I don't understand why they refer to the list of 192 URLs that all turned out to be legitimate as "IOCs" Why would a device reaching out to bing/wikipedia/medi

I don't understand why they refer to the list of 192 URLs that all turned out to be legitimate as "IOCs" Why would a device reaching out to bing/wikipedia/medium be considered an indicator of compromise, or even a suspected IOC?