You can be phished even when you see “facebook.com” in address bar You saw “facebook.com” with the padlock in the address bar. It can’t be a trick right?