No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Is l.facebook.com legit or a scam?
Official Facebook link shim domain used to redirect and protect users from external links.
Analysis Summary
AI Security Analysis
This domain belongs to Facebook and serves as their official link redirection service. The technical scan returned zero malicious detections across our antivirus network and blocklist feeds. The domain is over 29 years old, matching Facebook's own registration history, with a clean hosting IP and valid SSL certificate. Our research confirms it has been used since 2008 to strip referrer data and shield users from potentially harmful external links. No scam reports or complaints appear in any sources, and the visual analysis shows standard Facebook branding without suspicious elements.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →
Visual Screenshot Analysis
We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.
The page visually mimics facebook.com
Screenshot shows a clean, fully-rendered Facebook login page with standard professional design, no scam indicators, urgency tactics, or suspicious elements visible.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for l.facebook.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- l.facebook.com is Facebook's official link shim domain for redirecting clicks on external links shared in posts
- Purpose: protects users from malicious URLs and strips personal referrer data for privacy (introduced 2008)
- Appears in Google Analytics as referral traffic (l.facebook.com for desktop, lm.facebook.com for mobile)
- Confirmed legitimate in multiple sources including Reddit threads and analytics blogs; no scam reports found for the domain itself
- Domain age 10640 days aligns with facebook.com registration; all traffic is real Facebook-originated clicks
- Scam mentions in results refer only to fake Facebook emails/messages, not to l.facebook.com
Our research confirms l.facebook.com is Facebook's official link redirection domain introduced in 2008 to protect users from malicious URLs and preserve privacy. No scam reports or complaints were found for the domain itself. All references describe it as legitimate Meta infrastructure used for real Facebook-originated clicks.
Scam Network Intelligence
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Domain & Encryption
Redirect Chain
- 1302https://l.facebook.com/l.php?u=https%3A%2F%2Ft.co%2Fj2QN3xXkE1%3Ffbclid%3DIwZXh0bgNhZW0CMTAAYnJpZBExenExQzVBYnh2d0o3c1lkT3NydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR5xsVH2TrwrkeLLws0AZBzXnBH2vPVfcnK_R3j0nIc2NNOINIgv4OPQm6TRqQ_aem_woJJSrD6ZSnCzu4MKYznkQ&h=AUAm_Nsa6sGANudNgPyIQIUXLeptN8fIiiIkGgnpQ_AaorjtnKFW5c86peAhmsv0n_Y9Il_iaHNucDjudkO9NRyE67ZQR7gdy2sj1ctwJmWFGHxEQfcp0pbIqwD1M096g1DdwWIlb2O7u1UHWQ&__tn__=KF&c%5B0%5D=AUCQW_-F8s2y3_J4sS4YYw_b45WLS2ZQPYyr6acRRsyHlscbH26Er77sGufcUuUgl9uV88mox7t-E9IbXE44qv9FfMnTa1bXbEIR4GH6jB2Fxt0Hj8Skq19Daq-dpeWxc_IlkG1Q3_nJ1ARQTc0ep30CNVrQshF58tR1aGBFeA4cQ5It3nVLVPVSb0ujxAS3GKzWybG0LHO-TBxx9H6fAoq14eqzn9WN8fC2Pk65XG8
