news[.]primesignals[.]sbs

PhishDestroy identifies news.primesignals.sbs as an active Facebook brand impersonation domain designed for credential theft. This fraudulent site mimics the official Facebook login page to trick users into submitting their credentials, which are then harvested by attackers for account takeovers or other malicious activities. This domain was flagged by 12 out of 95 VirusTotal security vendors, indicating a high-risk threat profile. It was registered on March 23, 2026, through Dynadot LLC, a domain registrar often exploited by threat actors for malicious infrastructure. The site resolves to IP address 88.222.222.160 and uses a Let’s Encrypt SSL certificate to appear legitimate, further increasing the risk of user deception. If you visited news.primesignals.sbs, do not enter any login credentials. Immediately change your Facebook password using the official website or app from a trusted device. Enable two-factor authentication on your account and review recent login activity for suspicious entries. Report the domain to Facebook’s phishing reporting system and your local cybersecurity authority. Avoid clicking links from unsolicited messages and verify website URLs carefully before entering sensitive information.