// Instead of: window.location.href = "https://destination-domain.com"; // Do this to mask the domain: document.body.innerHTML = ` `;