rules:
  - name: Credentials in a URL
    id: kingfisher.credentials.1
    pattern: |
      (?xi)
      https?:\/\/
      (
        [a-z0-9._~-]+
      )
      :
      (
        [a-z0-9._~-]+
      )
      @
      (
        [a-z0-9.-]+
      )
      (
        \/
        [a-z0-9\/._~-]*
      )?
    min_entropy: 3.0
    confidence: medium
    examples:
      - https://eaRIWNkE:qyOIhJiM@j2LYY414Q5cCYD
    references:
      - https://www.rfc-editor.org/rfc/rfc3986#section-3.2.1