Turn legit URL's in something phishy