Trojan.Win32.Sasfis_4539a63f0a

Dynamic Analysis

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

gbadkfeh.exe:1832
nmpgbadk.exe:1092
nmpgbadk.exe:del:1668
rundll32.exe:1564
mpgbadkf.exe:960
4539a63f0a9ee57fe4b6a4b63258697f.exe:468

The Trojan injects its code into the following process(es):

1.exe:1860

File activity

The process gbadkfeh.exe:1832 makes changes in a file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CHEZ8TER\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CHEZ8TER\mario[1].jar (134 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\1.exe (134 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CHEZ8TER\mario[1].jar (0 bytes)

The process nmpgbadk.exe:1092 makes changes in a file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nmpgbadk.exe:del (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CHEZ8TER\5.1.2600_3[1].0_32 (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\svxvmpd\sdxwhnr\wow.dll (102 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\svxvmpd\sdxwhnr\wow.ini (108 bytes)

The process 1.exe:1860 makes changes in a file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\GHISLER\WIN2.exe (15692 bytes)

The process nmpgbadk.exe:del:1668 makes changes in a file system.

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nmpgbadk.exe (0 bytes)

The process mpgbadkf.exe:960 makes changes in a file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\rosighm.dll (75 bytes)

The process 4539a63f0a9ee57fe4b6a4b63258697f.exe:468 makes changes in a file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\gbadkfeh.exe (137 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nmpgbadk.exe (257 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\mpgbadkf.exe (73 bytes)

Registry activity

The process gbadkfeh.exe:1832 makes changes in a system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E4 75 DD C9 70 0D 19 D7 D6 90 48 7D E2 63 43 A8"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing proxy to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

The process nmpgbadk.exe:1092 makes changes in a system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows NT\CurrentVersion\EFS\CurrentKeys]
"numbackupattempts" = "4294967295"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1C 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1066676752"

[HKCU\Software\Classes\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\inprocserver32]
"(Default)" = "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\svxvmpd\sdxwhnr\wow.dll"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "nmpgbadk.exe"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "0B C9 71 41 51 D7 89 B4 53 69 7E A5 D1 85 B9 50"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing proxy to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

The process 1.exe:1860 makes changes in a system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "8F 95 30 70 AC E8 97 1C 4E 73 BF 2E 37 CB 75 0C"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GameServer33" = "%Documents and Settings%\%current user%\Application Data\GHISLER\WIN2.exe⥾"

The process nmpgbadk.exe:del:1668 makes changes in a system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "8F C4 0F 6F EE 49 C8 F3 6B 6A 19 9C 7C B3 24 C6"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1066676752"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "nmpgbadk.exe:del"

The process rundll32.exe:1564 makes changes in a system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "2C 13 DD 56 4F 19 D1 C8 13 AF 81 C3 F8 47 46 6E"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1208111829"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "rundll32.exe"

The process mpgbadkf.exe:960 makes changes in a system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "95 67 2B 9B 14 C5 16 AC C7 E5 96 17 04 73 FF 5E"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\rosighm]
"MaxWait" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\rosighm]
"DllName" = "%Documents and Settings%\%current user%\Local Settings\Application Data\rosighm.dll"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\rosighm]
"Impersonate" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\rosighm]
"Startup" = "rosighm"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\rosighm]
"Asynchronous" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\rosighm]
"vdgjries" = "6C 97 EF C3 B6 CB F7 61 76 F9"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"rosighm" = "rundll32 %Documents and Settings%\%current user%\Local Settings\Application Data\rosighm.dll,rosighm"

Adds a rule to the firewall Windows which allows any network activity:

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp]
"mpgbadkf.exe" = "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\mpgbadkf.exe:*:Enabled:mpgbadkf"

The process 4539a63f0a9ee57fe4b6a4b63258697f.exe:468 makes changes in a system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "8E 5F 3A 53 81 CF DB 77 51 1B E5 D2 C6 56 B6 40"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5c14c4f6-74da-11e2-81b0-000c29ec7fc5}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp]
"gbadkfeh.exe" = "gbadkfeh"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp]
"mpgbadkf.exe" = "mpgbadkf"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp]
"nmpgbadk.exe" = "nmpgbadk"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing proxy to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"

Network activity (URLs)

