metamsak[.]icu

This domain, metamsak.icu, is involved in brand impersonation, specifically targeting Amazon. Visiting this site could expose users to various risks, including the potential theft of personal and financial information. The domain's attempt to mimic Amazon's brand can lead unsuspecting users to believe they are interacting with a legitimate Amazon service, which could result in significant financial and personal data loss.

Analysis of metamsak.icu reveals that it has been flagged by 17 out of 95 security vendors on VirusTotal, indicating a substantial level of suspicion among security experts. The domain was created on February 21, 2026, and is currently offline. The IP address it resolves to, 206.238.42.245, is located in Hong Kong and is associated with the AS399077 Tcloudnet network. Additionally, the domain appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL, further confirming its malicious intent.

If users have visited metamsak.icu, they should immediately check their Amazon accounts for any unauthorized activity. Running a full system scan for malware is also recommended, as the domain may have attempted to deploy harmful software. It is essential to change passwords and enable two-factor authentication on all relevant accounts to enhance security. Users should report any suspicious activity to their financial institutions and consider monitoring their credit reports for signs of identity theft.