🧪 VIYUH BDR TEST — SAFE LOCAL SIMULATION (not a real site, nothing is sent anywhere)
This page pretends to be:
Microsoft 365 / Office sign-in (login.microsoftonline.com)
The trick:
An attacker sits in the middle (Adversary-in-the-Middle). This look-alike page is NOT Microsoft, but its password box quietly POSTs your email + password straight to the REAL Microsoft login server, then relays your 2FA code too — so the attacker captures a live, logged-in session.
✅ With VIYUH BDR ON you SHOULD see:
A full-page BLOCK interstitial ("This page was blocked", detection = aitm). The login should NOT stay visible.
👉 Mark PASS if you saw the block page, FAIL if you didn't.