Packet Log - How Yahoo Funds Spyware

PPC advertisers (i.e. Dell)
money

viewers
Yahoo Overture
money

viewers
81.201.104.136
money

viewers
trafficengine.net
money

viewers
SideFind

Packet Log - How Yahoo Funds Spyware - Via SideFind
Ben Edelman

This page gives a packet log of example traffic passing from SideFind, to Trafficengine, to an unknown server (reportedly operated by Copernic/Inktomi), to Yahoo Overture, and finally to a Yahoo Overture advertiser (here, Dell), as shown in the diagram at right. Such traffic may be considered ill-gotten to the extent that the underlying installation of SideFind was nonconsensual or obfuscated, where SideFind targets merchants with their own ads, or where advertisers just don't want traffic originating at vendors like SideFind. See discussion in main article.

In each step of transmissions, yellow highlighting marks redirect instructions, while green highlighting marks the next redirect step.

At each step of the chain of referrals, traffic bears a HTTP Referer header giving the traffic's originating URL (at Sidefind.com). Thanks to these headers, each search intermediary within the chain has actual knowledge of the origin of the traffic. Pink highlighting marks these HTTP Referer headers.

SideFind Sidebar's Search Results Redirect to Trafficengine.net

GET /ist/scripts/log_clicks.php?account_id=106&search_string=computers&timestamp=1125847532& url=aHR0cDovL2ZlZWRzLnRyYWZmaWNlbmdpbmUubmV0L2NsaWNrLmFzaHg%2Fa2V5PWNvbXB1dGVycyZhZHZlcnRpc2 VyPXd3dy5kZWxsNG1lLmNvbSZhaWQ9MTAwNSZjaWQ9MjImcGlkPTEmcG9zaXRpb249MSZjYXJncz1hSFIwY0Rvdkx6Z3 hMakl3TVM0eE1EUXVNVE0yTDJaaGMzUXRZMmRwTDJKell6OWpiMjUwWlhoMFBYSmxaR2x5Sm1GdGNEdHRZVzVrWVc1MF BXTnNaV0Z5Sm1GdGNEdHplVzVrUFNaaGJYQTdZMkYwUFRRd05DWmhiWEE3WkdWMmFXTmxQV2gwYld3bVlXMXdPM0JzZF dkZmFXUTlOalJmTURCZk1EQmZNRjh3WHpBbVlXMXdPM0U5WTI5dGNIVjBaWEp6Sm1GdGNEdHdiM0owWVd4c1lXNW5kV0 