safespeedyinc[.]com

On 24 July 2026, safespeedyinc.com was identified as a generic phishing infrastructure that has since been taken offline. The domain was registered on 5 May 2023 through HOSTINGER operations, UAB and is hosted on an IPv6 address (2a02:4780:8:580:0:12dc:ebbe:4) belonging to AS47583 Hostinger International Limited, located in the Netherlands. DNS resolution is served by ns1.dns-parking.com and ns2.dns-parking.com, typical of parked or disposable domains. No SSL certificate is present, meaning the site only responded over HTTP, which aligns with many low‑effort phishing deployments.

A VirusTotal scan involving 95 antivirus engines returned no detections; however, the absence of detections does not constitute a safety assurance. The site’s HTML title was observed as "SafeSpeedyCouriers," suggesting an attempt to impersonate a courier service, though the page content has not been captured for further analysis. Reputation services have flagged the domain: PhishDestroy listed it as blocked, Gridinsoft assigned a trust score of 0/100, and the domain appears on one external blocklist. The lack of TLS, low trust score, and inclusion on blocklists collectively indicate malicious intent.

The domain currently resolves to the same IPv6 address and no HTTP response was observed after takedown, confirming its offline status. Defenders should continue to block the domain at network perimeter, monitor for any re‑registration of the same name or similar variations, and update detection rules to include the observed IPv6 address and associated nameservers. Ongoing observation is recommended to detect possible resurrection or reuse of the infrastructure.