This page pretends to be: a Google "Sign in" popup window.

The trick: this whole "browser window" is FAKE — drawn inside the webpage so you trust the https://accounts.google.com address. You are NOT on google.com.

✅ With VIYUH BDR ON you SHOULD see: a full-page BLOCK warning (Browser-in-the-Browser, high severity).

👉 Mark PASS if you saw the block, FAIL if the login just sat there.