Fwd: Getting back onto Facebook

[Jeffrey Walton <noloader () gmail com>]

This looks like a phishing attempt because I don't have a Facebook account.
I don't participate in the social networking experiments. So there's no way
I've been having trouble using it.

But all the links appear to be legitimate. I looked at the source, and they
all use https://www.facebook.com/... The only thing that looks suspicious
is the email address of security () facebookmail com. It looks fake because
Facebook is facebook.com, bit WHOIS claims its owned by Facebook, Inc.

Does Facebook regularly use phishing in an attempt to lure users? Is deceit
a common practice with Facebook? Aren't these practices a violation of a
number of consumer protection laws?

---------- Forwarded message ----------
From: Facebook <security () facebookmail com>
Date: Sun, Apr 19, 2015 at 7:59 PM
Subject: Getting back onto Facebook
To: Jeffrey Walton <noloader () gmail com>


Sorry you've been having trouble logging into your Facebook account. Get
back on Facebook now You can also get password help or login help on
Facebook. If you're still having trouble or believe this was sent by
mistake, please visit our login help page:
https://www.facebook.com/help/login
<https://www.facebook.com/n/?help%2Flogin&medium=email&mid=b9e3e75G64cd7ba0G0G86G72fb2e9&n_m=noloader%40gmail.com>
<https://www.facebook.com/n/?help%2Flogin&medium=email&mid=b9e3e75G64cd7ba0G0G86G72fb2e9&n_m=noloader%40gmail.com>
 Sorry you've been having trouble logging into your Facebook account.Get
back on Facebook now
<https://www.facebook.com/n/?help%2Flogin&medium=email&mid=b9e3e75G64cd7ba0G0G86G72fb2e9&n_m=noloader%40gmail.com>You
can also get password help
<https://www.facebook.com/n/?recover%2Finitiate&medium=email&mid=b9e3e75G64cd7ba0G0G86G72fb2e9&n_m=noloader%40gmail.com>
or login help
<https://www.facebook.com/n/?help%2Flogin&medium=email&mid=b9e3e75G64cd7ba0G0G86G72fb2e9&n_m=noloader%40gmail.com>
on Facebook.If you're still having trouble or believe this was sent by
mistake, please visit our login help page:
https://www.facebook.com/help/login
<https://www.facebook.com/n/?help%2Flogin&medium=email&mid=b9e3e75G64cd7ba0G0G86G72fb2e9&n_m=noloader%40gmail.com>This
message was sent to noloader () gmail com. If you don't want to receive these
emails from Facebook in the future, please unsubscribe
<https://www.facebook.com/o.php?k=AS2d32FC5sex1j1J&u=1691188128&mid=b9e3e75G64cd7ba0G0G86G72fb2e9>.
Facebook, Inc., Attention: Department 415, PO Box 10005, Palo Alto, CA 94303


*****



Delivered-To: noloader () gmail com
Received: by 10.36.92.146 with SMTP id q140csp1127077itb;
        Sun, 19 Apr 2015 16:59:04 -0700 (PDT)
X-Received: by 10.66.188.107 with SMTP id
fz11mr23568757pac.85.1429487943304;
        Sun, 19 Apr 2015 16:59:03 -0700 (PDT)
Return-Path: <security () facebookmail com>
Received: from mx-out.facebook.com (outmail021.prn2.facebook.com.
[66.220.144.148])
        by mx.google.com with ESMTPS id
c4si17034147pdf.49.2015.04.19.16.59.03
        for <noloader () gmail com>
        (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
        Sun, 19 Apr 2015 16:59:03 -0700 (PDT)
Received-SPF: pass (google.com: domain of security () facebookmail com
designates 66.220.144.148 as permitted sender) client-ip=66.220.144.148;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of security () facebookmail com designates
66.220.144.148 as permitted sender) smtp.mail=security () facebookmail com;
       dkim=pass header.i=@facebookmail.com;
       dmarc=pass (p=REJECT dis=NONE) header.from=facebookmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=facebookmail.com;
    s=s1024-2013-q3; t=1429487943;
    bh=bwZQnEmALWIDc80xTw7olMTohRM4SBylYzmkGQSxgCM=;
    h=Date:To:From:Subject:MIME-Version:Content-Type;
    b=DtWBobgF1LbxjOSKGnsxiKWDd4c5Pqv15DnfZoVtSiccct4TGZIoaAIWSCje+Ar5g
     moPltaKIBKyHkt0w/6S3NDLrrBzJQA82Uxi6O3/uFJhzIiya6OzJwhq5C2rMuP90gn
     CItSSP2ujie0OIJ/n33SWizSqWPM723E1cJdbe7Y=
Received: from facebook.com
(ZiNh7UxAcpAxaAwmkbmxYM4mdzuQbIW7Fx9pR7oBKU7YT6YV8n+dTuJd8IgBRFoR
10.103.99.63)
 by facebook.com with Thrift id 0e0e8dd4e6f011e4994c0002c9b112b4-c8ef4310;
 Sun, 19 Apr 2015 16:59:03 -0700
X-Facebook: from 2401:db00:11:2122:face:0:3b:0 ([MTI3LjAuMC4x])
    by www.facebook.com with HTTP (ZuckMail);
Date: Sun, 19 Apr 2015 16:59:03 -0700
Return-Path: security () facebookmail com
To: Jeffrey Walton <noloader () gmail com>
From: "Facebook" <security () facebookmail com>
Reply-to: noreply <noreply () facebookmail com>
Subject: Getting back onto Facebook
X-Priority: 3
X-Mailer: ZuckMail [version 1.00]
Errors-To: security () facebookmail com
X-Facebook-Notify: failed_login; mailid=b9e3e75G64cd7ba0G0G86G72fb2e9
List-Unsubscribe: <
https://www.facebook.com/o.php?k=AS2d32FC5sex1j1J&u=1691188128&mid=b9e3e75G64cd7ba0G0G86G72fb2e9
>
X-FACEBOOK-PRIORITY: 1
X-Auto-Response-Suppress: All
Message-ID: <c3d3d32ca8678f1108e3afb56f067359 () www facebook com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
    boundary="b1_c3d3d32ca8678f1108e3afb56f067359"

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.