What if a phishing page was generated on the spot?