Fake.MacOS.Social_09192018

# Referer from zippshare.com leads to Fake Mac OS Spyware infection

1537396413.864195       x.x.x.x 53463   198.134.112.243 80      1       GET     ethfw0370q.com  /f3h3vkfdf?ijzwrwa=48&refer=https://www100.zippyshare.com/v/8EoX6z8t/file.html&kw=["zippyshare","com","-","fit4","rar"]&key=1d3584ff950f38d5b2e10bc2994be620&scrWidth=1920&scrHeight=1200&tz=-7&ship=&pst=&res=4.31&dev=r&adb=n -       Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0  0       3941    200     OK      -       -       -       (empty) -       -       -       -       -       FPwGoZ2qsEwhmcWEx7      text/html

1537396414.018843       x.x.x.x  53466   23.111.224.1    80      1       GET     r.remarketingpixel.com  /stats  http://ethfw0370q.com/  Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0  0       40      200     OK      -       -       -       (empty) -       -       -       -       -       FB4NOi4eZHExZpc399      text/plain

1537396414.066453       x.x.x.x  53463   198.134.112.243 80      2       GET     ethfw0370q.com  /favicon.ico    -       Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0  0       0       200     OK      -       -       -       (empty) -       -       -       -       -       -       -

1537396414.162966       x.x.x.x  53467   198.134.112.243 80      1       GET     ethfw0370q.com  /f3h3vkfdf?shu=77f44aaadee0c16e5fd1fab93775841a3ec705e9e7670cfef3ee34aa8ee928cbf9f060b089ebcc3145066cf9f839d12e82b5fb3bb06f9070b64531e946b4d0e61fdf200fbce45e2194&pst=1537396426&rmtc=t&uuid=c4e69e9a-f27b-424a-a4f2-cb31d2ca7139:3:1&pii=&in=false&refer=https://www100.zippyshare.com/v/8EoX6z8t/file.html&key=1d3584ff950f38d5b2e10bc2994be620&ijzwrwa=48&kw=["zippyshare","com","-","fit4","rar"]&tz=-7&res=4.31&adb=n&scrWidth=1920&scrHeight=1200&ship=&dev=r     http://ethfw0370q.com/f3h3vkfdf?key=7a4f1e968aa7846ef59a816bda8ffa09&psid=14561469      Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0  0       0       302     Found   -       -       -       (empty) -       -       -       -       -
       -       -
1537396414.644504       x.x.x.x  53469   104.18.38.143   80      1       GET     security-alert-malicious-items-detected-errorx10000x1be.error52.xyz     /       http://ethfw0370q.com/  Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0  0       101356  200     OK      -       -       -       (empty) -       -       -       -       -       FJxIeP26SFQsjFkbpa      text/html