🛡️ VIYUH BDR — Category 2 (Web-Based Attacks)

14 features · per-feature test pages + the master console. Extension v0.8.7+, backend :4004, fixtures :4005.

Reload the extension once to v0.8.7, open chrome://extensions → VIYUH BDR → service worker, then test. LOCAL = testable here · LIVE = needs real hosts/data (steps inside).

📋 Open the Master Test Console (all 14 in one) 🔴 LIVE Tests (real-world steps for all 14)

4 · Suspicious redirects LOCAL

chains + open-redirect → look-alike

5 · eTLD typosquat LOCAL

paypal.co, microsoft.help

6 · Unicode / IDN LOCAL

mixed-script look-alike domains

7 · Free-hosted site LOCAL

brand on weebly/glitch/github.io

8 · Social-referrer LIVE

ad/DM → phish

9 · Legit-service phishing LIVE

SharePoint/Forms/Canva

10 · Multi-hop phishing LIVE

trusted service → phish

11 · Page-content filter LOCAL

12 · Clickjacking frame LOCAL

invisible overlay iframe

13 · Magecart / formjacking LOCAL

checkout skimmer script

14 · Drive-by download LOCAL

dangerous file from risky host

15 · Malvertising / scam LOCAL

fake virus alert / tech-support

16 · Geo-blocking LIVE

high-risk hosting country

17 · Newly-registered domain LIVE

< 30-day-old domain (RDAP)