🔗 Multi-Hop Phishing — Test Range

A trusted-service link (SharePoint/Drive/Docs) that leads to a phishing terminus. Open the fixture, wait ~2s for the "via" hop to register, then click through.

⭐ SharePoint share → credential page (the real SquareX scenario)
Open it, then click "Open document" → multi-hop WARN (a SharePoint hop led to a Microsoft credential page) Google-Docs share → look-alike (paypa1.com)
Expect: multi-hop-phishing WARN (a docs.google.com hop led to a PayPal look-alike)