Detected presence of files containing URLs that use suspicious top-level domains. (x1)

Detected presence of placeholder credentials within network protocol strings. (x2)

Detected presence of commonly distributed sensitive data. (x2)