Check the url.
/network-activity-to-a-suspicious-top-level-domain.html