I just got an email from Facebook saying one of my friends sent me a message. It said "Hello" and "Visit:" and it had a link. I won't put it on here but if you are interested, it ended up being routed to fbaction.net DO NOT VISIT! It's not Facebook. They just want your login. I could be wrong, but why risk it, just login to Facebook from Facebook.com.
*update* I've made the change but it's not fbaction.com its FBACTION.NET. fbaction.com is not a threat, thanks 'the cliff'!
Here is Facebook.com
Here is fbaction.net (looks similar...)