URL	IP
hxxp://192.168.1.121/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/1
hxxp://95.211.194.79/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/1
hxxp://192.168.1.121/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/0
hxxp://95.211.194.79/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/0
hxxp://192.168.1.121/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/2
hxxp://95.211.194.79/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/2
hxxp://192.168.1.121/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/3
hxxp://95.211.194.79/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/3
hxxp://192.168.1.121/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/5
hxxp://95.211.194.79/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/5
hxxp://192.168.1.121/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/8
hxxp://95.211.194.79/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/8
hxxp://192.168.1.121/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/6
hxxp://95.211.194.79/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/6
hxxp://192.168.1.121/click/?s=0.0&a=THUwz29MnZ9ahSUEmvJAxYmEzrvUkur3iWZjqBCM9L0wMd7hqMi1VZxqSg-Mb2IfJbzbAi5Gdvpmu8OaVDYKx0V9eVUx7r-XO5Qzq0reDrXXSVFTosHGqV2PJugRtt1qjBaLXKX_4n_0reeVLTOh6QjMrK3WF0_sVfxat21rme4bvkufjGCWva8ytDNOPsCqhuhPixaQJ1TE_eXVF5vMOViUtSAcpGeAOIbxqxOBJLaKG4gq5c0h3V6rBvQAcg4h4FdLAMcVHXKXXAfXyIvDCnCOyLaQiTsayBAlt9ryAuwWVXeVhOEwnER-fvOi-WnZ&l=ebmm65KMu6-hC1ZdL3uVu4Cn2lPW171Bskj5NXcJyLkW95hl9pn93-DnlfWJiHI8zefbYx9YvQk_ZbYX1okHHlpMeb0bYQ5NV1iHp3dHY97x4xpIq15MUHcME85-lKSwGQ-41GdSYTFlGRUojAzlgw4rAw3co1PIFDx0GgKz0Ff94pdMu4CEO-aVoUEAiPXRlYbwkJ2_6M2WKNIXlhs_M0YbzRF_zO1uCWTqhfHdHsRdtMVIHlXygxy8jQv6UnyOhvEMEEcgw4U1w6RFlcVeQty8Yg-CHj4iHzx1RCWuQGrMtrnrse_iRcEpmqyiid4AqUHAHF5MluacrQzrImAUIw==
hxxp://c.t.c.adlinker.info/click/?s=0.0&a=THUwz29MnZ9ahSUEmvJAxYmEzrvUkur3iWZjqBCM9L0wMd7hqMi1VZxqSg-Mb2IfJbzbAi5Gdvpmu8OaVDYKx0V9eVUx7r-XO5Qzq0reDrXXSVFTosHGqV2PJugRtt1qjBaLXKX_4n_0reeVLTOh6QjMrK3WF0_sVfxat21rme4bvkufjGCWva8ytDNOPsCqhuhPixaQJ1TE_eXVF5vMOViUtSAcpGeAOIbxqxOBJLaKG4gq5c0h3V6rBvQAcg4h4FdLAMcVHXKXXAfXyIvDCnCOyLaQiTsayBAlt9ryAuwWVXeVhOEwnER-fvOi-WnZ&l=ebmm65KMu6-hC1ZdL3uVu4Cn2lPW171Bskj5NXcJyLkW95hl9pn93-DnlfWJiHI8zefbYx9YvQk_ZbYX1okHHlpMeb0bYQ5NV1iHp3dHY97x4xpIq15MUHcME85-lKSwGQ-41GdSYTFlGRUojAzlgw4rAw3co1PIFDx0GgKz0Ff94pdMu4CEO-aVoUEAiPXRlYbwkJ2_6M2WKNIXlhs_M0YbzRF_zO1uCWTqhfHdHsRdtMVIHlXygxy8jQv6UnyOhvEMEEcgw4U1w6RFlcVeQty8Yg-CHj4iHzx1RCWuQGrMtrnrse_iRcEpmqyiid4AqUHAHF5MluacrQzrImAUIw==
hxxp://192.168.1.121/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/7
hxxp://95.211.194.79/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/7
hxxp://192.168.1.121/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/4
hxxp://95.211.194.79/d/ejuxpvdk/14fef73b34cd650516c7c2b9e23ba813/AA/4
hxxp://192.168.1.121/click/?s=0.0&a=bxsRBkF0bdfjHunl2Gn-txaYMRG0M6zfr1SZuYybWrp7QI7aRdwl0YiMrOEiTmOQHIGB_mtW8_x4pD85seJO1fP7JYy6DLwbGwSYg2hnXLwMynuR491H5_hpnNTZhf7-5hq8Goleegb5xZNCxiyRZdha7atLdFRnTFY934MbTUCLAsxGslw6HgQrLm3amMeSk9HTNBjP61GsaX-3XU9JibY8fIMKN6dGLt0JPZZtoyZb6LQEujA76jNdNDbItPVQrRXhH-UL7dpjB3Yqsnw4idhW0lu_4_QIQvotF-CM1COkQpRNsHzGWuUQyOTFgWJq&l=UnkHl926zq88_nKUchm0-k4nPfLi1dyNOyXJ85pUL8yYXUHgHYG-1Wps-2quNiaf8wzzOmHW1mqiP_nS3R6EDSQkcnUuG404GCbTNIcXF3HVuKFkY84e8kF7lmsupW8H2FPZjbeEdG2Luk6Av5_psFLuCrPgFAOym_QMBP4ZWZI_av4jZLpJOt1PYgPbvbmbo3tfuSrrp7Gv0kBRzSQWAXrxTCwHoZIqLNI2XtkBht680jXiBkbEOHKJZXppqCFH5txorDtjLzKR_CfWY-JavkKGi-21Q1Y7Xh6pz1gxaTh7U-5Vodm_4AJa-jPKIJhDD5r2jg_PQ9rfzIHQLIItkA==
hxxp://c.t.c.adlinker.info/click/?s=0.0&a=bxsRBkF0bdfjHunl2Gn-txaYMRG0M6zfr1SZuYybWrp7QI7aRdwl0YiMrOEiTmOQHIGB_mtW8_x4pD85seJO1fP7JYy6DLwbGwSYg2hnXLwMynuR491H5_hpnNTZhf7-5hq8Goleegb5xZNCxiyRZdha7atLdFRnTFY934MbTUCLAsxGslw6HgQrLm3amMeSk9HTNBjP61GsaX-3XU9JibY8fIMKN6dGLt0JPZZtoyZb6LQEujA76jNdNDbItPVQrRXhH-UL7dpjB3Yqsnw4idhW0lu_4_QIQvotF-CM1COkQpRNsHzGWuUQyOTFgWJq&l=UnkHl926zq88_nKUchm0-k4nPfLi1dyNOyXJ85pUL8yYXUHgHYG-1Wps-2quNiaf8wzzOmHW1mqiP_nS3R6EDSQkcnUuG404GCbTNIcXF3HVuKFkY84e8kF7lmsupW8H2FPZjbeEdG2Luk6Av5_psFLuCrPgFAOym_QMBP4ZWZI_av4jZLpJOt1PYgPbvbmbo3tfuSrrp7Gv0kBRzSQWAXrxTCwHoZIqLNI2XtkBht680jXiBkbEOHKJZXppqCFH5txorDtjLzKR_CfWY-JavkKGi-21Q1Y7Xh6pz1gxaTh7U-5Vodm_4AJa-jPKIJhDD5r2jg_PQ9rfzIHQLIItkA==
hxxp://192.168.1.121/click/?s=0.0&a=BB1abylGg0veR6AGnvLTyjBkCaCT62yeKkoANf0Ifl8g8Zg3AhdlhD2EMqajalYGzWZxB-G3kn6mJFZDuWJnBVDLWenrnHoOxiXARg2ok8s7qOJtpt4v5xIMdK-_BmZ38fBPBEaTOzdfDFEFc1guE5F2gWKqnYwMqgBmuONMPcXAebpFe690oVjVB08TJGkQFxgKwAmeCW9wNIE6DOYfJl2QC9beCEO_tCkySkpwOIbKvD3_WmqOMxkiUaMHBwIlpjhNI2QOLvKizZ_oQ1NHiuPISwI-LkFgIIMWL6kvQxnxPTDLW1FdcsX2OKfTpOGY&l=blovSCSZeYjE_RmKjnQTqohD6gZDgBF-WOZuXV44FAnxkAvSW6DQiVYHShg3g3ZlvFNkRP3qdMnsnhOFUrK07vdKPDE4FFOMrOL3_xYwqln8MHbSFhDpKINhEVLsHJAHIw7zvEc4qW7NQmAsZE2e-Ck9AhwTYD4zREHdXtxwidG1v2DQvLXokXHRKizO42QPwHN3wZO-qDueP6IHQSdhds9DHx5kXpMf6-LTcuGaxFuKU_EXGI9P11Z75au-23-h_wf-B5HgbxPYKJk4H3Dj9rde-hl1aMy47zssWuFUcPTdnFJMFIchRWunIaAZB06AjpuI0Fy2v6TJeZrmiojVHw==
hxxp://c.t.c.adlinker.info/click/?s=0.0&a=BB1abylGg0veR6AGnvLTyjBkCaCT62yeKkoANf0Ifl8g8Zg3AhdlhD2EMqajalYGzWZxB-G3kn6mJFZDuWJnBVDLWenrnHoOxiXARg2ok8s7qOJtpt4v5xIMdK-_BmZ38fBPBEaTOzdfDFEFc1guE5F2gWKqnYwMqgBmuONMPcXAebpFe690oVjVB08TJGkQFxgKwAmeCW9wNIE6DOYfJl2QC9beCEO_tCkySkpwOIbKvD3_WmqOMxkiUaMHBwIlpjhNI2QOLvKizZ_oQ1NHiuPISwI-LkFgIIMWL6kvQxnxPTDLW1FdcsX2OKfTpOGY&l=blovSCSZeYjE_RmKjnQTqohD6gZDgBF-WOZuXV44FAnxkAvSW6DQiVYHShg3g3ZlvFNkRP3qdMnsnhOFUrK07vdKPDE4FFOMrOL3_xYwqln8MHbSFhDpKINhEVLsHJAHIw7zvEc4qW7NQmAsZE2e-Ck9AhwTYD4zREHdXtxwidG1v2DQvLXokXHRKizO42QPwHN3wZO-qDueP6IHQSdhds9DHx5kXpMf6-LTcuGaxFuKU_EXGI9P11Z75au-23-h_wf-B5HgbxPYKJk4H3Dj9rde-hl1aMy47zssWuFUcPTdnFJMFIchRWunIaAZB06AjpuI0Fy2v6TJeZrmiojVHw==
hxxp://192.168.1.121/click/?s=0.0&a=x_y1mJUjWp1TesRCHUIB5aEN1xWuUTaujCjbFanotuAfut83lpraSOOafEwCNJ6wYBc3PyjsWE9ViGIOs_RS0NlnjkoO2wSXB72i4unGB6qI46eKVCripwCgWv_a8vdoNpvPDyR78_XZrYILj1exzuwoy9HPOd7F7df03UIo52QQXYoAAqcv4IYJ7mdLzUjj_XT2m3TloRRc9G8EAkKiqij-BmjADbzLEBkRR5Wp8DcU7mOzOLIFc5y7i2yuUILxbbnPC8pDT0EmSo4ERPL8xPtOwxooSprpgUQ5xzPxjSV_pqujHEbJDMcxkrjCnfp9&l=UFJRbkm8vBovyhUb12g6phctlx4ytJODP-PUqWerrAEQjHGsU5zV6fU4wdxF-GWy3GBxEIBnfV-CWD9s43mfU6G351wHNkiQEpaPy7ogt580DkEg21iO-Bguvg8DATu50EsxhCLuMilk6cBwZHiOaLDQMBHi8Qch9zw-_38sS0lMvJH8D61oJ9-RnQwBHi5dPIW4l_i67cNsRTtKz3FXSlmLM3N54ZRyYXcn-tWrxC5yQijq1FBMD95OryBGzWI0qpbv1SZ-nAExFmWPDJW2eNh8RS-y9fu6Fwo9Z0OInhRSF-3q1A9A1_YZfUBHZlGmfBXVvCQDOa0wGlPezTYNMw==
hxxp://c.t.c.adlinker.info/click/?s=0.0&a=x_y1mJUjWp1TesRCHUIB5aEN1xWuUTaujCjbFanotuAfut83lpraSOOafEwCNJ6wYBc3PyjsWE9ViGIOs_RS0NlnjkoO2wSXB72i4unGB6qI46eKVCripwCgWv_a8vdoNpvPDyR78_XZrYILj1exzuwoy9HPOd7F7df03UIo52QQXYoAAqcv4IYJ7mdLzUjj_XT2m3TloRRc9G8EAkKiqij-BmjADbzLEBkRR5Wp8DcU7mOzOLIFc5y7i2yuUILxbbnPC8pDT0EmSo4ERPL8xPtOwxooSprpgUQ5xzPxjSV_pqujHEbJDMcxkrjCnfp9&l=UFJRbkm8vBovyhUb12g6phctlx4ytJODP-PUqWerrAEQjHGsU5zV6fU4wdxF-GWy3GBxEIBnfV-CWD9s43mfU6G351wHNkiQEpaPy7ogt580DkEg21iO-Bguvg8DATu50EsxhCLuMilk6cBwZHiOaLDQMBHi8Qch9zw-_38sS0lMvJH8D61oJ9-RnQwBHi5dPIW4l_i67cNsRTtKz3FXSlmLM3N54ZRyYXcn-tWrxC5yQijq1FBMD95OryBGzWI0qpbv1SZ-nAExFmWPDJW2eNh8RS-y9fu6Fwo9Z0OInhRSF-3q1A9A1_YZfUBHZlGmfBXVvCQDOa0wGlPezTYNMw==
hxxp://192.168.1.121/click/?s=0.0&a=ZmqElvZSOIUsCpfNGRRMNF9g2WqhkInbHD9hjI6Pjjcxgo_vdMk-HzYW6FzZg4KbqfFHA5Ry34KFU554oonJPLUGHY2EQSUblgXRTDqsBPY4FW9uoac5ffSFNukyF-cAoCO3lQKfT-LPtuDOWXyBLQT5JI0-9XYJVKkzLyF9Kwmb1ZTWWAat41njVG-tVF26y3CNj9yDdN83TO96RaH24hzxUpGm-Q9ejjGhSqTvrAs1kdIXg_M1o8Hjfj9INUtQnpNw_LNwq8AC9GAQJhmhYhFbi7mvx5ZoOfYW6jqSlHs4vAS6iB35ZDwKlZUKhjvX&l=kzGTKo9UEzlouxa7UHF3zsg1OkJHwyhuYyB3XFlUU_YFmZvOgorPLmQR_luM0mYMeq7nlzS0ciZZQteUtbhgAa12wv6gxwDqSJjvS50oUuggoMjNkl1JP3YWodyvyTJZQvTUsmchCLjsH4EbjQ64mshwAj2gBxRXwzUTeNVwoYTNkCpdKDWh7hC5uDCj7jrog-sgvuqc4J3N4rMVgEsWycAfkxeH5JvlZQXgSuD1XO3h6aThOJ8XMhBjL19uL0sOz7Ws9BfuXKvto5C87a4W15nHDjt1IUzDKnEwyvwiaHuIORBChjpDcTzCjD_ZOSveUfqCp2-3XrbTq3gd-G95Gg==
hxxp://c.t.c.adlinker.info/click/?s=0.0&a=ZmqElvZSOIUsCpfNGRRMNF9g2WqhkInbHD9hjI6Pjjcxgo_vdMk-HzYW6FzZg4KbqfFHA5Ry34KFU554oonJPLUGHY2EQSUblgXRTDqsBPY4FW9uoac5ffSFNukyF-cAoCO3lQKfT-LPtuDOWXyBLQT5JI0-9XYJVKkzLyF9Kwmb1ZTWWAat41njVG-tVF26y3CNj9yDdN83TO96RaH24hzxUpGm-Q9ejjGhSqTvrAs1kdIXg_M1o8Hjfj9INUtQnpNw_LNwq8AC9GAQJhmhYhFbi7mvx5ZoOfYW6jqSlHs4vAS6iB35ZDwKlZUKhjvX&l=kzGTKo9UEzlouxa7UHF3zsg1OkJHwyhuYyB3XFlUU_YFmZvOgorPLmQR_luM0mYMeq7nlzS0ciZZQteUtbhgAa12wv6gxwDqSJjvS50oUuggoMjNkl1JP3YWodyvyTJZQvTUsmchCLjsH4EbjQ64mshwAj2gBxRXwzUTeNVwoYTNkCpdKDWh7hC5uDCj7jrog-sgvuqc4J3N4rMVgEsWycAfkxeH5JvlZQXgSuD1XO3h6aThOJ8XMhBjL19uL0sOz7Ws9BfuXKvto5C87a4W15nHDjt1IUzDKnEwyvwiaHuIORBChjpDcTzCjD_ZOSveUfqCp2-3XrbTq3gd-G95Gg==
hxxp://192.168.1.121/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773
hxxp://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773
hxxp://192.168.1.121/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773
hxxp://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773
hxxp://192.168.1.121/sites/diyfashion.com/files/advagg_js/js_ad82d021f783e20d04d79aee88558fbb_1.js
hxxp://diyfashion.com/sites/diyfashion.com/files/advagg_js/js_ad82d021f783e20d04d79aee88558fbb_1.js
hxxp://192.168.1.121/sites/diyfashion.com/files/advagg_js/js_4d587c1eec64ce1a6394adbeb1d678bc_15.js
