updated condition for suspicious methods