🧪 VIYUH BDR TEST — SAFE LOCAL SIMULATION (not a real site, nothing is sent anywhere)
This page pretends to be:
Google account sign-in (accounts.google.com)
The trick:
Adversary-in-the-Middle phishing. This is a fake Google page on someone else's domain, but the password field POSTs your credentials cross-origin to the REAL Google login server. The attacker relays everything, including your 2FA, and steals the live session cookie.
✅ With VIYUH BDR ON you SHOULD see:
A full-page BLOCK interstitial ("This page was blocked", detection = aitm).
👉 Mark PASS if you saw the block page, FAIL if you didn't.