Cookie Kooks Web Pages

By Doctor Electron

Maj. Hog once said, "There are many ways to be a pig. Take web page cookies, for example. They attract ants."

The basic purpose of a cookie is to treat a user visit to a web site as a session with a user ID and timeout. This can be accomplished in a one line cookie.

In this article we see that cookies can be used by web servers to behave as computer virii which maliciously occupy disk space. Most users wish to avoid such virus activity and to remove the virus when found. Ironically, web server use of multiple cookies which may remain on a user's hard drive for years may well be the most widespread form of this type of computer virus-like activity today. In a stunning "plot twist," it is not the cyber-psychopaths perpetrating this clearly virus-like activity, it is rather generally reputable and respected operators of web sites.

The author is not an expert on cookie technology or on internet morality. It does seem, however, that a flip-flop has occurred. Now it seems that the good guys have embraced what was previously (?) thought to be the bad guy stuff, like permanently removing hard drive capacity.

Perhaps the cookie experts would argue that multiple cookies improve the user's experience. While this may be, it is just one example of why WebHogs was written. Namely, to show how servers can use your computer resources. There may be no simple answer here, because servers do provide users with a service which they use voluntarily. On the other hand, any time somebody tries to use my hard drive space for up to 30 years, I call it a malicious intrusion.

In this "blue ribbon" section of the Web Hogs Pen, we have some transcripts from the WebHogs program for cookie fans.


TWELVE:  A baker's dozen.  South Korea wins the Cookie Kooks Competition. 

Set-Cookie: PHPSESSID=4bdec94aea683cf5e2772296a2654190; path=/
Set-Cookie: ck_sos=1; path=/
Set-Cookie: ck_sdb=1; path=/
Set-Cookie: ck_path=..; path=/
Set-Cookie: ck_sid=206; path=/
Set-Cookie: ck_snm=%BD%C5%B6%F3; path=/
Set-Cookie: ck_sgb=%B4%EB%C7%D0%B1%B3; path=/
Set-Cookie: ck_sur=www.silla.ac.kr; path=/
Set-Cookie: ck_sem=chuiup%40mail.silla.ac.kr; path=/
Set-Cookie: ck_pho=c%3A%5Cjob%5Cphoto%5C; path=/
Set-Cookie: ck_pds=c%3A%5Cjob%5Cpds%5C; path=/
Set-Cookie: ck_ip=http%3A%2F%2Fjobsilla.ac.kr; path=/
   WARNING: uses 12 cookies. Pigs rooting for info?
   NOTE: Content-Length not specified
   ALERT: tries to run 1 Scripts
   ALERT: 2 document references. 
   ALERT: 1 references to Java scripts
211.206.202.28;JOB;16;80;kook;642;827;;HTTP/1.1 200;Microsoft-IIS/5.0;;12

[Notice host names in the cookies, but not in the reverse DNS lookup.]

ELEVEN - EIGHT cookies may be unlucky numbers.

SEVEN:

Set-Cookie: CISG_USERCOMPANYID=; path=/;
Set-Cookie: CISG_USEREMAIL=; path=/;
Set-Cookie: CISG_USERFIRSTNAME=; path=/;
Set-Cookie: CISG_USERID=; path=/;
Set-Cookie: CISG_USERLASTNAME=; path=/;
Set-Cookie: CISG_USERLOGINNAME=; path=/;
Set-Cookie: TESTCOOKIE=Cookie+Test; path=/;
   WARNING: uses 7 cookies. Voyerism lives!
   NOTE: Content-Length not specified
   ALERT: tries to run 1 Scripts
   ALERT: defines 3 functions. 
   ALERT: 2 references to Java scripts
   NOTE: May require Login. 
208.246.101.221;ip-221.net-101.firstam.com;13;80;kook;452;4087;;HTTP/1.1 200;Microsoft-IIS/5.0;;7

[Above, doesn't firstam.com need the mother's last name, too?]