ZuWlQxbGJpWmhiWEE3ZFhObGNteGhibWQxWVdkbFBYVnpKbUZ0Y0R0amFHRnVibVZzUFhBMGNDWmhiWEE3ZFhKc1BXaD BkSEE2THk5M2QzYzJMbTkyWlhKMGRYSmxMbU52YlM5a0wzTnlMejk0WVhKbmN6MHhOVXRRYW1jeFRGSlRjVWxMT1dzM1 VIbE5VR2xKVW5aNVpHNW5PVk4zVFZSeGNGbG5jVlJqWnpWQldVVk1ja00xZWtGeU9HbGtZMlo0Y1NVMVJrWnVSV0U1Tl hZd01sRjNiMGgwYVV4SlZsZFFkalZ1SlRWR1QyWkZRV3A1TlZkTE5rY2xNa1JFSlRWR00xbHVRbkJpYjBsUmRHcFRWRT VKZWpWT1pWVTVPVEpMTW5SclRVdFllSGxHYUdKVE9HVlBUSGcyY1ZwT1pGZE9VVUpuVUhwaU9ETjJhMHhJZFV0NE4zZH lkVE42VUVsalJuTklUako1V2lVeVJHNVVlbFZKWkZGM2FVMUtWalptWTI1RE5qVlBSR1pXVlZsYWVtRnBNV0ZyVkUwNF pteGFaMmQ2Y1cwM1lXNVdSV1ZYTnlVeVJHOUVPSFZzZUV0UVpIbFdPWEJMTWpWUFkzZGpkVGRFZW01T2VsRlhXRkJIY2 1SNFkySlNaM0I0TmtVNVZVTXdReVV5UkdzMlRtNWtTV2RKUTIxUWFtSk9XV3RGYUZaTmRDVTFSbmhaVkhwaloxRjNiMj loYm1Wb1pWTmFWVXRvZFhrd1IyOVBPSGwwV2tobFJscEVSaVV5UkdSVlJuZFZZbGMzV2xGR1pVVkdSVmxyVldKRlpuQl NSV000YlhZbE1rUjVjVGRDVEdsSVJ6Sk9lVTE0UmxOME5uSkJUbU0xZVd3emFUWjRhamhoUXpKUWNVNDFTMlpuY25RMl FWbFpNbXBGSlRWR2RXOTZSeko1ZWs0MGFuVTRNU1V5UkVsWGNsZHhTWGwxY0daQk5tczNRVlZIVlU5M1dIbG9NVWw1YW tzNGNUSWxNa1JTUWtSdlJIZHZPWFpaU0VZNFFXWTNObXhTY2todll5VTFSbmxoWW1oaFMxVWxNa1JKV2s4M1NWbEpVRG QyY0djelRrNDJaVGRRUjBaM01GbHlSRlZhTjA1WFFVbFZjazR4VEVsQllXVXpVRTU2VkhablRreEZhMVpOWVZaeFF6Tm tKVEpFWW5wc01rOGxNa1JsZEhGWVVHNHpNRVpzTWpsVlRYQmpVMXB6U213eGRqbGhZVXcwY2paV2NVZHFSRTlYZFdkNV UwUlNWMkpZV2pKbmJuQTNiMVp4UkZnMVZXaGlhelJ4UVNVMVJqbHRObVIxVVRCc1JpVXlSRUVsTWtVbE1rVW1lV0Z5Wj NNOWQzZDNMbVJsYkd3MGJXVXVZMjl0Sm1GdGNEdGtaWE4wUFhkM2R5NWtaV3hzTkcxbExtTnZiU1poYlhBN2NtRnVaej B5Sm1GdGNEdGtiWGhoY21kelBUQXpkVE5vY3psNW
HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
Accept-Language: en-us
Referer: http://www.sidefind.com/results.php
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Host: www.sidefind.com
Connection: Keep-Alive
Cookie: target=_external; user_lang=en; user_skin=simplewhite; origin=sidefind; account_id=106

