Yes, get a sniffer like Ethereal ( free at www.ethereal.com), capture your browser's interaction with the site. The popup is likely just a javascript confirmation, could be on the same page, or be sent as a response, then redirect. All these will be obvious after you look at the source of the page and at what goes on the wire.