SIX:

Set-Cookie: Source=INC; path=/
Set-Cookie: BrowserVer=0%2E0; expires=Sun, 27-Oct-2002 06:46:12 GMT; path=/
Set-Cookie: Browsertype=Default; expires=Wed, 27-Nov-2002 06:46:12 GMT; path=/
Set-Cookie: NI=2; expires=Wed, 27-Nov-2002 06:46:12 GMT; path=/
Set-Cookie: UserId=%2DTGrVwY7holCZCw400XP; expires=Wed, 27-Nov-2002 06:46:12 GMT; path=/
Set-Cookie: ASPSESSIONIDGQGGGMAK=DAIBMAMDIOAGLHNNNHEDFOOC; path=/
   WARNING: uses 6 cookies. Are they looking in your window, too?
217.22.0.175;;0;80;kook;497;0;0;HTTP/1.1 200;Microsoft-IIS/5.0;;6

[Note the use of the "%" notation for hex values of bytes in cookies.]

FIVE:

Set-Cookie: BbyAuthNp=CheckId=xxxxxxxxxxxxxxxx; path=/
Set-Cookie: BbyAuthP=A=N&S=N; expires=Fri, 21-Nov-2036 06:00:00 GMT; domain=.bestbuy.com; path=/
Set-Cookie: BbyOnlineStore=SessionHash=9cb581c755f806c0&SessionId=6829fb05; expires=Fri, 21-Nov-2036 06:00:00 GMT; domain=.bestb
Set-Cookie: BsktDB=BsktLBS=LBS1; expires=Fri, 21-Nov-2036 06:00:00 GMT; domain=.bestbuy.com; path=/
Set-Cookie: ASPSESSIONIDQQGQGSQU=JGFGLGABLFAPHGKCEPCPNCDI; path=/
   WARNING: uses 5 cookies. Are they looking in your window, too?
   ALERT: tries to run 9 Scripts
   ALERT: defines 22 functions. Pig prints found
   ALERT: 6 document references. Fat enough?
   ALERT: 31 window references. 
   WARNING: 75 references may send data to web server. Privacy lost.
   ALERT: 28 references to Java scripts
   WARNING: Tracks 2 mouse movements. 
64.14.230.86;www.bestbuy.com;106;80;kook;411;67973;67973;HTTP/1.1 200;Microsoft-IIS/5.0;;5

[Thanks, bestbuy.com, for trying to store "xxxxx...,etc" on my computer.]

[Note cookies that "expire" in year 2036.  Good to know that we will 
 be right here with the same computer after more than 30 years.]

Set-Cookie: LOANOFFICEREMAIL=; path=/;
Set-Cookie: LOANOFFICERID=; path=/;
Set-Cookie: LOANOFFICERNAME=; path=/;
Set-Cookie: LOANOFFICERNAMEPOSSESSIVE=; path=/;
Set-Cookie: LOANOFFICERURL=; path=/;
   WARNING: uses 5 cookies. Privacy lost.
   NOTE: Content-Length not specified
   ALERT: tries to run 6 Scripts
   DANGER: downloads 4 .js programs! Hacker ploy?
   ALERT: 2 document references. Pig prints found
   WARNING: 63 references may send data to web server. Unplug your microphone.
   ALERT: 6 references to Java scripts
   NOTE: May require Login. This one may be 5-10 in the slammer.
170.135.241.4;;40;80;kook;410;29715;;HTTP/1.1 200;Microsoft-IIS/4.0;;5

[Above, no DNS name, but "LOANOFFICER" suggests they lend money.  In this and
other examples here, it appears that some remote hosts want distributed storage
of their databases on user hardware.  Maybe they can't afford to buy hard drives.]

Set-Cookie: CFID=894923; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/;
Set-Cookie: CFID=894923; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/; domain=.94.39.205;
Set-Cookie: CFMAGIC=894923%3A16933914; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/; domain=.94.39.205;
Set-Cookie: CFTOKEN=16933914; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/;
Set-Cookie: CFTOKEN=16933914; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/; domain=.94.39.205;
   WARNING: uses 5 cookies. Voyerism lives!
   NOTE: Content-Length not specified
   ALERT: tries to run 2 Scripts
   DANGER: tag contains .REG  
   DANGER: downloads 1 .js programs! 
   ALERT: defines 1 functions. 
   ALERT: 3 document references. We've got a Hog Fest.
   WARNING: 60 references may send data to web server. Voyerism lives!
   ALERT: 4 references to Java scripts
64.94.39.205;www.hardwarestore.net;37;80;kook;407;26264;;HTTP/1.1 200;Microsoft-IIS/5.0;;5

[Thank you, hardwarestore.net, I hope I'm here 35 years from now.]