HTTP/1.1 302 Found
Date: Sun, 04 Sep 2005 15:25:36 GMT
Server: Apache/1.3.33 (Unix) PHP/4.3.10
X-Powered-By: PHP/4.3.10
Set-Cookie: user_lang=en; expires=Tue, 04-Oct-05 15:25:36 GMT; path=/; domain=.xxxtoolbar.com
Cache-Control: no-cache
Location: http://feeds.trafficengine.net/click.ashx?key=computers&advertiser=www.dell4me.com &aid=1005&cid=22&pid=1&position=1&cargs=aHR0cDovLzgxLjIwMS4xMDQuMTM2L2Zhc3QtY2dpL2JzYz9jb250 ZXh0PXJlZGlyJmFtcDttYW5kYW50PWNsZWFyJmFtcDtzeW5kPSZhbXA7Y2F0PTQwNCZhbXA7ZGV2aWNlPWh0bWwmYW1w O3BsdWdfaWQ9NjRfMDBfMDBfMF8wXzAmYW1wO3E9Y29tcHV0ZXJzJmFtcDtwb3J0YWxsYW5ndWFnZT1lbiZhbXA7dXNl cmxhbmd1YWdlPXVzJmFtcDtjaGFubmVsPXA0cCZhbXA7dXJsPWh0dHA6Ly93d3c2Lm92ZXJ0dXJlLmNvbS9kL3NyLz94 YXJncz0xNUtQamcxTFJTcUlLOWs3UHlNUGlJUnZ5ZG5nOVN3TVRxcFlncVRjZzVBWUVMckM1ekFyOGlkY2Z4cSU1RkZu RWE5NXYwMlF3b0h0aUxJVldQdjVuJTVGT2ZFQWp5NVdLNkclMkREJTVGM1luQnBib0lRdGpTVE5JejVOZVU5OTJLMnRr TUtYeHlGaGJTOGVPTHg2cVpOZFdOUUJnUHpiODN2a0xIdUt4N3dydTN6UEljRnNITjJ5WiUyRG5UelVJZFF3aU1KVjZm Y25DNjVPRGZWVVlaemFpMWFrVE04ZmxaZ2d6cW03YW5WRWVXNyUyRG9EOHVseEtQZHlWOXBLMjVPY3djdTdEem5OelFX WFBHcmR4Y2JSZ3B4NkU5VUMwQyUyRGs2Tm5kSWdJQ21QamJOWWtFaFZNdCU1RnhZVHpjZ1F3b29hbmVoZVNaVUtodXkw R29POHl0WkhlRlpERiUyRGRVRndVYlc3WlFGZUVGRVlrVWJFZnBSRWM4bXYlMkR5cTdCTGlIRzJOeU14RlN0NnJBTmM1 eWwzaTZ4ajhhQzJQcU41S2ZncnQ2QVlZMmpFJTVGdW96RzJ5ek40anU4MSUyRElXcldxSXl1cGZBNms3QVVHVU93WHlo MUl5aks4cTIlMkRSQkRvRHdvOXZZSEY4QWY3NmxSckhvYyU1RnlhYmhhS1UlMkRJWk83SVlJUDd2cGczTk42ZTdQR0Z3 MFlyRFVaN05XQUlVck4xTElBYWUzUE56VHZnTkxFa1ZNYVZxQzNkJTJEYnpsMk8lMkRldHFYUG4zMEZsMjlVTXBjU1pz SmwxdjlhYUw0cjZWcUdqRE9XdWd5U0RSV2JYWjJnbnA3b1ZxRFg1VWhiazRxQSU1RjltNmR1UTBsRiUyREElMkUlMkUm eWFyZ3M9d3d3LmRlbGw0bWUuY29tJmFtcDtkZXN0PXd3dy5kZWxsNG1lLmNvbSZhbXA7cmFuZz0yJmFtcDtkbXhhcmdz PTAzdTNoczl5
Keep-Alive: timeout=20, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html