- 2302https://l.facebook.com/l.php?u=https%3A%2F%2Ft.co%2Fj2QN3xXkE1%3Ffbclid%3DIwZXh0bgNhZW0CMTAAYnJpZBExenExQzVBYnh2d0o3c1lkT3NydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR5xsVH2TrwrkeLLws0AZBzXnBH2vPVfcnK_R3j0nIc2NNOINIgv4OPQm6TRqQ_aem_woJJSrD6ZSnCzu4MKYznkQ&h=AUAgtQbum5NR6Qid1Z3bcklJeSZyyO3tPSNx9avq24cR6yPRKoQnP0zAkzqYR1ttAlJgsDf14FSRb9Chyu_jguUNz3MO1rTFGNiGnO_E_-zRUzZy92wt4enyGqnQEb-9_6o05U4I3wqk4yMqc5d22JRWcX4wScJ9YS2bSDOxvxeurVTogewofihNgL70t1KO_a02JkahWXFDGJads1hQoavT7y4p4Ip4c3zbm9l3jMIy8YbTCJl9x6J8sl0oDQqZT88GOpWbva8KvdmTVX8pz-mU2W4Eld8-lk6L3KHydeR82CshTCWuADWv2i1oKe_akacBDg
- 3302https://www.facebook.com/flx/warn/?u=https%3A%2F%2Ft.co%2Fj2QN3xXkE1%3Ffbclid%3DIwZXh0bgNhZW0CMTAAYnJpZBExenExQzVBYnh2d0o3c1lkT3NydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR5xsVH2TrwrkeLLws0AZBzXnBH2vPVfcnK_R3j0nIc2NNOINIgv4OPQm6TRqQ_aem_woJJSrD6ZSnCzu4MKYznkQ&h=AUDxyQniwD7Mpt6SmK-XAYdp5ZeZ3EmlqujF1m-kMcxgQPji7qOGSVAi_HaLJ_s5UiP0B6b18iBLkLdskJRVNB4fSI2K1C8Xx7lqkjgrsiVawZUCueI4wLLIiYimkhT3xee7guCf19bjdlUYU8WUJ4E5J7YhSwo5EnKUE7Ykdr-eNutf6sOb-1kqCM_SN7WzH11mlsLgUcDHPw7m-dIWax5qirIBiPedmthJxXHKePOixP6GHabj7ADRonCL_4F39QQW9g_qKEgTx8BSJxc7Q84cBndypauc-ikot2U5TFkbuZJ6v6maFlf6F3BGB3r82Xbg4Qcross-domain
- 4200https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fflx%2Fwarn%2F%3Fu%3Dhttps%253A%252F%252Ft.co%252Fj2QN3xXkE1%253Ffbclid%253DIwZXh0bgNhZW0CMTAAYnJpZBExenExQzVBYnh2d0o3c1lkT3NydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR5xsVH2TrwrkeLLws0AZBzXnBH2vPVfcnK_R3j0nIc2NNOINIgv4OPQm6TRqQ_aem_woJJSrD6ZSnCzu4MKYznkQ%26h%3DAUDxyQniwD7Mpt6SmK-XAYdp5ZeZ3EmlqujF1m-kMcxgQPji7qOGSVAi_HaLJ_s5UiP0B6b18iBLkLdskJRVNB4fSI2K1C8Xx7lqkjgrsiVawZUCueI4wLLIiYimkhT3xee7guCf19bjdlUYU8WUJ4E5J7YhSwo5EnKUE7Ykdr-eNutf6sOb-1kqCM_SN7WzH11mlsLgUcDHPw7m-dIWax5qirIBiPedmthJxXHKePOixP6GHabj7ADRonCL_4F39QQW9g_qKEgTx8BSJxc7Q84cBndypauc-ikot2U5TFkbuZJ6v6maFlf6F3BGB3r82Xbg4Qcross-domain
Server Reputation
Scam-Type Likelihood
1 scam-type patterns detected
0 of 13 categories showed signals
We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.
- Visual clone of facebook.com detected in the screenshot.
- Clustered with known brand-impersonation infrastructure.
0 of 13 categories showed signals
We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.
- Visual clone of facebook.com detected in the screenshot.
- Clustered with known brand-impersonation infrastructure.
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on l.facebook.com and not a lookalike like l-.facebook.com.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Trust History
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Safety FAQ
Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.
- Our automated security review found no threat indicators on l.facebook.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- l.facebook.com passed our automated security checks with a trust score of 78/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. l.facebook.com presents a valid TLSv1.3 certificate issued by DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1, expiring in 7 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- l.facebook.com is 29.2 years old, registered on 3/29/1997 through RegistrarSafe, LLC. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 93 antivirus engines in our malware network report l.facebook.com as clean.
- No. l.facebook.com is not currently listed on the major browser blocklist feeds that modern browsers use.
- l.facebook.com resolves to an IP operated by Meta Platforms Ireland Limited in US (usage type: Commercial). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.