Mal is a hacker who has noticed that your site performs a redirect after login. Normally this is a useful feature; but your site doesn't check the URL of the redirect location.