TrafficEngine Redirects to 81.201.104.136

GET /click.ashx?key=computers&advertiser=www.dell4me.com&aid=1005&cid=22&pid=1&position=1& cargs=aHR0cDovLzgxLjIwMS4xMDQuMTM2L2Zhc3QtY2dpL2JzYz9jb250ZXh0PXJlZGlyJmFtcDttYW5kYW50PWNs ZWFyJmFtcDtzeW5kPSZhbXA7Y2F0PTQwNCZhbXA7ZGV2aWNlPWh0bWwmYW1wO3BsdWdfaWQ9NjRfMDBfMDBfMF8wXz AmYW1wO3E9Y29tcHV0ZXJzJmFtcDtwb3J0YWxsYW5ndWFnZT1lbiZhbXA7dXNlcmxhbmd1YWdlPXVzJmFtcDtjaGFu bmVsPXA0cCZhbXA7dXJsPWh0dHA6Ly93d3c2Lm92ZXJ0dXJlLmNvbS9kL3NyLz94YXJncz0xNUtQamcxTFJTcUlLOW s3UHlNUGlJUnZ5ZG5nOVN3TVRxcFlncVRjZzVBWUVMckM1ekFyOGlkY2Z4cSU1RkZuRWE5NXYwMlF3b0h0aUxJVldQ djVuJTVGT2ZFQWp5NVdLNkclMkREJTVGM1luQnBib0lRdGpTVE5JejVOZVU5OTJLMnRrTUtYeHlGaGJTOGVPTHg2cV pOZFdOUUJnUHpiODN2a0xIdUt4N3dydTN6UEljRnNITjJ5WiUyRG5UelVJZFF3aU1KVjZmY25DNjVPRGZWVVlaemFp MWFrVE04ZmxaZ2d6cW03YW5WRWVXNyUyRG9EOHVseEtQZHlWOXBLMjVPY3djdTdEem5OelFXWFBHcmR4Y2JSZ3B4Nk U5VUMwQyUyRGs2Tm5kSWdJQ21QamJOWWtFaFZNdCU1RnhZVHpjZ1F3b29hbmVoZVNaVUtodXkwR29POHl0WkhlRlpE RiUyRGRVRndVYlc3WlFGZUVGRVlrVWJFZnBSRWM4bXYlMkR5cTdCTGlIRzJOeU14RlN0NnJBTmM1eWwzaTZ4ajhhQz JQcU41S2ZncnQ2QVlZMmpFJTVGdW96RzJ5ek40anU4MSUyRElXcldxSXl1cGZBNms3QVVHVU93WHloMUl5aks4cTIl MkRSQkRvRHdvOXZZSEY4QWY3NmxSckhvYyU1RnlhYmhhS1UlMkRJWk83SVlJUDd2cGczTk42ZTdQR0Z3MFlyRFVaN0 5XQUlVck4xTElBYWUzUE56VHZnTkxFa1ZNYVZxQzNkJTJEYnpsMk8lMkRldHFYUG4zMEZsMjlVTXBjU1pzSmwxdjlh YUw0cjZWcUdqRE9XdWd5U0RSV2JYWjJnbnA3b1ZxRFg1VWhiazRxQSU1RjltNmR1UTBsRiUyREElMkUlMkUmeWFyZ3 M9d3d3LmRlbGw0bWUuY29tJmFtcDtkZXN0PXd3dy5kZWxsNG1lLmNvbSZhbXA7cmFuZz0yJmFtcDtkbXhhcmdzPTAz dTNoczl5
HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
Accept-Language: en-us
Referer: http://www.sidefind.com/results.php
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Host: feeds.trafficengine.net
Connection: Keep-Alive

HTTP/1.1 302 Found
Connection: close
Date: Sun, 04 Sep 2005 15:25:31 GMT
Server: Microsoft-IIS/6.0
MicrosoftOfficeWebServer: 5.0_Pub
X-Powered-By: ASP.NET
X-AspNet-Version: 1.1.4322
Location: http://81.201.104.136/fast-cgi/bsc?context=redir&mandant=clear&synd= &cat=404&device=html&plug_id=64_00_00_0_0_0&q=computers& portallanguage=en&userlanguage=us&channel=p4p&url=http://www6.overture.com/d/sr/? xargs=15KPjg1LRSqIK9k7PyMPiIRvydng9SwMTqpYgqTcg5AYELrC5zAr8idcfxq%5FFnEa95v02QwoH tiLIVWPv5n%5FOfEAjy5WK6G%2DD%5F3YnBpboIQtjSTNIz5NeU992K2tkMKXxyFhbS8eOLx6qZNdWNQB gPzb83vkLHuKx7wru3zPIcFsHN2yZ%2DnTzUIdQwiMJV6fcnC65ODfVUYZzai1akTM8flZggzqm7anVEe W7%2DoD8ulxKPdyV9pK25Ocwcu7DznNzQWXPGrdxcbRgpx6E9UC0C%2Dk6NndIgICmPjbNYkEhVMt%5Fx YTzcgQwooaneheSZUKhuy0GoO8ytZHeFZDF%2DdUFwUbW7ZQFeEFEYkUbEfpREc8mv%2Dyq7BLiHG2NyM xFSt6rANc5yl3i6xj8aC2PqN5Kfgrt6AYY2jE%5FuozG2yzN4ju81%2DIWrWqIyupfA6k7AUGUOwXyh1I yjK8q2%2DRBDoDwo9vYHF8Af76lRrHoc%5FyabhaKU%2DIZO7IYIP7vpg3NN6e7PGFw0YrDUZ7NWAIUrN 1LIAae3PNzTvgNLEkVMaVqC3d%2Dbzl2O%2DetqXPn30Fl29UMpcSZsJl1v9aaL4r6VqGjDOWugySDRWb XZ2gnp7oVqDX5Uhbk4qA%5F9m6duQ0lF%2DA%2E%2E&yargs=www.dell4me.com& dest=www.dell4me.com&rang=2&dmxargs=03u3hs9y
Set-Cookie: ASP.NET_SessionId=1cz4a055vhreuj45jkabky45; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 1139

