Is www.facebook.com safe?

The scan of www.facebook.com on 21 Aug 2026 found no evidence of harm. That is the absence of a finding at one point in time, not a guarantee: a page can change, and a scan only sees what it was served.

How was www.facebook.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.facebook.com - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned www.facebook.com and returned a benign verdict (score 0). The page resolved to 157.240.8.35 on Facebook, Inc. in AU. The domain was registered 10737 days ago through RegistrarSafe, LLC. 5 domains and 2 IPs were contacted, over 80 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: benign (score 0) · Confidence 16%
Scanned URL: https://www.facebook.com/gameroom/
Domain: www.facebook.com · IP: 157.240.8.35 · AS32934 · AU
Page title: Gameroom Live
HTTP status: 200 · text/html; charset="utf-8"
Registrar: RegistrarSafe, LLC · domain age 10737 days · created 1997-03-29
TLS issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 · valid to Aug 28 23: · subject C=US, ST=California, L=Menlo Park, O=Meta Platforms, Inc., CN=*.facebook.com
Evidenced operator: Meta Platforms, Inc.
HTTP requests captured: 80 · cookies set: 3 · outgoing links: 27
Scan tier: standard · observed 2026-08-21 18:48:19 UTC

Antivirus & YARA (1 of 47 engines)

ClamAV feed: SaneSecurity foxhole_generic [av]: Porcupine.Malware.52833.UNOFFICIAL (page content)

These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.

Why this verdict

Valid TLS, no impersonation or off-origin credential post
A signature matched text in the page (Porcupine.Malware.52833.UNOFFICIAL) — pages that discuss malware can match, so this alone is not a malicious verdict

Contacted infrastructure

157.240.8.35 - AS32934 Facebook, Inc. (Australia)
157.240.8.23 - AS32934 Facebook, Inc. (Australia)

Observed indicators

www.facebook.com
static.xx.fbcdn.net
m.facebook.com
scontent-syd2-1.xx.fbcdn.net
scontent.xx.fbcdn.net
157.240.8.35
157.240.8.23
https://www.facebook.com/gameroom/
https://static.xx.fbcdn.net/rsrc.php/y1/r/ay1hV6OlegS.ico
https://www.facebook.com/gameroom
https://m.facebook.com/gameroom
https://www.facebook.com/data/manifest/?is_workplace_mobile_pwa_dogfooding=0
https://static.xx.fbcdn.net/rsrc.php/v5/y4/l/0,cross/_8RDCd4esPmEU4T_aHxuwqxgo-3469oiGfgQe914iiBfD-GevAmvU9KONMKn3YhINqU49pVNahkCkeiF2w9Hlit1.css
https://static.xx.fbcdn.net/rsrc.php/v4/yT/r/CqKcS8kU3yr.js
https://static.xx.fbcdn.net/rsrc.php/v4itoc4/yf/l/en_GB-j/aKjJ8LzlAQ-pZHWeXzDTX_h48JL5F4zsVQYsxIW5MT220to-Pfl8vyX_nqgnzWWmRuJ71_ueGJrVBEMoFi4ky2WWCF5uCr-TKtLCvAQbZZOvWNizYKMderwI6djNHL2SkbWC82Yz_4vfOJL-SIJwS9HsBlzuLEWRy94mj.js
https://static.xx.fbcdn.net/rsrc.php/v4iE7L4/yH/l/en_GB-j/v_kkAv_-wGQD5kHIzf7jYNKFJiFGdmskIqgW-TExmHc73iqkyBEL0bzfAozIMNFBkkh5ft0L0Ex-eOmq97LhqYGUTJzERHBYNxCGSBvj8_FEnWtyl4z5lrsY_DuwVDdF1djslfGAB9vKIof06MpY9hlcPv1Bn7FomqJukBhRuYYy_sRt-EzZQY-A-iZ2hrTIfPG5rTYJQU4PKzR4W-Qx8lcabVTD7vw4WEQhGwKgnH0o8ZXBivGL85JCVpvVKJZCcc2ZP1Mq8wypiAW_bfkonn-JtdZ7PJuYQLzwqm8BXAdmh5DEndjkKeHWrECl3_nCt-B81RAVhX.js
https://static.xx.fbcdn.net/rsrc.php/v4iYeD4/yP/l/en_GB-j/VWrfdSUoAoN.js
https://static.xx.fbcdn.net/rsrc.php/v4iXvr4/yl/l/en_GB-j/g29Vz7gt71JVujafaypgIpHlBrhyTCkUTUfznCh536VbZ53YYHZzx7kDiXO0h74QbglfR3T5IT9zxEFBIU62OF1hyJcBHswmgMV809BrGBXPetg9xqXxzobB0jMVGcktGGRpNWWjlW6xEiITgJI0RlHD25ZU8ZNJN9NfM9BiO9FcPQ4rISRnDsjtJlv7YL5Ho0KV0V.js
https://static.xx.fbcdn.net/rsrc.php/v4iJVq4/yF/l/en_GB-j/rad2-oNQXUp.js
https://static.xx.fbcdn.net/rsrc.php/v4/yL/r/KEOdbs7ZGCO.js

Other scans of www.facebook.com (10)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

24 Aug 2026 - unknown · https://www.alexoloughlinonline.com/author/admin/
24 Aug 2026 - unknown · https://www.alexoloughlinonline.com/hawaii-five-0-pilot-clip/
24 Aug 2026 - unknown · https://www.alexoloughlinonline.com/
24 Aug 2026 - unknown · https://leicht-spb.ru/wp-content/plugins/super-forms/uploads/php/files/351d96ba8e667a016bf2177ac40f7
24 Aug 2026 - unknown · https://creativecommons.org/publicdomain/zero/1.0/
24 Aug 2026 - suspicious · https://onlinebiblecollege.com/
24 Aug 2026 - unknown · http://cucmoi.blogspot.com/search/label/edit%20url
24 Aug 2026 - unknown · http://bascobrunswick.com.au/wp-content/plugins/formcraft/file-upload/server/content/files/1613d287b
24 Aug 2026 - unknown · https://5.me/
24 Aug 2026 - unknown · https://nesimaresort.com/

Questions about www.facebook.com

Is www.facebook.com safe?: The scan of www.facebook.com on 21 Aug 2026 found no evidence of harm. That is the absence of a finding at one point in time, not a guarantee: a page can change, and a scan only sees what it was served.
How was www.facebook.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.facebook.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan