URL for downloading decoy freight rate confirmation PDF displayed to victim while malware executes in background