A Google white paper analyzing web-based malware has reported that nearly a half-million URLs contain malicious code.