Google Safe Browsing
UnknownNot available — provider did not respond.
Weight 22Contribution +15 / 22
Learn more
Google's threat database flags sites known to host malware, phishing, or unwanted software. A clean result is a strong positive signal.
Domain Safety Report
facebook.com
Likely SafeConfidence
41%
TrustDepth Score™
82/100
82
facebook.com looks safe overall. It uses HTTPS correctly, has existed for over 29 years, and publishes SPF and DMARC email records.
Security Verification Log
Algorithm v2
Why this score?
This website scored 82/100 because:
- Registered 29 years ago · via RegistrarSafe, LLC.
- Valid HTTPS certificate.
- SPF ✓ DMARC ✓
- Reachable over HTTPS with HSTS.
- No suspicious naming patterns.
HTTPS EnabledHSTSSPF FoundDMARC FoundEstablished (10+ yrs)
Verified by TrustDepthChecked Scan ID
TD-6D6A3AScan took 4122 msTrust Statistics
- TrustDepth Score
- 82/ 100
- Confidence
- 41%
- Domain Age
- 29y
- Blocklists
- —
- Security Checks
- 5 / 12Passed
- Last Scan
- Just now
Data sourcesRDAP (WHOIS)Cloudflare DNSGoogle Safe BrowsingURLhausLive reachabilityTLS probe
facebook.com at a glance
How this domain connects to the rest of the TrustDepth graph.
- Category
- Social & Community
- Registrar
- RegistrarSafe, LLC
- Age
- 29 years
Score breakdown
Every signal, its weight, and how many points it contributed to facebook.com's score.
Abuse blocklists
UnknownNot available — provider did not respond.
Weight 18Contribution +13 / 18
Learn more
We check independent abuse databases like URLhaus and PhishTank. Being listed means researchers have observed the site being used maliciously.
Domain age (WHOIS)
PassRegistered 29 years ago · via RegistrarSafe, LLC.
Weight 13Contribution +13 / 13
Learn more
Older domains are much less likely to be scams. Most phishing sites are registered within the last 90 days.
SSL / TLS certificate
PassValid HTTPS certificate.
Weight 8Contribution +8 / 8
Learn more
A valid HTTPS certificate proves the site owns the domain and encrypts traffic. Broken or missing certificates are a red flag.
DNS configuration
PassSPF ✓ DMARC ✓
Weight 8Contribution +7 / 8
Learn more
SPF, DMARC and DNSSEC records help stop attackers from spoofing this domain in email or redirecting visitors to fake copies.
Reachability & HTTPS
PassReachable over HTTPS with HSTS.
Weight 6Contribution +6 / 6
Learn more
We confirm the site actually responds, upgrades HTTP to HTTPS, and returns a healthy status code.
Naming & impersonation
PassNo suspicious naming patterns.
Weight 6Contribution +6 / 6
Learn more
Lookalike names, homoglyphs, brand-typosquats, suspicious TLDs, and digit-heavy strings correlate with scam sites.
Security headers
UnknownNot available — provider did not respond.
Weight 6Contribution +4 / 6
Learn more
HSTS, CSP, X-Frame-Options and Referrer-Policy show the operator takes basic browser-side hardening seriously.
Transparency pages
UnknownNot available — provider did not respond.
Weight 6Contribution +4 / 6
Learn more
Real businesses publish contact, about, privacy and terms pages. Missing all of them is a common scam pattern.
Redirect chain
UnknownNot available — provider did not respond.
Weight 3Contribution +2 / 3
Learn more
Long redirect chains or cross-domain hops are common in cloaking, affiliate abuse, and phishing landers.
Tech fingerprint
UnknownNot available — provider did not respond.
Weight 2Contribution +1 / 2
Learn more
Robots.txt, sitemap.xml, server headers and framework markers show the site is a properly built, maintained web app.
Community reviews
UnknownNot available — provider did not respond.
Weight 2Contribution +1 / 2
Learn more
Signed-in visitors can share first-hand experiences. Aggregated ratings supplement automated checks.
Social safety tips for facebook.com
Simple habits that keep you safe whether or not this site scores well.
Turn on two-factor authentication
2FA blocks the vast majority of account takeover attempts even if your password leaks.
Hover before you click
Preview the destination URL — shortened links in DMs are a top phishing vector.
Verify friend requests
Cloned profiles copy real friends. Confirm through a second channel before accepting sensitive DMs.
Review app permissions
Audit which third-party apps have access to your account every few months and revoke unused ones.
Frequently asked about facebook.com
Is facebook.com a scam?+
Automated safety signals do not indicate facebook.com is a scam. That said, no automated system catches every fraud — always verify unusual offers independently.
Is facebook.com legit?+
facebook.com passes TrustDepth's core safety checks and is not present on any abuse blocklists we consult. It's likely legitimate.
Can I trust facebook.com?+
Most signals look good for facebook.com. Trust it for normal browsing, but be cautious with payment info.
Is facebook.com safe to use?+
facebook.com looks safe for everyday use based on our automated checks. Still practice basic hygiene: verify URLs, use strong unique passwords, and enable two-factor authentication.
How is facebook.com's safety score calculated?+
We combine live SSL, WHOIS, DNS and reachability checks with lookups against Google Safe Browsing and abuse blocklists such as URLhaus and PhishTank. Naming heuristics and (soon) community reviews add extra context. Each signal contributes a weighted portion of a 0–100 score.
Does facebook.com use a secure HTTPS connection?+
Our SSL/TLS check inspects the live certificate served by facebook.com, verifying issuer, validity window and hostname match. See the "SSL / TLS certificate" signal above for the exact result for this scan.
Has facebook.com been reported for phishing or malware?+
We cross-check facebook.com against Google Safe Browsing, URLhaus and PhishTank. If any of them flag the domain, it will show as a red signal in the "Safety signals" section above.
How old is the facebook.com domain?+
WHOIS registration age is one of the strongest anti-scam signals — most fraudulent sites are less than 90 days old. Check the "Domain age (WHOIS)" signal above for the registration date and age for facebook.com.
What should I do if facebook.com looks suspicious?+
Close the tab, do not enter any credentials, and do not download files. Report the URL to Google Safe Browsing (safebrowsing.google.com/safebrowsing/report_phish/) and to your browser's built-in reporting tool. If you already entered a password, change it immediately on the real site and enable 2FA.
How often is this facebook.com report updated?+
Every scan is live — signals are re-checked from source when you load this page (with a short cache to avoid rate limits). You can force a fresh scan any time by re-submitting facebook.com from the home page.
About this facebook.com safety report
TrustDepth generated this scorecard for facebook.com by running seven independent checks in parallel: SSL/TLS certificate validity, WHOIS registration age, DNS configuration (SPF, DMARC, DNSSEC), HTTPS reachability, Google Safe Browsing status, abuse blocklists (URLhaus, PhishTank), and naming heuristics. Each signal contributes a weighted share of the 0–100 score.
A verdict of trusted means the domain passed all core checks with high confidence. Likely safe means most signals are positive with one minor gap. Unclear means we don't have enough evidence to recommend for or against. Suspicious and dangerous mean at least one strong red flag — proceed with caution or avoid entirely.
Automated scans catch most fraud, but no scanner is perfect. Always cross-check unusual offers, verify contact details, and prefer payment methods with buyer protection. Read our methodology for the full scoring breakdown.
Community reports for facebook.com
Real reports from people who have used facebook.com. Add yours to help others decide.
Loading comments…