I'm not sure what type of 'bad sites' you're looking to find (popups, browser hijackers, malware-laden downloads, illegal content, installation of malicious ActiveX controls, placement of tracking cookies, etc), and personally I wouldn't recommend going to any. Instead, I'd go to a number of sites that test your security software by running port scans and such. Here are a few good ones:
* HackerWatch
* Security Metrics
* Sygate
* DSL Reports
Aside from those, if your security software is supposed to hide your IP address, system information, etc, click here to find out what's really visible to others.
Hope this helps,
John
I'm trying out the Socket Shield program. Anyone ever use it and does anyone know of any bad sites to test this program out?

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic