k6w1n8p4r9x2[.]sbs

This domain, k6w1n8p4r9x2.sbs, poses a credential theft threat by impersonating a legitimate loan application page titled 'İhtiyaç Kredisi Başvurusu' (Need Loan Application). The site is designed to trick users into submitting sensitive personal and financial information, such as identity details and banking credentials, under the guise of applying for a loan. The threat type is generic phishing, but the specific risk is credential theft targeting Turkish-speaking users seeking financial services.

Analysis confirms the domain is flagged by 7 out of 95 security vendors on VirusTotal, indicating a moderate detection rate among security solutions. The domain was created on July 01, 2026, through registrar Dynadot Inc, and resolves to IP address 91.238.163.161. The page remains active and accessible, increasing the potential for victim exposure. Infrastructure analysis reveals the domain uses a newly registered name with a .sbs top-level domain, commonly abused for phishing operations.

If you visited this site, do not enter any personal or financial information. Immediately change passwords for any accounts you may have used on the page and enable multi-factor authentication where available. Monitor bank and credit card statements for unauthorized transactions. Report the domain to relevant cybersecurity authorities or your organization's security team for further investigation and potential blacklisting.