🧪 VIYUH BDR TEST — SAFE LOCAL SIMULATION (not a real site, nothing is sent anywhere)
This page pretends to be:
An Okta SSO sign-in served through a reverse-proxy phishing kit
The trick:
Reverse-proxy kits relay your login and 2FA to the real site in real time. They smuggle the victim's proxied session through a hidden field — here a hidden input name="rid" sitting next to the login. That hidden session-relay token is a tell that a phishing proxy kit left behind.
✅ With VIYUH BDR ON you SHOULD see:
A full-page BLOCK interstitial ("This page was blocked", detection = aitm, "Reverse-proxy phishing kit detected (generic-proxy)").
👉 Mark PASS if you saw the block page, FAIL if you didn't.