hxxp://diyfashion.com/sites/diyfashion.com/files/advagg_js/js_4d587c1eec64ce1a6394adbeb1d678bc_15.js
hxxp://192.168.1.121/sites/diyfashion.com/files/advagg_js/js_286bc2d8b6e8e238ce6e5cf258ab55f5_7.js
hxxp://diyfashion.com/sites/diyfashion.com/files/advagg_js/js_286bc2d8b6e8e238ce6e5cf258ab55f5_7.js
hxxp://192.168.1.121/themes/newgc/newgc.css?h
hxxp://d3erqjfwf2w9ka.cloudfront.net/themes/newgc/newgc.css?h
hxxp://192.168.1.121/sites/diyfashion.com/files/advagg_css/css_e831467d02d887fe0fe2065af32e4f7a_5.css
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/advagg_css/css_e831467d02d887fe0fe2065af32e4f7a_5.css
hxxp://192.168.1.121/sites/diyfashion.com/files/advagg_css/css_c7963081a1a852d5dc85f83ff61f621d_2.css
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/advagg_css/css_c7963081a1a852d5dc85f83ff61f621d_2.css
hxxp://192.168.1.121/w/1.0/jstag
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/jstag
hxxp://192.168.1.121/synapse/on.js?usr=diyfashion
hxxp://a1092.g.akamai.net/synapse/on.js?usr=diyfashion
hxxp://192.168.1.121/widgets.js
hxxp://e5903.g.akamaiedge.net/widgets.js
hxxp://192.168.1.121/ajax/libs/jquery/1.3.2/jquery.min.js
hxxp://googleapis.l.google.com/ajax/libs/jquery/1.3.2/jquery.min.js
hxxp://192.168.1.121/sites/all/modules/contrib/views/js/base.js?h
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/all/modules/contrib/views/js/base.js?h
hxxp://192.168.1.121/tags/pixels/dfashion.js
hxxp://a1694.d.akamai.net/tags/pixels/dfashion.js
hxxp://192.168.1.121/misc/drupal.js?h
hxxp://d3erqjfwf2w9ka.cloudfront.net/misc/drupal.js?h
hxxp://192.168.1.121/sites/all/modules/contrib/js_events/js_events.js?h
hxxp://192.168.1.121/sites/all/modules/contrib/views/js/dependent.js?h
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/all/modules/contrib/js_events/js_events.js?h
hxxp://dkfcp51of8gut.cloudfront.net/sites/all/modules/contrib/views/js/dependent.js?h
hxxp://192.168.1.121/misc/ieffb.js?h
hxxp://dkfcp51of8gut.cloudfront.net/misc/ieffb.js?h
hxxp://192.168.1.121/bootstrap/s/dab771c592d269b72e465d8e8271e88f/gossipcenter-com/bootstrap.js
hxxp://e960.b.akamaiedge.net/bootstrap/s/dab771c592d269b72e465d8e8271e88f/gossipcenter-com/bootstrap.js
hxxp://192.168.1.121/themes/newgc/script.js?h
hxxp://d3erqjfwf2w9ka.cloudfront.net/themes/newgc/script.js?h
hxxp://192.168.1.121/misc/adometry.js?h
hxxp://d3erqjfwf2w9ka.cloudfront.net/misc/adometry.js?h
hxxp://192.168.1.121/misc/adsafe.js?h
hxxp://dkfcp51of8gut.cloudfront.net/misc/adsafe.js?h
hxxp://192.168.1.121/sites/diyfashion.com/files/advagg_css/css_add18ac74b8d91c3e8bc0f8f8ec9c8dd_6.css
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/advagg_css/css_add18ac74b8d91c3e8bc0f8f8ec9c8dd_6.css
hxxp://192.168.1.121/w/1.0/arj?ai=705fb8f5-16ec-77b1-d78f-f03ba4c89719&o=9782391371&callback=OX_9782391371&ju=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/arj?ai=705fb8f5-16ec-77b1-d78f-f03ba4c89719&o=9782391371&callback=OX_9782391371&ju=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://192.168.1.121/w/1.0/arj?cc=1&ai=705fb8f5-16ec-77b1-d78f-f03ba4c89719&o=9782391371&callback=OX_9782391371&ju=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/arj?cc=1&ai=705fb8f5-16ec-77b1-d78f-f03ba4c89719&o=9782391371&callback=OX_9782391371&ju=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://192.168.1.121/intellitxt/front.asp?ipid=43219
hxxp://ny1-g007.intellitxt.com/intellitxt/front.asp?ipid=43219
hxxp://192.168.1.121/intellitxt/front.asp?ipid=49609
hxxp://sv1-g014.intellitxt.com/intellitxt/front.asp?ipid=49609
hxxp://192.168.1.121/w/1.0/arj?ai=05511434-f4e8-79dc-dbfa-0ad9c347963b&o=9702287606&callback=OX_9702287606&ju=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12421&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/arj?ai=05511434-f4e8-79dc-dbfa-0ad9c347963b&o=9702287606&callback=OX_9702287606&ju=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12421&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://192.168.1.121/w/1.0/arj?cc=1&ai=05511434-f4e8-79dc-dbfa-0ad9c347963b&o=9702287606&callback=OX_9702287606&ju=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12421&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/arj?cc=1&ai=05511434-f4e8-79dc-dbfa-0ad9c347963b&o=9702287606&callback=OX_9702287606&ju=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12421&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://192.168.1.121/w/1.0/sc?r=http://ox-d.gossipcenter.com/w/1.0/arj?cc=1&ai=05511434-f4e8-79dc-dbfa-0ad9c347963b&o=9702287606&callback=OX_9702287606&ju=http%3A//gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&jr=http%3A//27773.t.c.adlinker.info/%3Fid%3D&pgid=12421&res=1440x900x24&plg=swf%2Cshk%2Cpm&ch=UTF-8&tz=240
hxxp://prod-mkt-d.d.xx.openx.com.akadns.net/w/1.0/sc?r=http://ox-d.gossipcenter.com/w/1.0/arj?cc=1&ai=05511434-f4e8-79dc-dbfa-0ad9c347963b&o=9702287606&callback=OX_9702287606&ju=http%3A//gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&jr=http%3A//27773.t.c.adlinker.info/%3Fid%3D&pgid=12421&res=1440x900x24&plg=swf%2Cshk%2Cpm&ch=UTF-8&tz=240
hxxp://192.168.1.121/click/?s=0.0&a=TKYlxMCTdIzg1HRfrQa9k5RyGFjXUi1TxjdQj1uyeMvXEXpwbJUZd0nokOn4SZ7sngZ0NAbHZa8l35YcJ6c0zGk1kNi1F1U7ORXsGiIWvcUKKPbZuwCWBwd9ebFyUX1KjDoiwNv4qP5OzJdrQaLj1WGfmCHnLrJ_4iDq0XPe5_2gNzx-WaJ1KXbdZXPmbRLRLxsEXmPE27klJLH5tUoEyvstAdMrZxdE7OIEDw79Z5-k1_8yXQhNmRZPAS1CXKSxF8NKAtYf8ucXe1Yl-0QpfECOPZr0nA3SyGuHd7ZFsPpz2hM6Xc4OHvoui96WHtTF&l=zDX1LnIE119XflXdrRvRxwfPFgmlbH22lwk9uhY8mXeIbK0VUCfIPVrodPnzKKrVwu5XgnxU_HDLIxEZUSKH5oEOgLPMDmfm3iK14Ly3pt8geurA7hcPOzuIqLz7Tn0xkAKPd4X5kO1FiWWH_eJTvwhcsHp8bUVVZ-ztJjbmr84U9-trlHRKUZPuKtgw75sW1OPbg9y7aD9UfYO1Rts9qVDFKmx4nmnI42vpGUxMBd_lTkJorVMOmbUPu8vBGWkuKPp3BBwN8DuVxH7yl8QGXAlSTF9fUC0GpP7yyi3OQpu2WpQQA1ig4yqRUn-OwDIic2IuuhnHLwfQPeifPPNXnQ==
hxxp://c.t.c.adlinker.info/click/?s=0.0&a=TKYlxMCTdIzg1HRfrQa9k5RyGFjXUi1TxjdQj1uyeMvXEXpwbJUZd0nokOn4SZ7sngZ0NAbHZa8l35YcJ6c0zGk1kNi1F1U7ORXsGiIWvcUKKPbZuwCWBwd9ebFyUX1KjDoiwNv4qP5OzJdrQaLj1WGfmCHnLrJ_4iDq0XPe5_2gNzx-WaJ1KXbdZXPmbRLRLxsEXmPE27klJLH5tUoEyvstAdMrZxdE7OIEDw79Z5-k1_8yXQhNmRZPAS1CXKSxF8NKAtYf8ucXe1Yl-0QpfECOPZr0nA3SyGuHd7ZFsPpz2hM6Xc4OHvoui96WHtTF&l=zDX1LnIE119XflXdrRvRxwfPFgmlbH22lwk9uhY8mXeIbK0VUCfIPVrodPnzKKrVwu5XgnxU_HDLIxEZUSKH5oEOgLPMDmfm3iK14Ly3pt8geurA7hcPOzuIqLz7Tn0xkAKPd4X5kO1FiWWH_eJTvwhcsHp8bUVVZ-ztJjbmr84U9-trlHRKUZPuKtgw75sW1OPbg9y7aD9UfYO1Rts9qVDFKmx4nmnI42vpGUxMBd_lTkJorVMOmbUPu8vBGWkuKPp3BBwN8DuVxH7yl8QGXAlSTF9fUC0GpP7yyi3OQpu2WpQQA1ig4yqRUn-OwDIic2IuuhnHLwfQPeifPPNXnQ==
hxxp://192.168.1.121/kristen-stewart/kristen-stewart-covers-v-magazines-spring-preview-2013-766014?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773
hxxp://gossipcenter.com/kristen-stewart/kristen-stewart-covers-v-magazines-spring-preview-2013-766014?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773
hxxp://192.168.1.121/w/1.0/sc?cc=1&r=http://ox-d.gossipcenter.com/w/1.0/arj?cc=1&ai=05511434-f4e8-79dc-dbfa-0ad9c347963b&o=9702287606&callback=OX_9702287606&ju=http%3A//gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&jr=http%3A//27773.t.c.adlinker.info/%3Fid%3D&pgid=12421&res=1440x900x24&plg=swf%2Cshk%2Cpm&ch=UTF-8&tz=240
hxxp://prod-mkt-d.d.xx.openx.com.akadns.net/w/1.0/sc?cc=1&r=http://ox-d.gossipcenter.com/w/1.0/arj?cc=1&ai=05511434-f4e8-79dc-dbfa-0ad9c347963b&o=9702287606&callback=OX_9702287606&ju=http%3A//gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&jr=http%3A//27773.t.c.adlinker.info/%3Fid%3D&pgid=12421&res=1440x900x24&plg=swf%2Cshk%2Cpm&ch=UTF-8&tz=240
hxxp://192.168.1.121/w/1.0/sc?r=http://ox-d.bluefinmedianetwork.com/w/1.0/arj?cc=1&ai=705fb8f5-16ec-77b1-d78f-f03ba4c89719&o=9782391371&callback=OX_9782391371&ju=http%3A//diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&jr=http%3A//27773.t.c.adlinker.info/%3Fid%3D&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf%2Cshk%2Cpm&ch=UTF-8&tz=240
hxxp://192.168.1.121/synapse/on.js?usr=gossipcenter
hxxp://192.168.1.121/tags/pixels/gcenter.js
hxxp://prod-mkt-d.d.xx.openx.com.akadns.net/w/1.0/sc?r=http://ox-d.bluefinmedianetwork.com/w/1.0/arj?cc=1&ai=705fb8f5-16ec-77b1-d78f-f03ba4c89719&o=9782391371&callback=OX_9782391371&ju=http%3A//diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&jr=http%3A//27773.t.c.adlinker.info/%3Fid%3D&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf%2Cshk%2Cpm&ch=UTF-8&tz=240
hxxp://a1092.g.akamai.net/synapse/on.js?usr=gossipcenter
hxxp://a1694.d.akamai.net/tags/pixels/gcenter.js
hxxp://192.168.1.121/click/?s=0.0&a=4_C-74CA5HO0hDdHcQ6wsjgew6yewk-32L40KEYh5hqeXv_G1ljRj_AY-ZxaSu1fSnx8LgT_JIO0jvmMzTdkuz_ROCZe_e4VsnxMTJRGavtrpfdREGRmEtN-3-wdZpdTKABb2MDAjJg73WXwvoTwRKV1HyEjUz5SJM_9A_WdRx4OmuG3XCbdbHGzwruerm5Bm1Znc7TCqwwXe-kxGRZwi3a1Tbfw4HccgxSgmgFwnx1GeH0MJfJb_46Vpn2WQH2yLyh8UTpUgiIoiSMK6m50g3R-ZeaKuoIHzf3F1GlMMB8KQvecx8JJgtEk1H7iW5fG&l=YBOedLARD-ejIlGu3l4R38axzUEqmNuodfh8W-WmeUhzcbrW3LocuDHEaG70z3wdL8HBGgAYon7DdUFoozf-TWvHOf_omisKgKPjlM6lKLBBlTabklGOtPM6hhEYIAAJ__9J6r8dpwvMxhnjTeW8nZ3WzvlNANvYtuplVkDJznogZBefIylecN_EoOsjW7TntTEQ2isjDzxAt_77aA7-L3TGbEhCA_tpislgKm7VBflRMxcvclQ1KplJLvzt5coWLvWx0MmAmZaoA-uyJOWrSHORfhT2uNxh7oOy5dPA37VgKGdxV-wv5UZOGVU4y5LUFzXvoGGFXl9qoSYiL5TMVw==
