Facebook 2FA phish arrives just 28 minutes after scam domain created

Apart from the incorrect URL, which is disguised by the fact that it starts with the text facebook.contact, so it might pass muster if you’re in a hurry, there aren’t any obvious spelling or grammatical errors in the phishing message.