Set-Cookie: CFGLOBALS=HITCOUNT%3D1%23LASTVISIT%3D%7Bts+%272002%2D08%2D26+22%3A44%3A06%27%7D%23TIMECREATED%3D%7Bts+%272002%2D08%2
Set-Cookie: CFID=5176054; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/;
Set-Cookie: CFTOKEN=84650017; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/;
Set-Cookie: ASINFO=9eb0fe6f61c8c21eb3c6463529f7e58c4bb1dbd438579714d530fa75885035d16e217b6501d0e7301000nP0ao030004gQp9h007dj4Tdz
Set-Cookie: CNBOOK=AS-FT-20000nP0ao7juUw8XiEWfn1U7l;path=/;expires=Fri, 31 Dec 2010 00:00:01 GMT
   WARNING: uses 5 cookies. Are you dressed?
   NOTE: Content-Length not specified
   ALERT: tries to run 2 Scripts
   ALERT: defines 2 functions. Maj. Hog's in town.
   ALERT: 2 window references. 
   WARNING: 34 references may send data to web server. Taking candy from a stranger?
   ALERT: 3 references to Java scripts
   NOTE: May require Login. 
199.164.160.3;www.sharp.com;18;80;kook;445;24196;;HTTP/1.1 200;Microsoft-IIS/4.0;;5

[If you translate some of that %xx notation, it might say, "joke on you."
I wonder if one could code a short malicious script in cookies.]

FOUR:

Set-Cookie: CFID=1183227; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/; domain=.46.120.10;
Set-Cookie: CFMAGIC=1183227%3A46613583; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/; domain=.46.120.10;
Set-Cookie: CFTOKEN=46613583; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/; domain=.46.120.10;
Set-Cookie: POPUPCHECK2=yes; expires=Thu, 26-Sep-2002 01:33:44 GMT; path=/;
   WARNING: uses 4 cookies. Big Brother knows best.
   NOTE: Content-Length not specified
   ALERT: tries to run 7 Scripts
   DANGER: tag contains SCRIPTS  
   DANGER: downloads 3 .js programs! Hog of the Year?
   ALERT: 8 document references. Hey, it's their PC, not yours.
   ALERT: 4 window references. Elect to Hall of Shame?
   WARNING: 1 references may send data to web server. 
   ALERT: 17 references to Java scripts
   WARNING: Tracks 26 mouse movements. Web-based spyware?
12.46.120.10;;67;80;kook;440;11829;;HTTP/1.1 200;Microsoft-IIS/5.0;;4

Set-Cookie: WEBTRENDS_ID=206.48.61.152-2719574608.29511052; expires=Fri, 31-Dec-2010 00:00:00 GMT; path=/
Set-Cookie: TLTSID=EB75C01443534CA27C0A4D8CADA0C3C5z0; path=/
Set-Cookie: TLTHID=EB75C01443534CA27C0A4D8CADA0C3C5; path=/
Set-Cookie: TLTUID=EB75C01443534CA27C0A4D8CADA0C3C5; path=/; expires=Tue, 27-08-2012 05:43:12 GMT
   WARNING: uses 4 cookies. Next they may follow you to the bathroom.
   ALERT: tries to run 2 Scripts
   ALERT: defines 17 functions. Doing what?
   ALERT: 19 document references. Weigh this one
   ALERT: 7 window references. Pigs loose!
   WARNING: 11 references may send data to web server. Privacy lost.
   WARNING: Tracks 32 mouse movements. 
162.128.70.41;;56;80;kook;422;29152;29152;HTTP/1.1 200;Microsoft-IIS/5.0;ETAG;4

Set-Cookie: WEBTRENDS_ID=206.48.61.152-2855354608.29511052; expires=Fri, 31-Dec-2010 00:00:00 GMT; path=/
Set-Cookie: TLTSID=A5FE36BA4FFA84510CD0B88FE2DFDB9Bz0; path=/
Set-Cookie: TLTHID=A5FE36BA4FFA84510CD0B88FE2DFDB9B; path=/
Set-Cookie: TLTUID=A5FE36BA4FFA84510CD0B88FE2DFDB9B; path=/; expires=Tue, 27-08-2012 05:43:26 GMT
   WARNING: uses 4 cookies. Web-based spyware?
   ALERT: tries to run 1 Scripts
   ALERT: 1 window references. 
   ALERT: 2 references to Java scripts
162.128.70.43;;8;80;kook;405;262;262;HTTP/1.1 200;Microsoft-IIS/5.0;ETAG;4

