show a locally modified spoofed page (on spoofer's device. not a proxy)