Check the url.
/system-binary-symlink-to-suspicious-location.html