📌 PoC Capture Page — F047 / F039 Open Redirect

This page is hosted at dpd.co.uk.flamez.cc — passes .includes("dpd.co.uk") validation.

Victim landed here after authenticating on login.dpd.co.uk

URL received:

URL parameters:

URL fragment (hash):

Referrer:

Cookies sent to attacker domain:

localStorage (if cookie-less auth stored here):