Well a google safebrowsing detection is sure making detection more obvious, but at the root of the infection lies outdated CMS (WP, Joomla etc. etc.) or free plug-ins and themes that are vulnerable to exploits always in combination with malcode (javascript, PHP, etc.). There are a lot of “dilletants” keeping a website up creating all sort of insecurities for the average visitor. Sloppy hosting is a good second reason, where money comes before security or where no security is to be found at all. >:(

polonus