info-stay-update.help
Appeared in the .help zone on Tuesday, September 22, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The domain serves no content of its own and bounces visitors to www.google.com; the Google branding in the evidence belongs to the redirect destination, not this site. The name itself ('info-stay-update' on the .help TLD) is generic notification/lure phrasing typical of smishing or ad-cloaking infrastructure that shows a benign redirect to scanners while serving a lure to targeted traffic — real signal, but not decisive without a captured lure page.
Domain name 'info-stay-update.help' uses lure words ('update', 'info') and is designed to deceive visitors into believing they are updating account information. The redirect to www.google.com combined with the deceptive domain name and registrar choice (Registrar.eu, not Google) constitutes a phishing redirect campaign—the attacker controls the domain to lure victims to Google's real site under false pretenses, likely to harvest credentials or perform account takeover via subsequent phishing pag
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, September 22, 2026
Same data as JSON: /api/zone/domain/info-stay-update.help. This page is not indexed by search engines and does not link to the site it describes.