deploy

SUSPICIOUS: the overall workflow fits a deployment skill, but trust is weakened by unverified official docs, a service/domain mismatch, and direct reading/forwarding of deploy credentials. This is not confirmed malware, but it carries medium risk until the vendor relationship and API documentation are independently verified.