When visiting reddit today some users (including me) have been experiencing a popup to a suspicious domain straight after load of reddit.com and when interacting with posts. I'm concerned such a high value XSS would be being used for something more serious than spam ad clicksReddit security team are aware
(I will avoid linking to relevant reddit posts for obvious reasons but you can find them on my account /u/haxiomic)