hxxp://c.t.c.adlinker.info/click/?s=0.0&a=4_C-74CA5HO0hDdHcQ6wsjgew6yewk-32L40KEYh5hqeXv_G1ljRj_AY-ZxaSu1fSnx8LgT_JIO0jvmMzTdkuz_ROCZe_e4VsnxMTJRGavtrpfdREGRmEtN-3-wdZpdTKABb2MDAjJg73WXwvoTwRKV1HyEjUz5SJM_9A_WdRx4OmuG3XCbdbHGzwruerm5Bm1Znc7TCqwwXe-kxGRZwi3a1Tbfw4HccgxSgmgFwnx1GeH0MJfJb_46Vpn2WQH2yLyh8UTpUgiIoiSMK6m50g3R-ZeaKuoIHzf3F1GlMMB8KQvecx8JJgtEk1H7iW5fG&l=YBOedLARD-ejIlGu3l4R38axzUEqmNuodfh8W-WmeUhzcbrW3LocuDHEaG70z3wdL8HBGgAYon7DdUFoozf-TWvHOf_omisKgKPjlM6lKLBBlTabklGOtPM6hhEYIAAJ__9J6r8dpwvMxhnjTeW8nZ3WzvlNANvYtuplVkDJznogZBefIylecN_EoOsjW7TntTEQ2isjDzxAt_77aA7-L3TGbEhCA_tpislgKm7VBflRMxcvclQ1KplJLvzt5coWLvWx0MmAmZaoA-uyJOWrSHORfhT2uNxh7oOy5dPA37VgKGdxV-wv5UZOGVU4y5LUFzXvoGGFXl9qoSYiL5TMVw==
hxxp://192.168.1.121/w/1.0/sc?cc=1&r=http://ox-d.bluefinmedianetwork.com/w/1.0/arj?cc=1&ai=705fb8f5-16ec-77b1-d78f-f03ba4c89719&o=9782391371&callback=OX_9782391371&ju=http%3A//diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&jr=http%3A//27773.t.c.adlinker.info/%3Fid%3D&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf%2Cshk%2Cpm&ch=UTF-8&tz=240
hxxp://prod-mkt-d.d.xx.openx.com.akadns.net/w/1.0/sc?cc=1&r=http://ox-d.bluefinmedianetwork.com/w/1.0/arj?cc=1&ai=705fb8f5-16ec-77b1-d78f-f03ba4c89719&o=9782391371&callback=OX_9782391371&ju=http%3A//diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&jr=http%3A//27773.t.c.adlinker.info/%3Fid%3D&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf%2Cshk%2Cpm&ch=UTF-8&tz=240
hxxp://192.168.1.121/w/1.0/arj?mi=337705ee-3cc9-4910-96b0-003adf2a6d6b&mn=1&mc=1&cc=1&ai=05511434-f4e8-79dc-dbfa-0ad9c347963b&o=9702287606&callback=OX_9702287606&ju=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12421&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/arj?mi=337705ee-3cc9-4910-96b0-003adf2a6d6b&mn=1&mc=1&cc=1&ai=05511434-f4e8-79dc-dbfa-0ad9c347963b&o=9702287606&callback=OX_9702287606&ju=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12421&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://192.168.1.121/click/?s=0.0&a=RGtlcA-tg1fhDvIGewdUSoXjW7bdJD9q1wy9RyYDGRuXD92GX5T0fQeEYDASTlqMwrCrbub2Xqdf4zDZ9L33rfV4UcCP02fCUFq9EBTQlu0KBBS54XITV4WRL83HFgrNkrZCdUVvQYw5WiOMeoAgZHTWWrz2UoFwQyKVaPMwa9J7PZqYbdbi-KVC6PHdag17Vk0wIrM5rYD3PWdv4Ac5NipYtu7E_BXMZXiaNe3Pk54qpV3xvGag6GRZ33E2Vb4lFeTuMVW9XZYdhBwfpZjifTc78Ya2ARtAoAJ9qSOSVf-gwuTR9tQslyeUXBTm52zJ&l=PYNwqyM7FGpuOyDekMacqtveksdWLK0ZVqRACR4PSltVlRUin2ZvyOPqb04XKZQtry8vVHUS_p4I148wb4h70syQKooY7kQP4qRbmctpbrq60XtneVk5PlLqYyLy8tHqL5Wvz2Vut4PhDjBpEGaC1p0ipTelLzrxaGSaogDjefqPqMODOckwgQlkqFoV6vPP1QtJfvF_nv5_0Qp6dPLnjqWvNGTLUnJegg--1nZ6xcR5YXfTskoDvuHvWgaR5vgZJE0iJp0o_xn_nTNfeho-yvf0NoCnBvUwULzqce1mA0n5JNHVIU0OEnFIUgfWE7aO2lZT5QhFiwjrtiJ0ogRgBw==
hxxp://c.t.c.adlinker.info/click/?s=0.0&a=RGtlcA-tg1fhDvIGewdUSoXjW7bdJD9q1wy9RyYDGRuXD92GX5T0fQeEYDASTlqMwrCrbub2Xqdf4zDZ9L33rfV4UcCP02fCUFq9EBTQlu0KBBS54XITV4WRL83HFgrNkrZCdUVvQYw5WiOMeoAgZHTWWrz2UoFwQyKVaPMwa9J7PZqYbdbi-KVC6PHdag17Vk0wIrM5rYD3PWdv4Ac5NipYtu7E_BXMZXiaNe3Pk54qpV3xvGag6GRZ33E2Vb4lFeTuMVW9XZYdhBwfpZjifTc78Ya2ARtAoAJ9qSOSVf-gwuTR9tQslyeUXBTm52zJ&l=PYNwqyM7FGpuOyDekMacqtveksdWLK0ZVqRACR4PSltVlRUin2ZvyOPqb04XKZQtry8vVHUS_p4I148wb4h70syQKooY7kQP4qRbmctpbrq60XtneVk5PlLqYyLy8tHqL5Wvz2Vut4PhDjBpEGaC1p0ipTelLzrxaGSaogDjefqPqMODOckwgQlkqFoV6vPP1QtJfvF_nv5_0Qp6dPLnjqWvNGTLUnJegg--1nZ6xcR5YXfTskoDvuHvWgaR5vgZJE0iJp0o_xn_nTNfeho-yvf0NoCnBvUwULzqce1mA0n5JNHVIU0OEnFIUgfWE7aO2lZT5QhFiwjrtiJ0ogRgBw==
hxxp://192.168.1.121/themes/newgc/images/logo.png
hxxp://d3erqjfwf2w9ka.cloudfront.net/themes/newgc/images/logo.png
hxxp://192.168.1.121/sites/default/files/imagecache/story_header/photos/biebs-030113- sp.jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/story_header/photos/biebs-030113- sp.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/115x151/images/b/biebs-030113- (2).jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/default/files/imagecache/115x151/images/b/biebs-030113- (2).jpg
hxxp://192.168.1.121/sites/default/files/imagecache/115x151/images/b/biebs-030113- (3-1).jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/115x151/images/b/biebs-030113- (3-1).jpg
hxxp://192.168.1.121/sites/default/files/imagecache/115x151/images/j/justin-bieber-020811a-12.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/default/files/imagecache/115x151/images/j/justin-bieber-020811a-12.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/115x151/images/j/justin-grammy-021311-12.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/default/files/imagecache/115x151/images/j/justin-grammy-021311-12.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/115x151/images/b/biebs-030113- (1).jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/115x151/images/b/biebs-030113- (1).jpg
hxxp://192.168.1.121/click/?s=0.0&a=dhqigJhsxwtpVWDYkLuCFTs-nnFSwWKeX7W0_Un1CT8jodC1_Pvfs6wUOpyXlL77lPkeMk7ME141sDEbeYhuD5oLgW7Equ9LBWK9TR_kEVoELSeoKBToeG2BUkYatnpDx7DtGi4YyWgR9zT7TPuTq-Ulq4ZX6aE8bijh02EmuIXlurEWjuVc9Xzq4lA17b8IdYKTfGMadZtxDcGRslXrfeTWrZ_0FVc6VxUaWa1t0cCHcTyD89EP5OfktNnU6jv-NuAyYxrV_ODaHX_KMG03cbe5IJ9o_awVjzMyLTeVXUhoq-ibtBxUYJtBi9z_Sguc&l=p779qsJ1KpjtFVaVG4PF_MIQ49ApMKcDWDvyOvjSlQ_R4_Fnz3ct7n9wsjahFF7PCwGJ0pxRxxBGgmC_JuXWATxFnoUOpZBKUMoZxsSlbnga47plaOq9ZevogZQ28lOobZmR60oXPBmAUUbrCGpJspCJc7KP0h8e0R8nICzYnQ0e7g-w2-CCZz-atM7FF-HLDXZWxDcXLP_k0G8ZinAu7DhdlE7FN7FzI-doHopP0WpBfckox1cm-qG6iMZEKeATfJYq9W3hg6UulMRfISMODuZCxaMVXl4roX60wDCjk8U4zXuefMKZ6M5pbpcWfH4nSKwqbrhhznBg78gL7GD-3g==
hxxp://c.t.c.adlinker.info/click/?s=0.0&a=dhqigJhsxwtpVWDYkLuCFTs-nnFSwWKeX7W0_Un1CT8jodC1_Pvfs6wUOpyXlL77lPkeMk7ME141sDEbeYhuD5oLgW7Equ9LBWK9TR_kEVoELSeoKBToeG2BUkYatnpDx7DtGi4YyWgR9zT7TPuTq-Ulq4ZX6aE8bijh02EmuIXlurEWjuVc9Xzq4lA17b8IdYKTfGMadZtxDcGRslXrfeTWrZ_0FVc6VxUaWa1t0cCHcTyD89EP5OfktNnU6jv-NuAyYxrV_ODaHX_KMG03cbe5IJ9o_awVjzMyLTeVXUhoq-ibtBxUYJtBi9z_Sguc&l=p779qsJ1KpjtFVaVG4PF_MIQ49ApMKcDWDvyOvjSlQ_R4_Fnz3ct7n9wsjahFF7PCwGJ0pxRxxBGgmC_JuXWATxFnoUOpZBKUMoZxsSlbnga47plaOq9ZevogZQ28lOobZmR60oXPBmAUUbrCGpJspCJc7KP0h8e0R8nICzYnQ0e7g-w2-CCZz-atM7FF-HLDXZWxDcXLP_k0G8ZinAu7DhdlE7FN7FzI-doHopP0WpBfckox1cm-qG6iMZEKeATfJYq9W3hg6UulMRfISMODuZCxaMVXl4roX60wDCjk8U4zXuefMKZ6M5pbpcWfH4nSKwqbrhhznBg78gL7GD-3g==
hxxp://192.168.1.121/sites/default/files/imagecache/115x151/images/j/justin-selena-030111-17.jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/115x151/images/j/justin-selena-030111-17.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/115x151/images/b/biebs-030113- (3).jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/115x151/images/b/biebs-030113- (3).jpg
hxxp://192.168.1.121/sites/default/files/imagecache/115x151/images/j/justin-bieber-031411-7.jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/115x151/images/j/justin-bieber-031411-7.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/115x151/images/j/justin-selena-030111-24.jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/115x151/images/j/justin-selena-030111-24.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/115x151/images/a/ama-show-112110-1.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/default/files/imagecache/115x151/images/a/ama-show-112110-1.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/115x151/images/s/selena-justin-022711-14.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/210x150/videos/517900408_c_o.jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/115x151/images/s/selena-justin-022711-14.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/default/files/imagecache/210x150/videos/517900408_c_o.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/210x150/videos/517898979_c_o.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/default/files/imagecache/210x150/videos/517898979_c_o.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/115x151/images/j/justin-bieber-rs-0311-2.jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/115x151/images/j/justin-bieber-rs-0311-2.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/115x151/images/j/justin-bieber-pp-021711-3.JPG
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/115x151/images/j/justin-bieber-pp-021711-3.JPG
hxxp://192.168.1.121/sites/default/files/imagecache/115x151/images/j/justin-bieber-radio-021711-5.JPG
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/115x151/images/j/justin-bieber-radio-021711-5.JPG
