someone on attacker.com can make a HTML page