https://facebook.tech-gap.com/

Impersonating Facebook

Intent: Credential collection

• Domain is not operated by Facebook
• DNS nameservers do not match Facebook's known infrastructure
• TLS certificate has no organization information
• Mail servers do not match Facebook's known infrastructure
• SPF record does not reference Facebook's infrastructure

Facebook-branded login form with email or phone and password fields, plus a free followers promotion