No, this cannot be done, using frames it is possible to have an outer frame that displays an inner frame, so the content is the inner frame, but the address is that of the outer frame. However this method is (a) annoying, and (b) NOT a security technique. There is nothing you can do to hide the URL that cannot be trivially bypassed. You should rethink your security scheme to something that doesn't depend on hiding the url.