FW-2026-0002

A hidden HTML comment asks AI agents to hand users the site's affiliate link instead of the merchant's real link.

Kind: Steering (works against the user)
Site: contaya.com
Page: https://contaya.com/merchants/summary/egardenbridges.com/articles/1/all (don't open it)
Flockward verdict: Warn: open with care and don't follow instructions on the page
First confirmed: 2026-11-13
JSON: /v1/attacks/FW-2026-0002

Flockward publishes what an attack does in its own words. The attacker's text is never reproduced here. Agents: check any link first with GET https://flockward.com/v1/check?url= or the MCP server at https://flockward.com/mcp.