See: http://killmalware.com/kodama-ob.jp/#
See: http://urlquery.net/report.php?id=1434823560257
Read: http://stackoverflow.com/questions/2191872/php-eval-gzinflate-infection-what-can-the-attack-vector-be
Also consider vulnerabilities in xoops.js: http://www.cvedetails.com/vulnerability-list/vendor_id-1081/product_id-1876/Xoops-Xoops.html
Re: http://fetch.scritch.org/%2Bfetch/?url=http%3A%2F%2Fwww.kodama-ob.jp&useragent=Fetch+useragent&accept_encoding=
& https://sitecheck.sucuri.net/results/www.kodama-ob.jp
polonus