User Deception with Decoy Website

Preparation-only steps for a decoy login form in an authorized security exercise. Before any user-facing delivery or submission testing, written rules of engagement must define the approved audience, scope, schedule, allowed activity, and data-handling requirements; resolve applicable privacy, notice, or consent requirements. These commands only write and open a local HTML file; they do not host or deliver it, configure or verify a receiver, or capture credentials.