It is possible that the site was hacked to serve malware.