Re: phishing scam, the email I got sent from a friend’s Facebook acct pointed to fbstarter dot com, not fbaction, so several URLs in play.