hxxp://192.168.1.121/sites/default/files/imagecache/210x150/videos/517899499_c_o.jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/210x150/videos/517899499_c_o.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/210x150/videos/517900086_c_o.jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/210x150/videos/517900086_c_o.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/125x80/videos/dianek081613vid.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/default/files/imagecache/125x80/videos/dianek081613vid.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/125x80/videos/teresajoe081613vid.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/default/files/imagecache/125x80/videos/teresajoe081613vid.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/292x220/videos/gagavideo081213.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/125x80/videos/hugh081613vid.jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/292x220/videos/gagavideo081213.jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/125x80/videos/hugh081613vid.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/125x80/videos/perry081613vod.jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/125x80/videos/perry081613vod.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/210x150/videos/517898545_c_o.jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/210x150/videos/517898545_c_o.jpg
hxxp://192.168.1.121/sites/default/files/imagecache/210x150/videos/517899163_4_o.jpg
hxxp://d3erqjfwf2w9ka.cloudfront.net/sites/default/files/imagecache/210x150/videos/517899163_4_o.jpg
hxxp://192.168.1.121/w/1.0/pd?plm=3
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/pd?plm=3
hxxp://192.168.1.121/__utm.gif?utmwv=5.4.4&utms=1&utmn=437168782&utmhn=gossipcenter.com&utmcs=UTF-8&utmsr=1440x900&utmvp=640x480&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=11.2 r202&utmdt=Happy 19th Birthday Justin Bieber! | GossipCenter - Entertainment News Leaders&utmhid=296277552&utmr=http://27773.t.c.adlinker.info/?id=&utmp=/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&utmht=1376799067494&utmac=UA-9186630-1&utmcc=__utma=33877815.531400155.1376799067.1376799067.1376799067.1;+__utmz=33877815.1376799067.1.1.utmcsr=27773|utmccn=clickpayz_27773|utmcmd=cpc;&utmu=qB~
hxxp://www-google-analytics.l.google.com/__utm.gif?utmwv=5.4.4&utms=1&utmn=437168782&utmhn=gossipcenter.com&utmcs=UTF-8&utmsr=1440x900&utmvp=640x480&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=11.2 r202&utmdt=Happy 19th Birthday Justin Bieber! | GossipCenter - Entertainment News Leaders&utmhid=296277552&utmr=http://27773.t.c.adlinker.info/?id=&utmp=/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&utmht=1376799067494&utmac=UA-9186630-1&utmcc=__utma=33877815.531400155.1376799067.1376799067.1376799067.1;+__utmz=33877815.1376799067.1.1.utmcsr=27773|utmccn=clickpayz_27773|utmcmd=cpc;&utmu=qB~
hxxp://192.168.1.121/cm?in=1&pub=25
hxxp://eqv-ad-cogent.rfihub.com/cm?in=1&pub=25
hxxp://192.168.1.121/getuid?hxxp://r.openx.net/set?pid=408c9df8-85fe-6893-4938-ccbfd204601e&rtb=$UID
hxxp://192.168.1.121/r/du/id/L21rdC8xL21jaHBpZC8x
hxxp://ib.adnxs.com/getuid?hxxp://r.openx.net/set?pid=408c9df8-85fe-6893-4938-ccbfd204601e&rtb=$UID (ET RBN Known Malvertiser IP (22) )
hxxp://r.turn.com.akadns.net/r/du/id/L21rdC8xL21jaHBpZC8x
hxxp://192.168.1.121/w/1.0/arj?mi=ded9c489-28bc-4f39-3ac4-ee104e7b7128&mn=1&mc=1&cc=1&ai=705fb8f5-16ec-77b1-d78f-f03ba4c89719&o=9782391371&callback=OX_9782391371&ju=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/arj?mi=ded9c489-28bc-4f39-3ac4-ee104e7b7128&mn=1&mc=1&cc=1&ai=705fb8f5-16ec-77b1-d78f-f03ba4c89719&o=9782391371&callback=OX_9782391371&ju=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://192.168.1.121/themes/diyfashion/images/DIYFashion_logo.png
hxxp://dkfcp51of8gut.cloudfront.net/themes/diyfashion/images/DIYFashion_logo.png
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/story_header/images/hm-maindiy.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/story_header/images/hm-maindiy.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/greydress.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/greydress.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/longpinkdress.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/longpinkdress.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/purpledress.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/purpledress.jpg
hxxp://192.168.1.121/gossipgirls_cdn/GCN_160x24_blka.gif
hxxp://d3erqjfwf2w9ka.cloudfront.net/gossipgirls_cdn/GCN_160x24_blka.gif
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/white_suite.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/white_suite.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/tomfordkhgs-01.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/tomfordkhgs-01.jpg
hxxp://192.168.1.121/r/dm/mkt/4/mpid//mpuid/3322253598643941281/mchpid/1/url/hxxp://d.audienceiq.com/r/dm/mkt/44/mpid//mpuid/3322253598643941281/mchpid/1/url/hxxp://d.audienceiq.com/r/dm/mkt/73/mpid//mpuid/3322253598643941281/mchpid/1/url/hxxp://r.openx.net/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3322253598643941281
hxxp://d.p-td.com.turn.com.akadns.net/r/dm/mkt/4/mpid//mpuid/3322253598643941281/mchpid/1/url/hxxp://d.audienceiq.com/r/dm/mkt/44/mpid//mpuid/3322253598643941281/mchpid/1/url/hxxp://d.audienceiq.com/r/dm/mkt/73/mpid//mpuid/3322253598643941281/mchpid/1/url/hxxp://r.openx.net/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3322253598643941281
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk13.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk13.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/pinkdress.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/pinkdress.jpg
hxxp://192.168.1.121/www/delivery/ajs.php?zoneid=10&target=_top&cb=31846450827&charset=UTF-8&loc=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&referer=http://27773.t.c.adlinker.info/?id=
hxxp://adnproxy.bluefinmediasites.com/www/delivery/ajs.php?zoneid=10&target=_top&cb=31846450827&charset=UTF-8&loc=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&referer=http://27773.t.c.adlinker.info/?id=
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk6.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk6.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/reddress.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/reddress.jpg
hxxp://192.168.1.121/ads/first-look-katie-holmes-iris-jewelry-43369?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773
hxxp://diyfashion.com/ads/first-look-katie-holmes-iris-jewelry-43369?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/125x80/images/517899299_c_o.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/125x80/images/517899299_c_o.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/whiteoutfit.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/whiteoutfit.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/125x80/images/517899297_c_o.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/125x80/images/517899297_c_o.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/6waystomaxi-04.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/6waystomaxi-04.jpg
hxxp://192.168.1.121/r/dm/mkt/44/mpid//mpuid/3322253598643941281/mchpid/1/url/hxxp://d.audienceiq.com/r/dm/mkt/73/mpid//mpuid/3322253598643941281/mchpid/1/url/hxxp://r.openx.net/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3322253598643941281
hxxp://d.audienceiq.com.turn.com.akadns.net/r/dm/mkt/44/mpid//mpuid/3322253598643941281/mchpid/1/url/hxxp://d.audienceiq.com/r/dm/mkt/73/mpid//mpuid/3322253598643941281/mchpid/1/url/hxxp://r.openx.net/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3322253598643941281
hxxp://192.168.1.121/www/delivery/lg.php?bannerid=94&campaignid=7&zoneid=10&loc=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&referer=http://27773.t.c.adlinker.info/?id=&cb=824938318c
hxxp://adnproxy.bluefinmediasites.com/www/delivery/lg.php?bannerid=94&campaignid=7&zoneid=10&loc=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&referer=http://27773.t.c.adlinker.info/?id=&cb=824938318c
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/125x80/images/517899298_c_o.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/125x80/images/517899298_c_o.jpg
hxxp://192.168.1.121/themes/diyfashion/images/navbar.png
hxxp://dkfcp51of8gut.cloudfront.net/themes/diyfashion/images/navbar.png
hxxp://192.168.1.121/www/images/afa4d12a899e36d9a33ce76af2656007.jpg
hxxp://dazlgu219mggh.cloudfront.net/www/images/afa4d12a899e36d9a33ce76af2656007.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/6waystomaxi-03.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/6waystomaxi-03.jpg
hxxp://192.168.1.121/themes/diyfashion/images/Spanish_Icon.png
hxxp://dkfcp51of8gut.cloudfront.net/themes/diyfashion/images/Spanish_Icon.png
hxxp://192.168.1.121/w/1.0/ri?ts=1fHJhaWQ9MjFjNzU4ZDAtOTI0Zi00NDg3LThkODctOTdmOGNhZjE4ZGE1fGF1aWQ9MTEyODc1fGx3PTE0NDF8YWlkPTEyODgzMTF8b2lkPTEwMzA3NXxibT1CVVlJTkcuTk9OR1VBUkFOVEVFRHxzc2lkPTEwMTI5fGFkdj03NTMxNXxzaWQ9OTQwNXxhcz03Mjh4OTB8dXI9MFFEUmhzYmJOY3xwaWQ9MTIzMzZ8cHViPTQxMjV8YXVtPURNSUQuV0VCfGxpZD03NjIyMjF8dT0xfHQ9NHxyaWQ9ZTQ0MGI0ZDktYzVkOC00ZTQwLTg2YTgtZmExYjExZjRjZDVlfHBjPVVTRHxwPTM1OHxhYz1VU0R8cG09UFJJQ0lORy5DUE18cnQ9MTM3Njc5OTA3MHxsYz0yfHByPTM1OA
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/5waysmaxi52213-01.jpg
hxxp://192.168.1.121/r/dm/mkt/73/mpid//mpuid/3322253598643941281/mchpid/1/url/hxxp://r.openx.net/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3322253598643941281
