They can use scripts to gain access to your device. That's why Snowden and darknet block scripts. These are the scripts Steemit is running on your device right now:

steemit.com
…amazon-adsystem.com
…buysellads.com
…buysellads.net
…cookiebot.com
…doubleclick.net
…google-analytics.com
…google.ca
…google.com
…googletagservices.com
…gstatic.com
…jsdelivr.net