Golden Portal not so shiny

Here is a nice looking “portal”:

Pushes a fake codec, another Mac Trojan

212.117.175.218 is involved in Mac/PC Trojans hosting:

All three domains (keregimme.com, tisearworld.com, viksamon.com)

are registered to:

I will continue to monitor this IP range for more malicious domains.

Warning, those sites are dangerous! Stay away, unless you know what you are doing.

Jerome Segura