The authentication process at http://btwaf-wp.bt.cn/wp-login.php is confirmed, yet it can be bypassed through http://btwaf-wp.bt.cn//wp-login.php.
A mere addition of a slash manages to bypass the verification, raising questions about its effectiveness.