@SeanWrightSec It was sent to your phone, so use a phone UA. With a UA indicating edge on android, I get this. That php script redirects to another, which sends me onto evri. If I indicate chrome/android the path is different, but still takes me to evri. They're targetting a specific UA https://twitter.com/bentasker/status/1564566843054034945/photo/1