We started seeing safevisit.online in our reports within the last week or 2 that this site is being blocked as a security risk. I've looked online but I haven't found any resources explaining what this site is or why its showing up. If its a tracker, I'm guessing users are visiting a site that has it embedded. The domain is less than a year old.
If it is the case that it's just a tracking site, then you should be able to see the Referrer in the page events or alerts that triggered the policy. This would tell you what site(s) is triggering the policy as well. If you believe the URL categorization is incorrect, you can submit a request to recategorize it from your tenant orhttps://www.netskope.com/url-lookup.
Sam Shiflett Netskope Solution Architect - North America