Accually there's several ways, XSS for example. But I agree that there's something other that's not ok. Compromised client (probably a computer) or a compromis

Accually there's several ways, XSS for example. But I agree that there's something other that's not ok. Compromised client (probably a computer) or a compromised router is my guesses.