email-verification

SUSPICIOUS: the workflow is broadly aligned with email verification, but it leaves the verification provider and documentation source unconstrained, so API credentials and contact data may be sent to an unintended third party. No malware or installer abuse is present; risk is mainly from unspecified external endpoints and optional autonomous lead deletion.