🧪 VIYUH BDR TEST — SAFE LOCAL SIMULATION (not a real site, nothing is sent anywhere)
This page pretends to be:
PayPal log-in (paypal.com)
The trick:
Same Adversary-in-the-Middle relay, but the off-domain credential POST is set on the SUBMIT BUTTON (a formaction) instead of the form tag — a common way kits hide the real destination. Your password would be sent cross-origin to the real PayPal login endpoint.
✅ With VIYUH BDR ON you SHOULD see:
A full-page BLOCK interstitial ("This page was blocked", detection = aitm).
👉 Mark PASS if you saw the block page, FAIL if you didn't.