Nearly 40 percent of good domains carry malicious URLs. 68 percent of the infections are detected on the consumer endpoints, versus 32 percent on business endpoints. Even phishing websites use SSL certificates and HTTPS to trick users into believing they are genuine. Financial institutions seem to be the favorite for the phishing developers, as they believe impersonating them makes people fall easily. A third of malware tries to install itself in %appdata% folders. These locations are prime for hiding malware because these paths are in every user directory with full user permissions.”]
Source: https://hackercombat.com/beware-even-good-domains-also-carries-malicious-urls/