Wait—then how does cinyourrc.facebook.com resolve? It doesn’t—unless the attacker owns cinyourrc.facebook.com as a full domain. But domain names cannot have periods except as delimiters. So cinyourrc.facebook.com is actually a third-level domain under facebook.com ? No—because facebook.com is already a second-level domain.
To ensure a safe and secure online experience, users are advised to: http- free.cinyourrc.facebook.com