Detecting Open Redirect Attacks

I found all the answers, but I couldn’t find the answer to the question in the picture. I actually found the answer as k**_h***@cyberexam.io**, and all indicators suggest it’s correct, but it’s not being accepted.

the email you found is not the answer, notice that the attacker entered another credential and redirected malicious url