There are also lists one can find of open proxy servers, they’re all probably malicious but if just getting a single file via https… it would be non-incidental to override the certificate check, so these gutter proxy sharks are probably not at that level unless a major state actor wants you.