Also: we need a test site you can visit that shows if your browser has this malicious functionality enabled.