Very easily, malicious code looking for ways in such as exploit kits, malware, dodgy film streaming websites and football streaming sites are good examples of typical sites for for this sort of thing. Ive got over 20 years experience in dealing with this sort of thing.