Set-Cookie: Apache=pm2p33.cwdom.dm.77491030427061256; path=/; expires=Fri, 24-Aug-12 05:44:20 GMT
Set-Cookie: freecookie[visit_counter]=1; expires=Sat, 28-Sep-2002 05:44:21 GMT; path=/
Set-Cookie: freecookie[last_visit]=1030427061; expires=Sat, 28-Sep-2002 05:44:21 GMT; path=/
Set-Cookie: freecookie[first_visit]=1030427061; expires=Sat, 28-Sep-2002 05:44:21 GMT; path=/
   WARNING: uses 4 cookies. Pigs can be nosey
   NOTE: Content-Length not specified
   ALERT: tries to run 1 Scripts
   ALERT: defines 2 functions. 
   ALERT: 1 document references. 
   WARNING: 2 references may send data to web server. Big Brother knows best.
   ALERT: 2 references to Java scripts
   NOTE: May require Login. Respect privacy rights.
206.224.64.171;;11;80;kook;445;8884;;HTTP/1.0 200;Apache/1.3.9;;4

["freecookie"?  Pay for my hard drive before you start filling it up with trash.]

Set-Cookie: CFGLOBALS=HITCOUNT%3D1%23LASTVISIT%3D%7Bts+%272002%2D08%2D27+01%3A46%3A12%27%7D%23TIMECREATED%3D%7Bts+%272002%2D08%2
Set-Cookie: CFID=110000353550; path=/; domain=.toysrus.com;
Set-Cookie: CFTOKEN=110CE43749EB95911D6BDD8009027BA1F93; path=/; domain=.toysrus.com;
Set-Cookie: SERVER_ASSIGNED=www10; path=/; domain=.toysrus.com;
   WARNING: uses 4 cookies. Are you dressed?
   NOTE: Content-Length not specified
   ALERT: tries to run 1 Scripts
   ALERT: 7 document references. Elect to Hall of Shame?
   WARNING: 1 references may send data to web server. Taking candy from a stranger?
   ALERT: 1 references to Java scripts
206.70.128.250;;14;80;kook;409;7691;;HTTP/1.1 200;Microsoft-IIS/4.0;;4

[No DNS name.  But in the cookies, "toysrus.com"]

Set-Cookie: popupnew4=1; expires=Sun, 23-Feb-2003 06:44:48 GMT; domain=.barnesandnoble.com; path=/
Set-Cookie: browserid=bits=0&aolver=0&version=0&os=0&browser=0; expires=Sun, 23-Feb-2003 05:00:00 GMT; domain=.barnesandnoble.co
Set-Cookie: affiliate=siteId=0; expires=Tue, 27-Aug-2002 07:44:48 GMT; path=/
Set-Cookie: userid=0C3I70MCUP; expires=Tue, 25-Aug-2009 05:44:48 GMT; domain=.barnesandnoble.com; path=/
   WARNING: uses 4 cookies. Are you dressed?
   ALERT: tries to run 2 Scripts
   ALERT: defines 1 functions. 
   ALERT: 7 document references. Piggy bank?
   WARNING: 122 references may send data to web server. Big Brother knows best.
   ALERT: 2 references to Java scripts
208.237.178.21;;29;80;kook;445;56940;56940;HTTP/1.1 200;Microsoft-IIS/5.0;;4

Set-Cookie: CookiePath=%2FDefault%2Easp; path=/
Set-Cookie: VisitSessoinID=151081; path=/
Set-Cookie: RefererID=0; expires=Sun, 01-Sep-2002 04:00:00 GMT; path=/
Set-Cookie: ASPSESSIONIDQQQGQMZO=CGNEFFECOPDEEFBHBMCBNBMI; path=/
   WARNING: uses 4 cookies. Privacy lost.
   ALERT: tries to run 4 Scripts
   ALERT: defines 53 functions. Pigs loose!
   ALERT: 130 document references. Doing what?
   ALERT: 1 window references. 
   WARNING: 2 references may send data to web server. Unplug your microphone.
   ALERT: plays with CLASSID. 
   ALERT: 2 OBJECT points. 
   ALERT: 4 references to Java scripts
   ALERT: uses 1 EMBED tags. 
   WARNING: Tracks 32 mouse movements. Pig parade.
   NOTE: May require Login. 
66.54.162.124;;204;80;kook;445;35382;35382;HTTP/1.1 200;Microsoft-IIS/5.0;;4

