add redirect for phishing test