Is the link below from fbsbx. com known as a phishing link?
How do I know if the link is a phishing link? Is it safe for me to open?
To get answers of this dilemma, I tried to Google the use of phishing links and came across the below information - Cybercriminals use phishing URLs to try to obtain sensitive information for malicious use, such as usernames, passwords, or banking details. They send phishing emails to direct their victims to enter sensitive information on a fake website that looks like a legitimate website.
There are several techniques to check whether the domain lookaside fbsbx.com is owned by Facebook.
WHOIS record
- Let's check the WHOIS record for fbsbx.com:
- Registry Registrant ID:
- Registrant Name Domain Administrator
- Registrant Organization Facebook, Inc.
- Registrant Street 1601 Willow Road,
- Registrant City Menlo Park
- Registrant State/Province CA
- Registrant Postal Code 94025
- Registrant Country US
- Registrant Phone +1.6505434800
- Registrant Phone Ext:
- Registrant Fax +1.6505434800
- Registrant Fax Ext:
- Registrant Email domain@fb.com
- fb.com is one of Facebook's domains, and the registrant organization is Facebook, so that looks legit.
- DNS record
- dig NS fbsbx.com
- ;ANSWER
- fbsbx.com. 52794 IN NS a.ns.facebook.com.
- fbsbx.com. 52794 IN NS b.ns.facebook.com.
- The nameservers are on the facebook.com domain, which also looks legit.
TLS certificates
https://lookaside.fbsbx.com/ delivers a certificate issued for the following domains:
- *.facebook.com
- *.facebook.net
- *.fb.com
- *.fbcdn.net
- *.fbsbx.com
- *.m.facebook.com
- *.messenger.com
- *.xx.fbcdn.net
- *.xy.fbcdn.net
- *.xz.fbcdn.net
- facebook.com
- fb.com
messenger.com So whoever owns fbsbx.com also has access to a valid facebook.com certificate.
The domain is legit. Be warned that the PDF linked in the post may still link to phishing sites.