The extension or a website the javascript code is injected to by metamask tried to connect to shapeshift.io which is rated "poor" by talosintelligence.com. The connection request is made approx. 60,000 times a day. The rejected connection request is not reported to the end user. The issue attracted attension to the network administration in our LAN.