Risky site opened FROM a social network. Detection now reads the tab source (the page you clicked from / the tab that opened this one), so it fires even when the platform strips the Referer (LinkedIn, Facebook, Instagram). LIVE = needs a real social account.
PASS 0 · FAIL 0 / 0
Reload the extension · keep chrome://extensions → VIYUH BDR → service worker open — that DETECTION [high] social-referrer: line is the ground truth. social-referrer is a contributing signal, so the dashboard headline may show free-host isolation or suspicious-redirects — the page may isolate; that's fine. POS = the console line appears; NEG = it does NOT. Use a clean free host like octocat.github.io for the least noise.