You are being redirected to
./wp-content/uploads/2017/08/remote_exec.gif