THREE:

Set-Cookie: CFGLOBALS=HITCOUNT%3D1%23LASTVISIT%3D%7Bts+%272002%2D08%2D26+23%3A20%3A36%27%7D%23TIMECREATED%3D%7Bts+%272002%2D08%2
Set-Cookie: CFID=146525; path=/;
Set-Cookie: CFTOKEN=79514923; path=/;
   WARNING: uses 3 cookies. Taking candy from a stranger?
   NOTE: Content-Length not specified
   ALERT: tries to run 2 Scripts
   DANGER: downloads 1 .js programs! 
   ALERT: defines 4 functions. 
   ALERT: 3 document references. Pigs loose!
   ALERT: 1 window references. 
   WARNING: 2 references may send data to web server. Sausage, anyone?
   ALERT: 23 references to Java scripts
   WARNING: Tracks 2 mouse movements. 
129.24.219.36;rgis.unm.edu;43;80;kook;512;14351;;HTTP/1.1 200;Microsoft-IIS/5.0;;3

Set-Cookie: IX=199%2E60%2E144%2E210; path=/
Set-Cookie: MX=199%2E60%2E144%2E210; path=/
Set-Cookie: ASPSESSIONIDQQQGGQCU=IOAILMICHGCKGNIDNDHPEDJM; path=/
   WARNING: uses 3 cookies. 
   NOTE: Content-Length not specified
   ALERT: tries to run 1 Scripts
   ALERT: 1 document references. 
199.60.144.6;learning.selkirk.bc.ca;5;80;kook;534;231;;HTTP/1.1 200;Microsoft-IIS/4.0;;3

Set-Cookie: portf=; expires=Sun, 31-Dec-1989 15:00:00 GMT; path=/
Set-Cookie: ASPSESSIONIDQGGQGXWO=EEPFLDIBNNGLNDODCNADJPKN; path=/
Set-Cookie: NGUserID=cae876c6-1304-1030427051-1; expires=Wednesday, 30-Dec-2037 16:00:00 GMT; path=/
   WARNING: uses 3 cookies. Are they looking in your window, too?
   NOTE: May require Login. Do you have an account?
202.214.130.37;portfolio.lycos.co.jp;3;80;kook;541;131;131;HTTP/1.1 302;Microsoft-IIS/5.0;;3

Set-Cookie: CFID=131683; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/; domain=.48.13.6;
Set-Cookie: CFMAGIC=131683%3A77063512; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/; domain=.48.13.6;
Set-Cookie: CFTOKEN=77063512; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/; domain=.48.13.6;
   WARNING: uses 3 cookies. 
   NOTE: Content-Length not specified
   ALERT: tries to run 4 Scripts
   ALERT: defines 8 functions. Maj. Hog lifts a brow
   ALERT: 5 window references. 
   WARNING: 31 references may send data to web server. Big Brother knows best.
   ALERT: 7 references to Java scripts
208.48.13.6;UniformCity.s9-1-0-2-0.ar1.TPA1.gblx.net;31;80;kook;406;20582;;HTTP/1.1 200;Microsoft-IIS/5.0;;3

Set-Cookie: CFGLOBALS=HITCOUNT%3D1%23LASTVISIT%3D%7Bts+%272002%2D08%2D26+22%3A42%3A24%27%7D%23TIMECREATED%3D%7Bts+%272002%2D08%2
Set-Cookie: CFTOKEN=34191525; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/;
Set-Cookie: CFID=539092; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/;
   WARNING: uses 3 cookies. 
   NOTE: Content-Length not specified
"mailto:info@marshallinstruments.com"
216.74.23.50;;3;80;kook;444;5346;;HTTP/1.1 200;Microsoft-IIS/4.0;;3

[No DNS name.  But email reference on web page gives domain.]