<html><head><title>Object moved</title></head><body>
<h2>Object moved to <a href='http://81.201.104.136/fast-cgi/bsc?context=redir
&mandant=clear&synd=&cat=404&device=html&plug_id=64_00_00
_0_0_0&q=computers&portallanguage=en&userlanguage=us&channel=
p4p&url=http://www6.overture.com/d/sr/?xargs=15KPjg1LRSqIK9k7PyMPiIRvydng
9SwMTqpYgqTcg5AYELrC5zAr8idcfxq%5FFnEa95v02QwoHtiLIVWPv5n%5FOfEAjy5WK6G%2DD%5
F3YnBpboIQtjSTNIz5NeU992K2tkMKXxyFhbS8eOLx6qZNdWNQBgPzb83vkLHuKx7wru3zPIcFsHN
2yZ%2DnTzUIdQwiMJV6fcnC65ODfVUYZzai1akTM8flZggzqm7anVEeW7%2DoD8ulxKPdyV9pK25O
cwcu7DznNzQWXPGrdxcbRgpx6E9UC0C%2Dk6NndIgICmPjbNYkEhVMt%5FxYTzcgQwooaneheSZUK
huy0GoO8ytZHeFZDF%2DdUFwUbW7ZQFeEFEYkUbEfpREc8mv%2Dyq7BLiHG2NyMxFSt6rANc5yl3i
6xj8aC2PqN5Kfgrt6AYY2jE%5FuozG2yzN4ju81%2DIWrWqIyupfA6k7AUGUOwXyh1IyjK8q2%2DR
BDoDwo9vYHF8Af76lRrHoc%5FyabhaKU%2DIZO7IYIP7vpg3NN6e7PGFw0YrDUZ7NWAIUrN1LIAae
3PNzTvgNLEkVMaVqC3d%2Dbzl2O%2DetqXPn30Fl29UMpcSZsJl1v9aaL4r6VqGjDOWugySDRWbXZ
2gnp7oVqDX5Uhbk4qA%5F9m6duQ0lF%2DA%2E%2E&yargs=www.dell4me.com&amp;
dest=www.dell4me.com&rang=2&dmxargs=03u3hs9y'>here</a>.</h2>
</body></html>

81.201.104.136 Redirects to Overture

GET /fast-cgi/bsc?context=redir&mandant=clear&synd=&cat=404&device=html&plug_id=64_00_00_0_0_0&q= computers&portallanguage=en&userlanguage=us&channel=p4p&url= http://www6.overture.com/d/sr/?xargs=15KPjg1LRSqIK9k7PyMPiIRvydng9SwMTqpYgqTcg5AYELrC5zAr8idcfxq% 5FFnEa95v02QwoHtiLIVWPv5n%5FOfEAjy5WK6G%2DD%5F3YnBpboIQtjSTNIz5NeU992K2tkMKXxyFhbS8eOLx6qZNdWNQBg Pzb83vkLHuKx7wru3zPIcFsHN2yZ%2DnTzUIdQwiMJV6fcnC65ODfVUYZzai1akTM8flZggzqm7anVEeW7%2DoD8ulxKPdyV9 pK25Ocwcu7DznNzQWXPGrdxcbRgpx6E9UC0C%2Dk6NndIgICmPjbNYkEhVMt%5FxYTzcgQwooaneheSZUKhuy0GoO8ytZHeFZ DF%2DdUFwUbW7ZQFeEFEYkUbEfpREc8mv%2Dyq7BLiHG2NyMxFSt6rANc5yl3i6xj8aC2PqN5Kfgrt6AYY2jE%5FuozG2yzN4 ju81%2DIWrWqIyupfA6k7AUGUOwXyh1IyjK8q2%2DRBDoDwo9vYHF8Af76lRrHoc%5FyabhaKU%2DIZO7IYIP7vpg3NN6e7PG Fw0YrDUZ7NWAIUrN1LIAae3PNzTvgNLEkVMaVqC3d%2Dbzl2O%2DetqXPn30Fl29UMpcSZsJl1v9aaL4r6VqGjDOWugySDRWb XZ2gnp7oVqDX5Uhbk4qA%5F9m6duQ0lF%2DA%2E%2E&yargs=www.dell4me.com&dest=www.dell4me.com&rang=2 &dmxargs=03u3hs9y HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
Accept-Language: en-us
Referer: http://www.sidefind.com/results.php
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Host: 81.201.104.136
Connection: Keep-Alive