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/ri?ts=1fHJhaWQ9MjFjNzU4ZDAtOTI0Zi00NDg3LThkODctOTdmOGNhZjE4ZGE1fGF1aWQ9MTEyODc1fGx3PTE0NDF8YWlkPTEyODgzMTF8b2lkPTEwMzA3NXxibT1CVVlJTkcuTk9OR1VBUkFOVEVFRHxzc2lkPTEwMTI5fGFkdj03NTMxNXxzaWQ9OTQwNXxhcz03Mjh4OTB8dXI9MFFEUmhzYmJOY3xwaWQ9MTIzMzZ8cHViPTQxMjV8YXVtPURNSUQuV0VCfGxpZD03NjIyMjF8dT0xfHQ9NHxyaWQ9ZTQ0MGI0ZDktYzVkOC00ZTQwLTg2YTgtZmExYjExZjRjZDVlfHBjPVVTRHxwPTM1OHxhYz1VU0R8cG09UFJJQ0lORy5DUE18cnQ9MTM3Njc5OTA3MHxsYz0yfHByPTM1OA
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/5waysmaxi52213-01.jpg
hxxp://d.audienceiq.com.turn.com.akadns.net/r/dm/mkt/73/mpid//mpuid/3322253598643941281/mchpid/1/url/hxxp://r.openx.net/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3322253598643941281
hxxp://192.168.1.121/offer/feed/q/aT01OTk2LHM9NzI4eDkwLG49aWZyYW1l?subid=default
hxxp://feed-rt.baronsoffers.com/offer/feed/q/aT01OTk2LHM9NzI4eDkwLG49aWZyYW1l?subid=default
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk9.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk9.jpg
hxxp://192.168.1.121/set?pid=2076250f-92c2-4ecd-9043-cc63ee6c4577&rtb=770959961947921389
hxxp://r.openx.net.akadns.net/set?pid=2076250f-92c2-4ecd-9043-cc63ee6c4577&rtb=770959961947921389
hxxp://192.168.1.121/offer/feed/q/aT01OTk2LHM9MzAweDI1MCxuPWlmcmFtZQ==?subid=default
hxxp://feed-rt.baronsoffers.com/offer/feed/q/aT01OTk2LHM9MzAweDI1MCxuPWlmcmFtZQ==?subid=default
hxxp://192.168.1.121/call/adj/369966/2590935/diyfashion.com.somoads/0x0/1376799073/no?[countgo]
hxxp://eqx.smartadserver.com/call/adj/369966/2590935/diyfashion.com.somoads/0x0/1376799073/no?[countgo]
hxxp://192.168.1.121/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3322253598643941281
hxxp://192.168.1.121/themes/diyfashion/images/diy_tv.png
hxxp://r.openx.net.akadns.net/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3322253598643941281
hxxp://dkfcp51of8gut.cloudfront.net/themes/diyfashion/images/diy_tv.png
hxxp://192.168.1.121/themes/newgc/images/sprites_v5.png
hxxp://d3erqjfwf2w9ka.cloudfront.net/themes/newgc/images/sprites_v5.png
hxxp://192.168.1.121/call/adj/369966/2590926/diyfashion.com.somoads/0x0/1376799073/no?[countgo]
hxxp://eqx.smartadserver.com/call/adj/369966/2590926/diyfashion.com.somoads/0x0/1376799073/no?[countgo]
hxxp://192.168.1.121/themes/diyfashion/images/play_button.png
hxxp://dkfcp51of8gut.cloudfront.net/themes/diyfashion/images/play_button.png
hxxp://192.168.1.121/themes/newgc/images/black_trans_bg.png
hxxp://d3erqjfwf2w9ka.cloudfront.net/themes/newgc/images/black_trans_bg.png
hxxp://192.168.1.121/a/diff/578/2590935/show0.asp?2590935;369966;0;1376799073;M;systemtarget=$a=0t;$cn=0_0;$isp=0;$qc=1309485197;$ql=high;$qpc=h3c 2n5;$qpp=514;$qt=93_1012_37935t;$b=16280;$o=11060
hxxp://eqx.smartadserver.com/a/diff/578/2590935/show0.asp?2590935;369966;0;1376799073;M;systemtarget=$a=0t;$cn=0_0;$isp=0;$qc=1309485197;$ql=high;$qpc=h3c 2n5;$qpp=514;$qt=93_1012_37935t;$b=16280;$o=11060
hxxp://192.168.1.121/call/adj/369966/2590926/diyfashion.com.somoads/0x0/1376799074/no?[countgo]
hxxp://eqx.smartadserver.com/call/adj/369966/2590926/diyfashion.com.somoads/0x0/1376799074/no?[countgo]
hxxp://192.168.1.121/adj/dmd.ind.diyfashion/;tile=3;sz=160x600,300x600;ord=4204791178926825.5?
hxxp://dart.l.doubleclick.net/adj/dmd.ind.diyfashion/;tile=3;sz=160x600,300x600;ord=4204791178926825.5?
hxxp://192.168.1.121/annonymous/dfp/dmd.ind.diyfashion//2/ns/160x600_300x600/script_dfp.js
hxxp://ne1.wac.v4cdn.net/annonymous/dfp/dmd.ind.diyfashion//2/ns/160x600_300x600/script_dfp.js
hxxp://192.168.1.121/a/diff/578/2590926/show0.asp?2590926;369966;0;1376799073;M;systemtarget=$a=0t;$cn=0_0;$isp=0;$qc=1309485197;$ql=high;$qpc=h3c 2n5;$qpp=514;$qt=93_1012_37935t;$b=16280;$o=11060
hxxp://eqx.smartadserver.com/a/diff/578/2590926/show0.asp?2590926;369966;0;1376799073;M;systemtarget=$a=0t;$cn=0_0;$isp=0;$qc=1309485197;$ql=high;$qpc=h3c 2n5;$qpp=514;$qt=93_1012_37935t;$b=16280;$o=11060
hxxp://192.168.1.121/adj/N2949.655083.SOMOADS.COM/B7804261.11;sz=728x90;ord=1376799073;click=hxxp://www4.smartadserver.com/clic/countgo.asp?2590935,369966,0,1376799073,M,systemtarget=$a=0t;$cn=0_0;$isp=0;$qc=1309485197;$ql=high;$qpc=h3c 2n5;$qpp=514;$qt=93_1012_37935t;$b=16280;$o=11060,8695668,URL=;?
hxxp://dart.l.doubleclick.net/adj/N2949.655083.SOMOADS.COM/B7804261.11;sz=728x90;ord=1376799073;click=hxxp://www4.smartadserver.com/clic/countgo.asp?2590935,369966,0,1376799073,M,systemtarget=$a=0t;$cn=0_0;$isp=0;$qc=1309485197;$ql=high;$qpc=h3c 2n5;$qpp=514;$qt=93_1012_37935t;$b=16280;$o=11060,8695668,URL=;?
hxxp://192.168.1.121/a/track/jsinfo.asp?sw=1366&sh=768
hxxp://eqx.smartadserver.com/a/track/jsinfo.asp?sw=1366&sh=768
hxxp://192.168.1.121/a/diff/578/2590926/show0.asp?2590926;369966;2343343561272353575;1376799074;M;systemtarget=$a=0t;$cn=0_0;$isp=0;$qc=1309485197;$ql=high;$qpc=h3c 2n5;$qpp=514;$qt=93_1012_37935t;$b=16280;$o=11060;$c=36;
hxxp://eqx.smartadserver.com/a/diff/578/2590926/show0.asp?2590926;369966;2343343561272353575;1376799074;M;systemtarget=$a=0t;$cn=0_0;$isp=0;$qc=1309485197;$ql=high;$qpc=h3c 2n5;$qpp=514;$qt=93_1012_37935t;$b=16280;$o=11060;$c=36;
hxxp://192.168.1.121/ad/9045.js
hxxp://e5569.g.akamaiedge.net/ad/9045.js
hxxp://192.168.1.121/adj/N2949.655083.SOMOADS.COM/B7804261.10;sz=300x250;ord=1376799073;click=hxxp://www4.smartadserver.com/clic/countgo.asp?2590926,369966,0,1376799073,M,systemtarget=$a=0t;$cn=0_0;$isp=0;$qc=1309485197;$ql=high;$qpc=h3c 2n5;$qpp=514;$qt=93_1012_37935t;$b=16280;$o=11060,8695658,URL=;?
hxxp://dart.l.doubleclick.net/adj/N2949.655083.SOMOADS.COM/B7804261.10;sz=300x250;ord=1376799073;click=hxxp://www4.smartadserver.com/clic/countgo.asp?2590926,369966,0,1376799073,M,systemtarget=$a=0t;$cn=0_0;$isp=0;$qc=1309485197;$ql=high;$qpc=h3c 2n5;$qpp=514;$qt=93_1012_37935t;$b=16280;$o=11060,8695658,URL=;?
hxxp://192.168.1.121/0020B8/beacon/dfp_ad.js?id_publishers=1001258&id_publisher_dfp_tags=1007087&oaid=ec766c82a589dbcb69520d42b01423b2&session=128a378522839cb02c11b66ca905364a&pv=b24bc8f7dc0f3052eb3725108dfc21ef&rnd=b42de23be032a2eca603a175fe4d3979
hxxp://ne1.wac.v4cdn.net/0020B8/beacon/dfp_ad.js?id_publishers=1001258&id_publisher_dfp_tags=1007087&oaid=ec766c82a589dbcb69520d42b01423b2&session=128a378522839cb02c11b66ca905364a&pv=b24bc8f7dc0f3052eb3725108dfc21ef&rnd=b42de23be032a2eca603a175fe4d3979
hxxp://192.168.1.121/adj/N2949.655083.SOMOADS.COM/B7804261.10;sz=300x250;ord=1376799074;click=hxxp://www4.smartadserver.com/clic/countgo.asp?2590926,369966,2343343561272353575,1376799074,M,systemtarget=$a=0t;$cn=0_0;$isp=0;$qc=1309485197;$ql=high;$qpc=h3c 2n5;$qpp=514;$qt=93_1012_37935t;$b=16280;$o=11060;$c=36;,8695658,URL=;?
hxxp://dart.l.doubleclick.net/adj/N2949.655083.SOMOADS.COM/B7804261.10;sz=300x250;ord=1376799074;click=hxxp://www4.smartadserver.com/clic/countgo.asp?2590926,369966,2343343561272353575,1376799074,M,systemtarget=$a=0t;$cn=0_0;$isp=0;$qc=1309485197;$ql=high;$qpc=h3c 2n5;$qpp=514;$qt=93_1012_37935t;$b=16280;$o=11060;$c=36;,8695658,URL=;?
hxxp://192.168.1.121/0020B8/beacon/dfp_pv.js?id_publishers=1001258&oaid=ec766c82a589dbcb69520d42b01423b2&session=128a378522839cb02c11b66ca905364a&pv=b24bc8f7dc0f3052eb3725108dfc21ef&rnd=99614949ebbf95fb2cc428e2e7456ad3
hxxp://ne1.wac.v4cdn.net/0020B8/beacon/dfp_pv.js?id_publishers=1001258&oaid=ec766c82a589dbcb69520d42b01423b2&session=128a378522839cb02c11b66ca905364a&pv=b24bc8f7dc0f3052eb3725108dfc21ef&rnd=99614949ebbf95fb2cc428e2e7456ad3
hxxp://192.168.1.121/adServer/adServerESI.aspx?bannerID=229430&siteID=N2949.655083.SOMOADS.COM&creativeID=55443764&placementID=101783382
hxxp://a907.g.akamai.net/adServer/adServerESI.aspx?bannerID=229430&siteID=N2949.655083.SOMOADS.COM&creativeID=55443764&placementID=101783382
hxxp://192.168.1.121/beacon.js?c1=8&c2=8432609&c3=1000
hxxp://a1294.w20.akamai.net/beacon.js?c1=8&c2=8432609&c3=1000
hxxp://192.168.1.121/scoopstips/10-dresses-make-you-look-10-pounds-lighter-without-counting-calories-41248?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773
hxxp://diyfashion.com/scoopstips/10-dresses-make-you-look-10-pounds-lighter-without-counting-calories-41248?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773
hxxp://192.168.1.121/adServer/adServerESI.aspx?bannerID=229430&siteID=N2949.655083.SOMOADS.COM&creativeID=55443741&placementID=101783378
hxxp://a907.g.akamai.net/adServer/adServerESI.aspx?bannerID=229430&siteID=N2949.655083.SOMOADS.COM&creativeID=55443741&placementID=101783378
hxxp://192.168.1.121/a/9045/24870/96122-9.js?&cb=0.0878164020832628&tk_st=1&rp_s=c&p_exp=1&p_pos=btf&p_screen_res=1440x900
hxxp://perf-optimized-by.rubiconproject.net.akadns.net/a/9045/24870/96122-9.js?&cb=0.0878164020832628&tk_st=1&rp_s=c&p_exp=1&p_pos=btf&p_screen_res=1440x900
