DrWeb’s URL checker flags:
htxp://anhuiguzhai.com/ - archive JS-HTML
htxp://anhuiguzhai.com//JSTAG_1[449][2a5bf] infected with VBS.Rmnet.2
htxp://anhuiguzhai.com//JSTAG_2[2aa1b][5a] - Ok
htxp://anhuiguzhai.com//JSTAG_3[2b62e][2a5bf] infected with VBS.Rmnet.2
htxp://anhuiguzhai.com//JSTAG_4[5a44c][1c8] - Ok
Alerted by Yandex: http://yandex.com/infected?l10n=en&url=anhuiguzhai.com
→ http://sitecheck.sucuri.net/results/anhuiguzhai.com#sitecheck-details
→ http://www.google.com/safebrowsing/diagnostic?site=anhuiguzhai.com
Site seems down now somehow…
Another detection of the same malcode was described here: https://forum.avast.com/index.php?topic=152504.0