Set-Cookie: CurrencyCookie=US; expires=Tue, 27-Aug-02 06:52:05 GMT; path=/
Set-Cookie: CartCookie=bc5d5add1deb780fa6cc16c20b3543d0
Set-Cookie: CustomerCookie=2907ba0fd82a95c11de82911c4863687; expires=Sun, 26-Aug-07 05:52:05 GMT; path=/
   WARNING: uses 3 cookies.
   NOTE: Content-Length not specified
   ALERT: tries to run 1 Scripts
   DANGER: downloads 1 .js programs! One hog in the bag.
   ALERT: 2 references to Java scripts
64.39.21.77;;10;80;kook;404;24552;;HTTP/1.1 200;Apache/1.3.23;;3

Set-Cookie: CFGLOBALS=HITCOUNT%3D1%23LASTVISIT%3D%7Bts+%272002%2D08%2D26+22%3A46%3A55%27%7D%23TIMECREATED%3D%7Bts+%272002%2D08%2
Set-Cookie: CFID=1720963; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/;
Set-Cookie: CFTOKEN=73071581; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/;
   WARNING: uses 3 cookies. Privacy lost.
   NOTE: Content-Length not specified
   ALERT: tries to run 1 Scripts
   ALERT: defines 2 functions. Maj. Hog lifts a brow
   ALERT: 6 document references. 
   WARNING: 8 references may send data to web server. Voyerism lives!
   ALERT: 1 references to Java scripts
   WARNING: Tracks 14 mouse movements. Taking candy from a stranger?
64.78.17.175;intermedia.net;18;80;kook;455;14563;;HTTP/1.1 200;Microsoft-IIS/4.0;;3

Set-Cookie: nordtrial=TRANSFERREDREQUEST=False&TESTCUSTOMER=True; expires=Wed, 04-Sep-2002 00:00:00 GMT; domain=.nordstrom.com;
Set-Cookie: nordstrom=FIRSTNAME=&SHOPPERID=63E475CBE9DF4B648CF6F3F39F169942; expires=Sun, 26-Aug-2012 07:00:00 GMT; domain=.nord
Set-Cookie: SessionUUID=fc793e7b-fecb-448a-b174-00175904721c; path=/; domain=228.164
   WARNING: uses 3 cookies. 
   NOTE: Content-Length not specified
   ALERT: tries to run 3 Scripts
   DANGER: downloads 2 .js programs! Feel lucky?
   ALERT: defines 2 functions. 
   WARNING: 59 references may send data to web server. Next they may follow you to the bathroom.
   ALERT: 9 references to Java scripts
65.203.228.164;;31;80;kook;406;23909;;HTTP/1.0 200;Microsoft-IIS/5.0;;3

Set-Cookie: CFID=428747; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/;
Set-Cookie: CFTOKEN=34613336; expires=Sun, 27-Sep-2037 00:00:00 GMT; path=/;
Set-Cookie: ISON=1; path=/;
   WARNING: uses 3 cookies.
   NOTE: Content-Length not specified
   ALERT: tries to run 1 Scripts
   ALERT: defines 1 functions. 
   ALERT: 1 window references. 
"mailto:rr1@pettags.com"
   WARNING: 25 references may send data to web server. Voyerism lives!
   ALERT: 2 references to Java scripts
66.70.66.222;;14;80;kook;420;10365;;HTTP/1.1 200;Microsoft-IIS/5.0;;3

Set-Cookie: sfCustomer=; expires=Tue, 27-Aug-2002 05:49:44 GMT; path=/
Set-Cookie: sfHTTP%5FREFERER=REMOTE%5FADDRESS=206%2E48%2E61%2E152&HTTP%5FREFERER=&REFERER=; expires=Wed, 28-Aug-2002 04:00:00 GM
Set-Cookie: ASPSESSIONIDGGQQHGFU=OMGLIAICAFMKGOOHLNNJPGDD; path=/
   WARNING: uses 3 cookies. Big Brother knows best.
   ALERT: tries to run 4 Scripts
   DANGER: downloads 1 .js programs! 
   ALERT: defines 4 functions. Elect to Hall of Shame?
   ALERT: 19 document references. The other white meat.
   ALERT: 1 window references. 
   WARNING: 14 references may send data to web server. 
   ALERT: 8 references to Java scripts
66.70.8.32;;48;80;kook;450;23500;23500;HTTP/1.1 200;Microsoft-IIS/5.0;;3

Copyright © 2002 Global Services
Original publication: August 27, 2002

Back to Net Census