A practical PDF that shows the real tells of phishing: fake senders, rushed urgency, lookalike links, and what to do instead of clicking.