HTTP/1.1 302 Found
Date: Sun, 04 Sep 2005 15:25:37 GMT
Server: Apache
Location: http://www6.overture.com/d/sr/?xargs=15KPjg1LRSqIK9k7PyMPiIRvydng9SwMTqpYgqT
cg5AYELrC5zAr8idcfxq_FnEa95v02QwoHtiLIVWPv5n_OfEAjy5WK6G-D_3YnBpboIQtjSTNIz5NeU992K2tk
MKXxyFhbS8eOLx6qZNdWNQBgPzb83vkLHuKx7wru3zPIcFsHN2yZ-nTzUIdQwiMJV6fcnC65ODfVUYZzai1akT
M8flZggzqm7anVEeW7-oD8ulxKPdyV9pK25Ocwcu7DznNzQWXPGrdxcbRgpx6E9UC0C-k6NndIgICmPjbNYkEh
VMt_xYTzcgQwooaneheSZUKhuy0GoO8ytZHeFZDF-dUFwUbW7ZQFeEFEYkUbEfpREc8mv-yq7BLiHG2NyMxFSt
6rANc5yl3i6xj8aC2PqN5Kfgrt6AYY2jE_uozG2yzN4ju81-IWrWqIyupfA6k7AUGUOwXyh1IyjK8q2-RBDoDw
o9vYHF8Af76lRrHoc_yabhaKU-IZO7IYIP7vpg3NN6e7PGFw0YrDUZ7NWAIUrN1LIAae3PNzTvgNLEkVMaVqC3
d-bzl2O-etqXPn30Fl29UMpcSZsJl1v9aaL4r6VqGjDOWugySDRWbXZ2gnp7oVqDX5Uhbk4qA_9m6duQ0lF-A..
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>302 Found</TITLE>
</HEAD><BODY>
<H1>Found</H1>
The document has moved <A HREF="http://www6.overture.com/d/sr/?xargs=15KPjg1LRSqIK9k7P
yMPiIRvydng9SwMTqpYgqTcg5AYELrC5zAr8idcfxq_FnEa95v02QwoHtiLIVWPv5n_OfEAjy5WK6G-D_3YnBp
boIQtjSTNIz5NeU992K2tkMKXxyFhbS8eOLx6qZNdWNQBgPzb83vkLHuKx7wru3zPIcFsHN2yZ-nTzUIdQwiMJ
V6fcnC65ODfVUYZzai1akTM8flZggzqm7anVEeW7-oD8ulxKPdyV9pK25Ocwcu7DznNzQWXPGrdxcbRgpx6E9U
C0C-k6NndIgICmPjbNYkEhVMt_xYTzcgQwooaneheSZUKhuy0GoO8ytZHeFZDF-dUFwUbW7ZQFeEFEYkUbEfpR
Ec8mv-yq7BLiHG2NyMxFSt6rANc5yl3i6xj8aC2PqN5Kfgrt6AYY2jE_uozG2yzN4ju81-IWrWqIyupfA6k7AU
GUOwXyh1IyjK8q2-RBDoDwo9vYHF8Af76lRrHoc_yabhaKU-IZO7IYIP7vpg3NN6e7PGFw0YrDUZ7NWAIUrN1L
IAae3PNzTvgNLEkVMaVqC3d-bzl2O-etqXPn30Fl29UMpcSZsJl1v9aaL4r6VqGjDOWugySDRWbXZ2gnp7oVqD
X5Uhbk4qA_9m6duQ0lF-A..">here</A>.<P>
</BODY></HTML>

