🎭 Brand-Impersonation — Test Cases

A brand login presented on a NON-brand domain — detected via brand cues in the title / logo, without the page being a full SSO clone.

PASS 0 · FAIL 0 / 0

Each tile is a brand login on its own *.localhost domain. Expected: DETECTION [medium] brand-impersonation: <brand> login page on non-<brand> domain … (MEDIUM — dashboard incident, no block). The negative tile (no brand) must stay silent. Mirror: node bdr/tests/brandimp-range-verify.mjs.