🔥 Fire-all — populate the dashboard

One click opens every auto-firing fixture so all detections land in /bdr. Keep the SW console + dashboard open.

⚠️ Chrome may block multiple pop-ups. If only one tab opens: click the pop-up-blocked icon in the address bar → Always allow for this site → press Fire all again. Or just click the per-feature links below.

#11Page-content filter — login + lure text → WARN (auto)open

#12Clickjacking — cross-origin invisible overlay → banner (auto)open

#13Magecart — skimmer script on checkout → banner (auto)open

#15Malvertising — fake-virus / prize scam → WARN (auto)open

#14Drive-by — needs ONE click on "Update now" inside the pageopen → click Update now

Live-only (not here — need real conditions): #7 free-host · #8 social-referrer · #9 legit-service · #10 multi-hop · #16 geo · #17 newly-registered. Look-alike/redirect ones (#4/#5/#6) need the :4004 backend or real domains.

After firing: open /bdr → you should see page-content-filter, clickjacking-frame, magecart-formjacking, malvertising (+ malicious-script-driveby once you click Update now).