A person reading a hostile page is not compromised by reading it. An agent is deciding what to do next on the basis of what the page says.