lilly, thanks for checking on those OT banners. it also occurred to me that some users' sigfiles may contain banners or web-bugs that do the same thing. I have them blocked, but it's possible that members who don't block sigfiles may be getting port-scans or cookie requests from sigfile banners or web-bugs. I also have avatars blocked, but of course it would be extremely unlikely any member would have an avatar image associated with a remote server and any cookie requests.