What's the BEST & SMARTEST WAY to hide/mask the destination URL from paying customers?

That's why things like ASP exist. You don't link them to a simple webpage, you link them to an applet that will check their login status and then write the text to the browser. Of course, you're still going to need to find a way to prevent them from just doing a copy and paste on it.