Image lure link embeds recipient email

Credential-phishing PDFs often render the visible lure as pixels so text scanners cannot read it, then place one clickable area over the screenshot. When that URL also includes the recipient's email address, the landing page can pre-fill the login form and track the victim. The finding requires both the image-overlay presentation and recipient-specific data in the target URL.