BDR TEST FIXTURE · simulates a Microsoft login hosted on canva.com
Microsoft
Sign in to continue to Microsoft 365
Expected: VIYUH BDR shows a legit-service-phishing banner — a Microsoft login on canva.com,
which is a Canva service, not Microsoft (credential phishing abusing a trusted platform).