Here are some points to consider:
Publicly indexed directories: "Index of" pages that might contain backup files or configuration scripts with hardcoded passwords. The Risks of Credential Exposure intitle login password facebook
The Trap: Clicking the link takes the user to a page that looks identical to a Facebook sign-in screen. Here are some points to consider: Publicly indexed
The Result: If a user enters their credentials, they aren't logging in; they are handing their username and password directly to a hacker. they aren't logging in