[□] □ □
[□=□] □ □
[□ | □] □ □
When users click on a URL within an e-mail , the correct URL of the malicious Web site briefly appears in their browser ’ s address bar and is then replaced by whichever URL the phisher designates .