BDR TEST FIXTURE ยท simulates a docs.google.com share that leads to a look-alike

๐Ÿ“„ Invoice_Q3_Shared.pdf

Someone shared a protected document with you. To view it, continue to the secure portal and sign in with your account.

Open the shared invoice โ†’

Expected: clicking the button navigates to paypa1.com (a PayPal look-alike). Because you arrived here "via" a trusted Google Docs hop, VIYUH BDR fires multi-hop-phishing (a trusted-service link led to a look-alike), not just a generic redirect warning.