diff --git a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/Phishing.java b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/Phishing.java
index edaa77c86..64b9a3213 100644
--- a/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/Phishing.java	
+++ b/ webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/Phishing.java	
@@ -223,7 +223,8 @@ public class Phishing extends LessonAdapter
 					 + "><br><br>Enter Username:<br><input type="text" id="user" "
 					 + "name="user"><br>Enter Password:<br><input type="password" "
 					 + "name = "pass"><br><input type="submit" name="login" "
-					 + "value="login" onclick="hack()"></form><br><br><HR>");
+					 + "value="login" onclick="hack()"></form><br><br><HR>"
+					 + "<BR><BR>You may need to remove the '.' from the http://localhost./");
 		/**
 		 * password<script>function hack(){ alert("Had this been a real
 		 * attack... Your credentials were just stolen.\nUser Name = " +