Similarly, couldn't an attacker visit a page with lots of Pay-Per-View ads (with whom he/she profits off of)?