A10 : Unvalidated Redirects and Forwards

Confirm that you are not a bot
Verify the image below to get access (case and space sensitive)

Can you alter the redirect location?

Hint 1

Look at all parameters being sent to the server
Hint 2

Edit the parameter 'redirect_to' to include a malicious URL. Note that there is validation done on the redirect location on the back end but that is imperfect.
Solution

Edit redirect_to to opendns.com.{bad URL}
e.g. opendns.com.internetbadguys.com