site %as created on a !inu server running >pac"e, %it" an Oracle database, coded in *#* along %it" #T+!, 5SS, 6avaScript and 'las"
(Source& "ttp&BB%%%$designcomB%orBportolioBinnop"os<%ebsite)
2#
Strategic Security, Inc. © http://www.strategicsec.com/
5onerence call details %ere ound in several press releases or recent fnancial flings %it" t"e DS Securities and -c"ange 5ommission
3$
Strategic Security, Inc. © http://www.strategicsec.com/
#ersonnel #ro5ling #ig"
=ey !anagement >ll Innop"os 5orporate -ecutives and ?irectors business profles are readily vie%able at "ttp&BBpeopleorbescomBsearc" namePFticerPI*#S 3'raham Sha'ot
Ot"er 5orporate O.cerBGice *resident at Innop"os #oldings, Inc
3mado Ca/a$os
?irector at Innop"os #oldings, Inc
Charles >rodheim
5ontroller at Innop"os #oldings, Inc
ary 3. Cappeline
?irector at Innop"os #oldings, Inc
ohn !. Steit$ ?irector at Innop"os #oldings, Inc oseph olos;i
Gice *resident, ?ivisional at Innop"os #oldings, Inc
=aren R. Osar ?irector at Innop"os #oldings, Inc %inda . !yric;
?irector at Innop"os #oldings, Inc
%ouis Cal/arin Gice *resident, ?ivisional at Innop"os #oldings, Inc !ar; 0euer'ach
Gice *resident, ?ivisionalB5'O at Innop"os #oldings, Inc
!ar; Thurston Gice *resident, ?ivisional at Innop"os #oldings, Inc !ichael %o/rich
Gice *resident, ?ivisional at Innop"os #oldings, Inc
Randolph ress
5-OB5"airman o t"e 3oardB?irectorB*resident at Innop"os #oldings, Inc
31
Strategic Security, Inc. © http://www.strategicsec.com/
Russell =emp Gice *resident, ?ivisional at Innop"os #oldings, Inc Salmon Neil
5'OBGice *resident at Innop"os #oldings, Inc
Stephen !. ?ide
?irector at Innop"os #oldings, Inc
Timothy Treinen
Gice *resident, ?ivisional at Innop"os #oldings, Inc
,illiam 0arran .:.
Gice *residentB4eneral 5ounselBSecretary at Innop"os #oldings, Inc
,ilma Harris
Gice *resident, ?ivisional at Innop"os #oldings, Inc
>n eample o a profle vie%able to t"e public is included belo% (e, 5-O 2andolp" 4ress)
32
Strategic Security, Inc. © http://www.strategicsec.com/
33
Strategic Security, Inc. © http://www.strategicsec.com/
Social Netor;ing #ro5les > company searc" on !inedIn produced t%o Une% "iresV One o %"ic" is a public profle %it" a picture
34
Strategic Security, Inc. © http://www.strategicsec.com/
Spo;e Company O/er/ie
?oominfo Company O/er/ie 35
Strategic Security, Inc. © http://www.strategicsec.com/
3