hxxp://192.168.1.121/pixel;r=553072290;a.1=p-6bJXOO_tVllj2;labels.1=img.os.windows.vista,img.browser.chrome.28.windows,img.category.desktop.windows.vista,img.reach.deliver,img.referrer.c-adlinker-info,img.indieclick.os.windows.vista,img.indieclick.browser.chrome.28.windows,img.indieclick.category.desktop.windows.vista,img.indieclick.reach.deliver,img.indieclick.referrer.c-adlinker-info,img.indieclick.publishers.diyfashion-com.os.windows.vista,img.indieclick.publishers.diyfashion-com.browser.chrome.28.windows,img.indieclick.publishers.diyfashion-com.category.desktop.windows.vista,img.indieclick.publishers.diyfashion-com.reach.deliver,img.indieclick.publishers.diyfashion-com.referrer.c-adlinker-info,img.segments.entertainment.diyfashion-com,site.diyfashion,site.diyfashion.os.windows.vista,site.diyfashion.browser.chrome.28.windows,site.diyfashion.category.desktop.windows.vista,img.publisher.diyfashion-com,indieclick.publisher.diyfashion-com;fpan=1;fpa=P0-851630072-1376799076078;ns=0;ce=1;cm=;je=0;sr=1440x900x24;enc=n;dst=1;et=1376799076078;tzo=240;ref=http://27773.t.c.adlinker.info/?id=;url=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773;ogl=
hxxp://ac-na.quantserve.com.akadns.net/pixel;r=553072290;a.1=p-6bJXOO_tVllj2;labels.1=img.os.windows.vista,img.browser.chrome.28.windows,img.category.desktop.windows.vista,img.reach.deliver,img.referrer.c-adlinker-info,img.indieclick.os.windows.vista,img.indieclick.browser.chrome.28.windows,img.indieclick.category.desktop.windows.vista,img.indieclick.reach.deliver,img.indieclick.referrer.c-adlinker-info,img.indieclick.publishers.diyfashion-com.os.windows.vista,img.indieclick.publishers.diyfashion-com.browser.chrome.28.windows,img.indieclick.publishers.diyfashion-com.category.desktop.windows.vista,img.indieclick.publishers.diyfashion-com.reach.deliver,img.indieclick.publishers.diyfashion-com.referrer.c-adlinker-info,img.segments.entertainment.diyfashion-com,site.diyfashion,site.diyfashion.os.windows.vista,site.diyfashion.browser.chrome.28.windows,site.diyfashion.category.desktop.windows.vista,img.publisher.diyfashion-com,indieclick.publisher.diyfashion-com;fpan=1;fpa=P0-851630072-1376799076078;ns=0;ce=1;cm=;je=0;sr=1440x900x24;enc=n;dst=1;et=1376799076078;tzo=240;ref=http://27773.t.c.adlinker.info/?id=;url=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773;ogl=
hxxp://192.168.1.121/w/1.0/ri?ts=1fHJhaWQ9MjFjNzU4ZDAtOTI0Zi00NDg3LThkODctOTdmOGNhZjE4ZGE1fGF1aWQ9MTEyODc0fGx3PTE0NDF8YWlkPTEyODgzMDF8b2lkPTEwMzA3NXxibT1CVVlJTkcuTk9OR1VBUkFOVEVFRHxzc2lkPTEwMTI4fGFkdj03NTMxNXxzaWQ9OTQwNXxhcz0zMDB4MjUwfHVyPVp3VlluNlVhVHV8cGlkPTEyMzM2fHB1Yj00MTI1fGF1bT1ETUlELldFQnxsaWQ9NzYyMjEzfHU9MXx0PTR8cmlkPTZmNDE1YjRlLWE3NDAtNGQ3Ni04YWZhLTFlYzhjZDliM2M5OXxwYz1VU0R8cD0zNzF8YWM9VVNEfHBtPVBSSUNJTkcuQ1BNfHJ0PTEzNzY3OTkwNzB8bGM9Mnxwcj0zNzE
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/ri?ts=1fHJhaWQ9MjFjNzU4ZDAtOTI0Zi00NDg3LThkODctOTdmOGNhZjE4ZGE1fGF1aWQ9MTEyODc0fGx3PTE0NDF8YWlkPTEyODgzMDF8b2lkPTEwMzA3NXxibT1CVVlJTkcuTk9OR1VBUkFOVEVFRHxzc2lkPTEwMTI4fGFkdj03NTMxNXxzaWQ9OTQwNXxhcz0zMDB4MjUwfHVyPVp3VlluNlVhVHV8cGlkPTEyMzM2fHB1Yj00MTI1fGF1bT1ETUlELldFQnxsaWQ9NzYyMjEzfHU9MXx0PTR8cmlkPTZmNDE1YjRlLWE3NDAtNGQ3Ni04YWZhLTFlYzhjZDliM2M5OXxwYz1VU0R8cD0zNzF8YWM9VVNEfHBtPVBSSUNJTkcuQ1BNfHJ0PTEzNzY3OTkwNzB8bGM9Mnxwcj0zNzE
hxxp://192.168.1.121/r/dm/mkt/4/mpid//mpuid/3537985431682058307/mchpid/1/url/hxxp://d.audienceiq.com/r/dm/mkt/44/mpid//mpuid/3537985431682058307/mchpid/1/url/hxxp://d.audienceiq.com/r/dm/mkt/73/mpid//mpuid/3537985431682058307/mchpid/1/url/hxxp://r.openx.net/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3537985431682058307
hxxp://d.p-td.com.turn.com.akadns.net/r/dm/mkt/4/mpid//mpuid/3537985431682058307/mchpid/1/url/hxxp://d.audienceiq.com/r/dm/mkt/44/mpid//mpuid/3537985431682058307/mchpid/1/url/hxxp://d.audienceiq.com/r/dm/mkt/73/mpid//mpuid/3537985431682058307/mchpid/1/url/hxxp://r.openx.net/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3537985431682058307
hxxp://192.168.1.121/w/1.0/ri?ts=1fHJhaWQ9MjFjNzU4ZDAtOTI0Zi00NDg3LThkODctOTdmOGNhZjE4ZGE1fGF1aWQ9MTE2OTIyfGx3PTE0NDF8YWlkPTEyODgzMDF8b2lkPTEwMzA3NXxibT1CVVlJTkcuTk9OR1VBUkFOVEVFRHxzc2lkPTEwMTI5fGFkdj03NTMxNXxzaWQ9OTQwNXxhcz0zMDB4MjUwfHVyPXVsWGR4SkJsbFV8cGlkPTEyMzM2fHB1Yj00MTI1fGF1bT1ETUlELldFQnxsaWQ9NzYyMjEzfHU9MXx0PTR8cmlkPTViMjNiMDcxLTkyZTItNDE2Zi1iOTZkLWRmNjEyYWVkYWM3Y3xwYz1VU0R8cD0zNzF8YWM9VVNEfHBtPVBSSUNJTkcuQ1BNfHJ0PTEzNzY3OTkwNzB8bGM9Mnxwcj0zNzE
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/ri?ts=1fHJhaWQ9MjFjNzU4ZDAtOTI0Zi00NDg3LThkODctOTdmOGNhZjE4ZGE1fGF1aWQ9MTE2OTIyfGx3PTE0NDF8YWlkPTEyODgzMDF8b2lkPTEwMzA3NXxibT1CVVlJTkcuTk9OR1VBUkFOVEVFRHxzc2lkPTEwMTI5fGFkdj03NTMxNXxzaWQ9OTQwNXxhcz0zMDB4MjUwfHVyPXVsWGR4SkJsbFV8cGlkPTEyMzM2fHB1Yj00MTI1fGF1bT1ETUlELldFQnxsaWQ9NzYyMjEzfHU9MXx0PTR8cmlkPTViMjNiMDcxLTkyZTItNDE2Zi1iOTZkLWRmNjEyYWVkYWM3Y3xwYz1VU0R8cD0zNzF8YWM9VVNEfHBtPVBSSUNJTkcuQ1BNfHJ0PTEzNzY3OTkwNzB8bGM9Mnxwcj0zNzE
hxxp://192.168.1.121/ttj?id=1556280
hxxp://ib.adnxs.com/ttj?id=1556280
hxxp://192.168.1.121/bounce?/getuid?http://r.openx.net/set?pid=408c9df8-85fe-6893-4938-ccbfd204601e&rtb=$UID
hxxp://ib.adnxs.com/bounce?/getuid?http://r.openx.net/set?pid=408c9df8-85fe-6893-4938-ccbfd204601e&rtb=$UID (ET RBN Known Malvertiser IP (22) )
hxxp://192.168.1.121/bounce?/ttj?id=1556280
hxxp://ib.adnxs.com/bounce?/ttj?id=1556280
hxxp://192.168.1.121/r/dm/mkt/44/mpid//mpuid/3537985431682058307/mchpid/1/url/hxxp://d.audienceiq.com/r/dm/mkt/73/mpid//mpuid/3537985431682058307/mchpid/1/url/hxxp://r.openx.net/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3537985431682058307
hxxp://d.audienceiq.com.turn.com.akadns.net/r/dm/mkt/44/mpid//mpuid/3537985431682058307/mchpid/1/url/hxxp://d.audienceiq.com/r/dm/mkt/73/mpid//mpuid/3537985431682058307/mchpid/1/url/hxxp://r.openx.net/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3537985431682058307
hxxp://192.168.1.121/r/dm/mkt/73/mpid//mpuid/3537985431682058307/mchpid/1/url/hxxp://r.openx.net/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3537985431682058307
hxxp://d.audienceiq.com.turn.com.akadns.net/r/dm/mkt/73/mpid//mpuid/3537985431682058307/mchpid/1/url/hxxp://r.openx.net/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3537985431682058307
hxxp://192.168.1.121/w/1.0/ri?ts=1fHJhaWQ9MjFjNzU4ZDAtOTI0Zi00NDg3LThkODctOTdmOGNhZjE4ZGE1fGF1aWQ9MTEyODczfGx3PTE0NDF8YWlkPTEyODgzMDF8b2lkPTEwMzA3NXxibT1CVVlJTkcuTk9OR1VBUkFOVEVFRHxzc2lkPTEwMTI5fGFkdj03NTMxNXxzaWQ9OTQwNXxhcz0zMDB4MjUwfHVyPTZGckJ6ZWFRWWh8cGlkPTEyMzM2fHB1Yj00MTI1fGF1bT1ETUlELldFQnxsaWQ9NzYyMjEzfHU9MXx0PTR8cmlkPWM2NjlmNWFiLWMwNDgtNDg4ZC04OWQ1LWI5YTQ2NmJhOWE3NXxwYz1VU0R8cD0zNzF8YWM9VVNEfHBtPVBSSUNJTkcuQ1BNfHJ0PTEzNzY3OTkwNzB8bGM9Mnxwcj0zNzE
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/ri?ts=1fHJhaWQ9MjFjNzU4ZDAtOTI0Zi00NDg3LThkODctOTdmOGNhZjE4ZGE1fGF1aWQ9MTEyODczfGx3PTE0NDF8YWlkPTEyODgzMDF8b2lkPTEwMzA3NXxibT1CVVlJTkcuTk9OR1VBUkFOVEVFRHxzc2lkPTEwMTI5fGFkdj03NTMxNXxzaWQ9OTQwNXxhcz0zMDB4MjUwfHVyPTZGckJ6ZWFRWWh8cGlkPTEyMzM2fHB1Yj00MTI1fGF1bT1ETUlELldFQnxsaWQ9NzYyMjEzfHU9MXx0PTR8cmlkPWM2NjlmNWFiLWMwNDgtNDg4ZC04OWQ1LWI5YTQ2NmJhOWE3NXxwYz1VU0R8cD0zNzF8YWM9VVNEfHBtPVBSSUNJTkcuQ1BNfHJ0PTEzNzY3OTkwNzB8bGM9Mnxwcj0zNzE
hxxp://192.168.1.121/set?pid=408c9df8-85fe-6893-4938-ccbfd204601e&rtb=2565522344244719991
hxxp://r.openx.net.akadns.net/set?pid=408c9df8-85fe-6893-4938-ccbfd204601e&rtb=2565522344244719991
hxxp://192.168.1.121/w/1.0/ri?ts=1fHJhaWQ9MjFjNzU4ZDAtOTI0Zi00NDg3LThkODctOTdmOGNhZjE4ZGE1fGF1aWQ9MTEyODcyfGx3PTE0NDF8YWlkPTkzODIyNXxvaWQ9MTgwMDI2fGJtPUJVWUlORy5OT05HVUFSQU5URUVEfHNzaWQ9MTAxMjl8YWR2PTEwOTY2M3xzaWQ9OTQwNXxhcz0xNjB4NjAwfHVyPW1yTHZWMW1wQVd8cGlkPTEyMzM2fHB1Yj00MTI1fGF1bT1ETUlELldFQnxsaWQ9NTYxOTEyfHU9MXx0PTR8cmlkPTRkYmY4ZjY3LTE4NTUtNDFjMS1hZDYyLTRlZDhhMWQ3MWU0YXxwYz1VU0R8cD04MHxhYz1VU0R8cG09UFJJQ0lORy5DUE18cnQ9MTM3Njc5OTA3MHxsYz0yfHByPTgw
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/ri?ts=1fHJhaWQ9MjFjNzU4ZDAtOTI0Zi00NDg3LThkODctOTdmOGNhZjE4ZGE1fGF1aWQ9MTEyODcyfGx3PTE0NDF8YWlkPTkzODIyNXxvaWQ9MTgwMDI2fGJtPUJVWUlORy5OT05HVUFSQU5URUVEfHNzaWQ9MTAxMjl8YWR2PTEwOTY2M3xzaWQ9OTQwNXxhcz0xNjB4NjAwfHVyPW1yTHZWMW1wQVd8cGlkPTEyMzM2fHB1Yj00MTI1fGF1bT1ETUlELldFQnxsaWQ9NTYxOTEyfHU9MXx0PTR8cmlkPTRkYmY4ZjY3LTE4NTUtNDFjMS1hZDYyLTRlZDhhMWQ3MWU0YXxwYz1VU0R8cD04MHxhYz1VU0R8cG09UFJJQ0lORy5DUE18cnQ9MTM3Njc5OTA3MHxsYz0yfHByPTgw
hxxp://192.168.1.121/themes/diyfashion/images/TBG_logo.jpg
hxxp://dkfcp51of8gut.cloudfront.net/themes/diyfashion/images/TBG_logo.jpg
hxxp://192.168.1.121/themes/diyfashion/images/HFM_Widget.jpg
hxxp://dkfcp51of8gut.cloudfront.net/themes/diyfashion/images/HFM_Widget.jpg
hxxp://192.168.1.121/themes/diyfashion/images/Small_FFM.jpg
hxxp://dkfcp51of8gut.cloudfront.net/themes/diyfashion/images/Small_FFM.jpg
hxxp://192.168.1.121/themes/diyfashion/images/bluefin_badge_lightbackground.png
hxxp://dkfcp51of8gut.cloudfront.net/themes/diyfashion/images/bluefin_badge_lightbackground.png
hxxp://cs107.wac.edgecastcdn.net/widgets.js
hxxp://192.168.1.121/1807268/CA_2013_Old Navy_Young Adult Denim_Swf_300x250.swf
hxxp://dart.l.doubleclick.net/1807268/CA_2013_Old Navy_Young Adult Denim_Swf_300x250.swf
hxxp://192.168.1.121/load/?p=450&g=014&kw=&j=w
hxxp://loadus.tm.exelator.com/load/?p=450&g=014&kw=&j=w
hxxp://192.168.1.121/1807268/CA_2013_Old Navy_Young Adult Denim_Swf_728x90.swf
hxxp://dart.l.doubleclick.net/1807268/CA_2013_Old Navy_Young Adult Denim_Swf_728x90.swf
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/blackandwhitedress.jpg
