De afzender was (echt of niet?): security@facebookmail.com