Strip subdomains when finding credentials by URL