this could be better if it used subdomains to an evil extent - extract the main domain intended and use that:

google.com => google.phishy.pc-helper.xyz/whatever-bullshit-key-they-need

Bonus points if it works for any subdomain.

Extra bonus points for a subdomain that includes https and www (e.g. https.www.google.com.phishy.pc-helper.xyz)