krakenex[.]icu

This domain, krakenex.icu, operates as a brand impersonation threat specifically targeting UPS customers. The site presents a fabricated interface resembling UPS tracking or delivery portals, designed to deceive users into entering sensitive information such as login credentials, shipping details, or payment data under false pretenses. The fraudulent page title 'karken'—a misspelling of the legitimate cryptocurrency exchange—further indicates an attempt to exploit user confusion or typosquatting to enhance credibility. Such impersonation schemes are commonly used to facilitate identity theft, financial fraud, or unauthorized access to corporate or personal accounts. Analysis indicates krakenex.icu was registered on February 21, 2026, through NameSilo, LLC, an uncommon creation date that may suggest domain spoofing or backdated registration records. The domain resolves to 188.114.97.3, an IP address within Cloudflare’s network (AS13335), which is frequently leveraged by threat actors to obscure origin infrastructure. According to VirusTotal, 12 out of 95 security vendors have flagged the domain as malicious, and it appears on three independent security blocklists. The SSL certificate, issued by Google Trust Services (WE1), provides HTTPS encryption but does not validate legitimacy, as certificates are routinely issued to malicious domains. Users who accessed krakenex.icu should immediately cease all interaction and avoid entering any personal or financial information. Clear browser cache and cookies to remove any stored session data. If credentials were submitted, reset passwords on all accounts where the same credentials may have been reused, and enable multi-factor authentication where available. Monitor financial statements and credit reports for unauthorized activity. Report the incident to relevant fraud response teams and consider notifying the impersonated brand’s security team to support takedown efforts.