🧪 VIYUH BDR TEST — SAFE LOCAL SIMULATION (not a real site, nothing is sent anywhere)
This page pretends to be:
Microsoft sign-in served through an Evilginx reverse-proxy kit
The trick:
Evilginx is an Adversary-in-the-Middle toolkit that proxies the REAL login page to you and relays your password + 2FA to steal a live session. This page carries the tell-tale fingerprints such kits leave behind (an evilginx meta tag and an evilginx script reference). That fingerprint alone is enough to flag the page.
✅ With VIYUH BDR ON you SHOULD see:
A full-page BLOCK interstitial ("This page was blocked", detection = aitm, "Reverse-proxy phishing kit detected").
👉 Mark PASS if you saw the block page, FAIL if you didn't.