Someone sent me a document through Facebook Messenger. I clicked to download the document and passed through a very-lengthy URL that started with https://l.facebook.com/l.php?u=https%3A%2F%2Fcdn.fbsbx.com and continued on for a total of 536 characters. That long URL opened in a new browser tab. The favicon shown in that browser tab is the Craigslist favicon. What the hell? It also looks like the https URL is not really secure, though it might be that not enough connection time passed for the web browser to verify the site’s certificate authenticity.
Craigslist Favicon on Facebook
