razii7/GellyPhish ? reverse-engineered prompt

Build me a simple phishing awareness demo for a cybersecurity presentation.

I want it to look like a familiar social media login page so I can show people how convincing a fake site can be, but it should be completely safe and only use fake test data. When someone enters a username and password, save the submission locally as demo content and show a clear admin view or confirmation screen that explains the lesson. After submission, send the user to a harmless destination page that reinforces why checking the URL and domain matters.

Keep it as a small full stack app with a single HTML front end and a Node server behind it, and make sure it runs easily on my local machine. If you need current setup details, look up the latest docs online. Please include simple startup instructions too, since I want to use it for a live expo demo.