actually what i was trying to say is the opposite of that. What i want is to take advantage of beginners trying to make phishers. So when someone sets up a phisher on say.. t35, the site address gets masked by the time the actual phisher is shown. Is there a way to see the original hosting address that the user sets up?