urlquery.net
WEBSITE ANALYSIS REPORT

http://metamask.github.io/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document238.5 KB223 ms—
GET200script166.9 KB267 ms—
GET200font44.1 KB167 ms—
GET200font43.5 KB148 ms—
GET404img0 B115 ms—
GET200img18.0 KB303 ms—
GET200script4.8 KB172 ms—
GET200script137.5 KB166 ms—
GET200script169.9 KB170 ms—
GET200script496.4 KB423 ms—
GET404img0 B32 ms—
GET200subdocument134.9 KB212 ms—
GET200script813.5 KB66 ms—
GET200subdocument4.5 KB13 ms—
GET404lazy-img0 B49 ms—
GET404lazy-img0 B58 ms—
GET404lazy-imageset0 B48 ms—
GET200script4.8 KB17 ms—
GET200script137.5 KB16 ms—
GET200script169.9 KB18 ms—
GET200img46.9 KB155 ms—
GET200img2.2 KB140 ms—
GET200script2.0 KB101 ms—
GET404fetch127 B169 ms—
POST200fetch0 B201 ms—
GET200xhr50 B142 ms—
GET200xhr66.0 KB144 ms—
GET200script7.5 KB77 ms—
GET200script62.0 KB72 ms—
GET200script424.8 KB102 ms—
GET200script495.0 KB98 ms—
GET200script65.6 KB112 ms—
GET200fetch5 B34 ms—
GET200fetch307 B141 ms—
GET200subdocument133.8 KB88 ms—
GET200script50.1 KB156 ms—
GET200script69.4 KB156 ms—
GET200script94.3 KB184 ms—
GET200script2.21 MB300 ms—
GET200script9.9 KB146 ms—
GET200xhr152 B166 ms—
GET200xhr7.4 KB145 ms—
GET200xhr106 B145 ms—
GET200xhr433 B150 ms—
GET200stylesheet516.0 KB12 ms—
GET200stylesheet342.0 KB14 ms—
GET200script575.4 KB22 ms—
GET200script1.41 MB45 ms1 alerts

Transaction #76

Request / response

URL

GET HTTPS
https://www.youtube.com/s/player/8a6e7bc4/player_embed_es6.vflset/en_US/base.js

IP / ASN

United States 216.58.201.174

AS15169 · GOOGLE

Requested by
https://www.youtube.com/embed/YVgfHZMFFFQ?&rel=0&sub_confirmation=1&enablejsapi=1&origin=https%3A%2F%2Fmetamask.github.io

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Private YARA rules Hunting_JS_WebAssemblyauditaudit

HTTP headers

Request headers

GET /s/player/8a6e7bc4/player_embed_es6.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/YVgfHZMFFFQ?&rel=0&sub_confirmation=1&enablejsapi=1&origin=https%3A%2F%2Fmetamask.github.io
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 443418
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Apr 2026 07:54:35 GMT
expires: Thu, 08 Apr 2027 07:54:35 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Apr 2026 04:35:51 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 342517
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET200font39.2 KB32 ms—
GET200font39.2 KB43 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot