csmgroup.blu-foods.com

Microsoft

https://csmgroup.blu-foods.com/login?method=signin&mode=secure&client_id=db30ed6-53592-41922-0d22-aaab5901c&privacy=on&sso_reload=true&redirect_urI=https%3A%2F%2Flogin.microsoftonline.com%2F Access site

Screenshot

Screenshot captured by urlscan.io on 2026-11-11T01:00 UTC: our own render of this page came back blank.

Investigate

Domain csmgroup.blu-foods.com27 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 216.239.34.21

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://csmgroup.blu-foods.com/login?method=signin&mode=sec…

urlscan

Wayback

archive.today

Cert WR3

crt.sh

Censys

Google CT

Phishunt analysis Beta

27 low suspicionheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+4.1 Brand in screenshot
+3.9 Password field
+3.0 OpenPhish
+1.1 No CSP header
+1.1 No HSTS header
+0.7 Unrecognised DNS provider
+0.6 Brand impersonation in path
+0.5 Young certificate
+0.5 Long domain
+0.4 Credential path
+0.3 Free CA
+0.2 Suspicious TLD
+0.1 Hyphens
+0.1 External scripts
+0.1 Deep subdomain

21 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Fake Microsoft sign-in page on an unrelated food-company subdomain, likely a compromised site. The URL path has secure-login and SSO-style parameters with a Microsoft Online redirect value, used to harvest Microsoft credentials. Reported to OpenPhish.

Credential pathOpenPhishBrand impersonation in path

AI-generated from stored detector signals - the AI never visited the site. · 2026-11-11 · confidence 82%

Domain & Network

Whois

Registrar Network Solutions, LLC

Network

IP 216.239.34.21 Google services

Country