Also seems some kind of ID is encoded in the URL he got redirected to after visiting the initial link, as well as the field names.