kodemari.info - URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned kodemari.info and returned a unknown verdict (score 6). The page resolved to 162.43.116.118 on XSERVER Inc. in JP. The domain was registered 5253 days ago through XServer, Inc.. 4 domains and 1 IP were contacted, over 6 HTTP requests. 3 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 9%
- Scanned URL:
http://kodemari.info/data/files/9120641447.pdf - Domain: kodemari.info · IP: 162.43.116.118 · AS131965 · JP
- Server: nginx
- Page title: ページが見つかりませんでした – こでまり保育園
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: XServer, Inc. · domain age 5253 days · created 2012-04-02
- HTTP requests captured: 6
- Scan tier: fast · observed 2026-08-20 21:46:23 UTC
Malware communicating with this URL (3)
These samples were observed contacting or being served from kodemari.info. Each links to its full analysis.
- Phishing - referenced ·
865fd83457296055f0c074fe9f2e8ec0· first seen 2026-08-20 - Phishing - referenced ·
6198c51d431ea856bfbb3db28715e5af· first seen 2026-08-15 - Phishing - referenced ·
29af349d01a1af08758dedc6384fb918· first seen 2026-08-14
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Served over plaintext HTTP
Detected technologies
- Nginx
- WordPress
- Google Analytics
Contacted infrastructure
- 162.43.116.118 - AS131965 XSERVER Inc. (Japan)
Observed indicators
- kodemari.info
- www.googletagmanager.com
- www.city.funabashi.lg.jp
- parent.kodemari.info
- 162.43.116.118
- http://kodemari.info/data/files/9120641447.pdf
- https://kodemari.info/feed/
- https://kodemari.info/comments/feed/
- http://kodemari.info/wp/wp-content/themes/swell/build/css/swell-icons.css?ver=2.7.4.1
- http://kodemari.info/wp/wp-content/themes/swell/build/css/main.css?ver=2.7.4.1
- http://kodemari.info/wp/wp-content/themes/swell/build/css/blocks.css?ver=2.7.4.1
- http://kodemari.info/wp/wp-content/themes/swell/build/css/modules/parts/footer.css?ver=2.7.4.1
- http://kodemari.info/wp/wp-content/themes/swell/build/css/modules/page/404.css?ver=2.7.4.1
- http://kodemari.info/wp/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6
- http://kodemari.info/wp/wp-content/themes/swell_child/style.css?ver=2026070840038
- http://kodemari.info/wp/wp-content/themes/swell/build/css/noscript.css
- https://kodemari.info/wp-json/
- https://www.googletagmanager.com/gtag/js?id=G-Q5DH7RH4F1
- https://kodemari.info/wp/wp-content/uploads/2022/03/cropped-favicon-32x32.png
- https://kodemari.info/wp/wp-content/uploads/2022/03/cropped-favicon-192x192.png
Other scans of kodemari.info (1)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 20 Aug 2026 - unknown
Questions about kodemari.info
- Is kodemari.info safe?
- The scan of kodemari.info on 20 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with kodemari.info?
- 3 analysed samples communicate with this URL, including Phishing.
- How was kodemari.info checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of kodemari.info
Scanned on MalwareAnalyzer by Cyble · Open interactive scan