safeguards[.]me

The domain safeguards.me was registered on February 21, 2026 through NameCheap, Inc. and is currently taken offline. DNS resolution points to the IP address 172.67.203.176, which belongs to the Cloudflare network (ASN 13335) in the United States. The web server reports Nginx with OpenResty, and the site presents a TLS certificate issued by Let’s Encrypt (certificate profile R13). An HTTP response returns the page title "Redirecting...", but no further content has been captured.

Reputation scoring from Gridinsoft rates the domain at 0 out of 100, indicating a lack of trust. The domain appears on three public blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the view that it is associated with malicious activity. AlienVault OTX references the domain in two separate threat intelligence pulses, providing additional corroboration. VirusTotal analysis shows five of ninety-three security vendors flagging the domain, which aligns with other indicators of compromise.

While the exact phishing campaign details (targeted brand, credential collection method, or lure) remain undisclosed, the combination of a recent registration, Cloudflare hosting, low trust score, blocklist inclusion, and vendor detections strongly suggests a generic phishing operation. Defenders should continue to block safeguards.me at network perimeter and DNS layers, monitor for any resurgence of the domain, and update detection rules to include its associated IP and certificate fingerprints. Additional investigation of the redirection behavior, if the site reappears, could reveal the final payload or lure used in the campaign.