40% of malicious URLs were found on good domains