Mal sends this URL to Vic in an email. The link is to your website, which is not block-listed as a malicious site by Vic's email provider, so no alarms go off when the email is scanned.