🔳 VIYUH BDR — QR / Quishing test pages

These pages mimic real phishing emails and websites that hide a fake link inside a QR code. With the VIYUH BDR extension turned ON, the bad QR codes get blurred and stamped with a "Blocked by VIYUH BDR" badge — and the page is NEVER fully blocked. Open each page, read its top banner, and mark PASS/FAIL.

What "PASS" looks like:
• On the RED (must-detect) pages → the QR should be blurred + badged; the page stays usable (no full-page block).
• On the GREEN (safe control) pages → the QR should stay sharp and scannable; BDR stays silent.
Make sure the extension is loaded and turned ON before you start.
Must detect — QR should be blurred + badged
Microsoft — "verify your identity" page
QR hides micros0ft.com (zero, not "o"). Expect: QR blurred + badge.
EXPECT: QR BLURRED
Outlook inbox — "IT Helpdesk: reset your password" email
QR-in-email hides micros0ft.com. Expect: QR blurred + badge, inbox stays usable.
EXPECT: QR BLURRED
PayPal — "confirm your account" page
QR hides paypa1.com (the number 1). Expect: QR blurred + badge.
EXPECT: QR BLURRED
Amazon — "delivery problem, pay a fee" page
QR hides amazon-secure.com (combosquat). Expect: QR blurred + badge.
EXPECT: QR BLURRED
Gmail inbox — "PayPal: unusual activity" email
QR hides paypal.com.account-verify.xyz (deceptive subdomain). Expect: QR blurred + badge.
EXPECT: QR BLURRED
Safe controls — QR should stay scannable (BDR silent)
GitHub — two-factor authentication setup
QR decodes to the real github.com. Expect: nothing flagged, QR stays scannable.
EXPECT: STAYS CLEAR
Event ticket — entry QR + band photo (false-positive guard)
Safe github.com QR next to an ordinary photo. Expect: nothing blurred at all.
EXPECT: STAYS CLEAR