Lots of reasonably decent sites seem to participate in ad networks that apparently allow malicious ads that hijack browsers... It's not clear to me why this is still an unsolved problem after so many years... :-/