Overture Redirects to Dell

GET /d/sr/?xargs=15KPjg1LRSqIK9k7PyMPiIRvydng9SwMTqpYgqTcg5AYELrC5zAr8idcfxq_FnEa95v02
QwoHtiLIVWPv5n_OfEAjy5WK6G-D_3YnBpboIQtjSTNIz5NeU992K2tkMKXxyFhbS8eOLx6qZNdWNQBgPzb83v
kLHuKx7wru3zPIcFsHN2yZ-nTzUIdQwiMJV6fcnC65ODfVUYZzai1akTM8flZggzqm7anVEeW7-oD8ulxKPdyV
9pK25Ocwcu7DznNzQWXPGrdxcbRgpx6E9UC0C-k6NndIgICmPjbNYkEhVMt_xYTzcgQwooaneheSZUKhuy0GoO
8ytZHeFZDF-dUFwUbW7ZQFeEFEYkUbEfpREc8mv-yq7BLiHG2NyMxFSt6rANc5yl3i6xj8aC2PqN5Kfgrt6AYY
2jE_uozG2yzN4ju81-IWrWqIyupfA6k7AUGUOwXyh1IyjK8q2-RBDoDwo9vYHF8Af76lRrHoc_yabhaKU-IZO7
IYIP7vpg3NN6e7PGFw0YrDUZ7NWAIUrN1LIAae3PNzTvgNLEkVMaVqC3d-bzl2O-etqXPn30Fl29UMpcSZsJl1
v9aaL4r6VqGjDOWugySDRWbXZ2gnp7oVqDX5Uhbk4qA_9m6duQ0lF-A..
HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
Accept-Language: en-us
Referer: http://www.sidefind.com/results.php
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Host: www6.overture.com
Connection: Keep-Alive

HTTP/1.1 302 Found
Date: Sun, 04 Sep 2005 15:25:37 GMT
Server: Apache/1.3.33 (Unix) mod_perl/1.29
Set-Cookie: SessionData=02u3hs9yoaT4tKLixNTUk1sQEAA0MjMydDQ1czM7UD1ODi4vzMoDyGQU6uxgbGzkCuF1kjUxMTiwAOnAc%3D; domain=.overture.com; path=/; expires=Sun, 04-Sep-2005 15:30:37 GMT
Set-Cookie: ConvData=02u3hs9yoajhUOMSCABBBDfwt9R0jJwfiRawCUY4Ma4WeV72epaZJul9HtRkh%2Bb6a1o95gd8CgR2y7rzPWANIsFBBYmQIsfqh5GwTYpC7MEhXMmtd6ADFyYZOzyb%2F1kwP%2B%2FkafHA%3D%3D; domain=.overture.com; path=/; expires=Wed, 02-Sep-2015 15:25:37 GMT
Set-Cookie: UserData=02u3hs9yoaT4tKLixNTUk1sQEAA0MjMydDQ1czM7UD4tCQVIZRTq7GBsbOQK4XKSNTExNXAAymwg%3D%3D; domain=.overture.com; path=/; expires=Wed, 02-Sep-2015 15:25:37 GMT
P3P: CP=" NOI DSP COR CURa ADMa DEVa TAIa PSAa PSDa HISa OTPa OUR STP IND UNI COM NAV INT STA "
Pragma: no-cache
Location: http://landingstrip.dell.com/landingstrip/ls.asp?CID=8278&LID=230155&DGC=ST&DGStor=DHS&DGSite=OVT& Conum=19&K=6VP00&DURL=http://www1.us.dell.com/content/default.aspx?c%3Dus%26cs%3D19%26l%3Den%26s%3Ddhs
Connection: close
Transfer-Encoding: chunked
Content-Type: text/plain