Mixed-script / IDN look-alike domains. With the isolate-unicode-domains policy ON (default) these open in a VIYUH disposable browser; plain ASCII and pure single-script IDNs stay silent.
PASS 0 · FAIL 0 / 0
Extension v0.8.7+ reloaded · keep chrome://extensions → VIYUH BDR → service worker open. POS must detect; NEG/FP must stay silent; LIVE = real-host steps.
🧪 4 ways to trigger isolation — all land on café.com (xn--caf-dma.com), which VIYUH isolates and Chrome does not flag, so nothing else interferes.
1 · Address bar — paste in the URL bar → Enter
2 · Click a link (opens a new tab — like a link in Slack / a web page) 🌐 open
3 · Via a redirect chain (a real server 302 chain → café.com; also exercises the relay sensor) 🌐 open via 3-hop redirect
4 · From Gmail — self-email this, then click it in mail: http://xn--caf-dma.com/
Each should pop the VIYUH Isolated Browser. Tip: disable the extension first → café.com loads normally (OFF vs ON).
⚠️ The apple / paypal IDNs (xn--80ak6aa92e, xn--pypal-4ve) trigger Chrome's OWN "Did you mean apple.com?" warning on link clicks — that's Chrome's lookalike protection, not VIYUH. Test those from the address bar, or click Chrome's Ignore to let VIYUH isolate.