Make sure the tone is helpful, not judgmental, and provide actionable information. Maybe include steps to avoid malware if they've already visited such sites, but again, discourage using them.