1) He already has it on his client side.
2)Use the ip address instead of the URL
3)use Hex characters instead of z's.