hxxp://d1bolqtn38m284.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/blackandwhitedress.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/blackdress.jpg
hxxp://d1bolqtn38m284.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/blackdress.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/blackjumpsuit.jpg
hxxp://d1bolqtn38m284.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/blackjumpsuit.jpg
hxxp://192.168.1.121/www/delivery/ajs.php?zoneid=1&target=_top&cb=6628006836&charset=UTF-8&loc=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&referer=http://27773.t.c.adlinker.info/?id=
hxxp://adnproxy.bluefinmediasites.com/www/delivery/ajs.php?zoneid=1&target=_top&cb=6628006836&charset=UTF-8&loc=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&referer=http://27773.t.c.adlinker.info/?id=
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/whitebaggysuite.jpg
hxxp://d1bolqtn38m284.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/whitebaggysuite.jpg
hxxp://192.168.1.121/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3537985431682058307
hxxp://r.openx.net.akadns.net/set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=3537985431682058307
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/whitelongdress.jpg
hxxp://d1bolqtn38m284.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/whitelongdress.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/6waystomaxi-06.jpg
hxxp://d1bolqtn38m284.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/6waystomaxi-06.jpg
hxxp://192.168.1.121/themes/newgc/images/sprites_h_v2.png
hxxp://d3erqjfwf2w9ka.cloudfront.net/themes/newgc/images/sprites_h_v2.png
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/6waystomaxi-05.jpg
hxxp://d1bolqtn38m284.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/6waystomaxi-05.jpg
hxxp://192.168.1.121/themes/newgc/images/Spanish_Icon.png
hxxp://192.168.1.121/themes/newgc/images/sprites_v8.png
hxxp://d3erqjfwf2w9ka.cloudfront.net/themes/newgc/images/Spanish_Icon.png
hxxp://d3erqjfwf2w9ka.cloudfront.net/themes/newgc/images/sprites_v8.png
hxxp://192.168.1.121/ast/js/vm/jslib/resources/underscore-min-ns-1.4.2.js
hxxp://a1092.g.akamai.net/ast/js/vm/jslib/resources/underscore-min-ns-1.4.2.js
hxxp://192.168.1.121/sites/all/libraries/superfish/images/shadow.png
hxxp://dkfcp51of8gut.cloudfront.net/sites/all/libraries/superfish/images/shadow.png
hxxp://192.168.1.121/b?c1=8&c2=6000002&c3=60000&c4=&c5=&c6=&c15=&cv=1.3&cj=1&rn=20130818041104
hxxp://a1294.w20.akamai.net/b?c1=8&c2=6000002&c3=60000&c4=&c5=&c6=&c15=&cv=1.3&cj=1&rn=20130818041104
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/5waysmaxi52213-02.jpg
hxxp://192.168.1.121/www/images/88926e4cf3bd1b268a6f5a74cce0bf0b.jpg
hxxp://d1bolqtn38m284.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/5waysmaxi52213-02.jpg
hxxp://dazlgu219mggh.cloudfront.net/www/images/88926e4cf3bd1b268a6f5a74cce0bf0b.jpg
hxxp://192.168.1.121/ast/js/vm/jslib/core_1372942642.js
hxxp://a1092.g.akamai.net/ast/js/vm/jslib/core_1372942642.js
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk12.jpg
hxxp://d1bolqtn38m284.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk12.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk11.jpg
hxxp://d1bolqtn38m284.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk11.jpg
hxxp://192.168.1.121/ast/js/vm/jslib/data_1375889316.js
hxxp://a1092.g.akamai.net/ast/js/vm/jslib/data_1375889316.js
hxxp://192.168.1.121/load/?p=450&g=014&kw=&j=w&xl8blockcheck=1
hxxp://loadus.tm.exelator.com/load/?p=450&g=014&kw=&j=w&xl8blockcheck=1
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk10.jpg
hxxp://d1bolqtn38m284.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk10.jpg
hxxp://192.168.1.121/ast/js/vm/jslib/debug_1336489573.js
hxxp://a1092.g.akamai.net/ast/js/vm/jslib/debug_1336489573.js
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk8.jpg
hxxp://d1bolqtn38m284.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk8.jpg
hxxp://192.168.1.121/ast/js/vm/jslib/fx_1352896232.js
hxxp://a1092.g.akamai.net/ast/js/vm/jslib/fx_1352896232.js
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk7.jpg
hxxp://d1bolqtn38m284.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/multiplespiecesways-lk7.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/292x220/images/aaaaaaaaaaaaaaluxxxy86_0.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/292x220/images/aaaaaaaaaaaaaaluxxxy86_0.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/125x80/images/lllll.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/125x80/images/lllll.jpg
hxxp://192.168.1.121/themes/diyfashion/images/search_bg.png
hxxp://dkfcp51of8gut.cloudfront.net/themes/diyfashion/images/search_bg.png
hxxp://192.168.1.121/swimwear/beach-babe-10-bikini-tops-lend-you-maximum-seaside-cleavage-43283?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773
hxxp://diyfashion.com/swimwear/beach-babe-10-bikini-tops-lend-you-maximum-seaside-cleavage-43283?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773
hxxp://192.168.1.121/ast/js/vm/jslib/fx2_1353596579.js
hxxp://a1092.g.akamai.net/ast/js/vm/jslib/fx2_1353596579.js
hxxp://192.168.1.121/ast/js/vm/jslib/itxt_1375888467.js
hxxp://a1092.g.akamai.net/ast/js/vm/jslib/itxt_1375888467.js
hxxp://192.168.1.121/scoopstips/all-single-ladies-10-post-break-dresses-mean-sweet-revenge-43884?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773
hxxp://diyfashion.com/scoopstips/all-single-ladies-10-post-break-dresses-mean-sweet-revenge-43884?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773
hxxp://inw-ad-lb4.rfihub.com/cm?in=1&pub=25
hxxp://192.168.1.121/ast/js/vm/jslib/metrics_1329390699.js
hxxp://a1092.g.akamai.net/ast/js/vm/jslib/metrics_1329390699.js
hxxp://192.168.1.121/ast/js/vm/jslib/tmpl_1374489987.js
hxxp://a1092.g.akamai.net/ast/js/vm/jslib/tmpl_1374489987.js
hxxp://192.168.1.121/ast/js/vm/jslib/ui_1374489197.js
hxxp://a1092.g.akamai.net/ast/js/vm/jslib/ui_1374489197.js
hxxp://192.168.1.121/w/1.0/ri?ts=1fHNpZD0xODUzNnxyYWlkPTRlYjFmNDBmLWUwMDItNGNlYS1hZGRhLTZkY2ViMDBmOWIwN3xhdWlkPTExNTg2MXx1cj1rVVhRejliOG9yfGFzPTcyOHg5MHxwaWQ9MTI0MjF8YWlkPTEyMDIyMjB8cHViPTQxMjV8bGlkPTcxNzEwMXxhdW09RE1JRC5XRUJ8dT0xfHQ9NHxyaWQ9NzJlNDU0ZmEtNmI1Yi00NTA4LWFkODYtMTM4NjNmOGU5OWI1fG9pZD0yMTIzMTF8Ym09QlVZSU5HLk5PTkdVQVJBTlRFRUR8cD0xNDB8cGM9VVNEfGFjPVVTRHxwbT1QUklDSU5HLkNQTXxzc2lkPTEwNDk5fHJ0PTEzNzY3OTkwNjZ8cHI9MTQwfGFkdj00NjQz
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/ri?ts=1fHNpZD0xODUzNnxyYWlkPTRlYjFmNDBmLWUwMDItNGNlYS1hZGRhLTZkY2ViMDBmOWIwN3xhdWlkPTExNTg2MXx1cj1rVVhRejliOG9yfGFzPTcyOHg5MHxwaWQ9MTI0MjF8YWlkPTEyMDIyMjB8cHViPTQxMjV8bGlkPTcxNzEwMXxhdW09RE1JRC5XRUJ8dT0xfHQ9NHxyaWQ9NzJlNDU0ZmEtNmI1Yi00NTA4LWFkODYtMTM4NjNmOGU5OWI1fG9pZD0yMTIzMTF8Ym09QlVZSU5HLk5PTkdVQVJBTlRFRUR8cD0xNDB8cGM9VVNEfGFjPVVTRHxwbT1QUklDSU5HLkNQTXxzc2lkPTEwNDk5fHJ0PTEzNzY3OTkwNjZ8cHI9MTQwfGFkdj00NjQz
hxxp://192.168.1.121/t.gif?_=1376799080267&count=horizontal&id=twitter-widget-0&lang=en&original_referer=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&size=m&text=Today's Obsession: H&M's Conscious Exclusive Collection | www.diyfashion.com&url=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&type=share&twttr_referrer=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&twttr_widget=1&twttr_hask=0&twttr_li=0&twttr_pid=
hxxp://e5903.g.akamaiedge.net/t.gif?_=1376799080267&count=horizontal&id=twitter-widget-0&lang=en&original_referer=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&size=m&text=Today's Obsession: H&M's Conscious Exclusive Collection | www.diyfashion.com&url=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&type=share&twttr_referrer=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&twttr_widget=1&twttr_hask=0&twttr_li=0&twttr_pid=
hxxp://192.168.1.121/www/delivery/lg.php?bannerid=33&campaignid=15&zoneid=1&loc=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&referer=http://27773.t.c.adlinker.info/?id=&cb=7332f3c662
hxxp://adnproxy.bluefinmediasites.com/www/delivery/lg.php?bannerid=33&campaignid=15&zoneid=1&loc=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&referer=http://27773.t.c.adlinker.info/?id=&cb=7332f3c662
hxxp://192.168.1.121/ast/js/vm/jslib/ui_mobile_1362652240.js
hxxp://a1092.g.akamai.net/ast/js/vm/jslib/ui_mobile_1362652240.js
hxxp://192.168.1.121/ast/js/vm/style/itxtcss_1362679449.css
hxxp://a1092.g.akamai.net/ast/js/vm/style/itxtcss_1362679449.css
hxxp://192.168.1.121/load/net.php?n=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&h=b54d2c478de18ede0e69c92a82e99db2
hxxp://loadus.tm.exelator.com/load/net.php?n=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&h=b54d2c478de18ede0e69c92a82e99db2
hxxp://192.168.1.121/1/urls/count.json?url=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&callback=twttr.receiveCount
hxxp://e5903.g.akamaiedge.net/1/urls/count.json?url=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&callback=twttr.receiveCount
hxxp://192.168.1.121/set?pid=2076250f-92c2-4ecd-9043-cc63ee6c4577&rtb=812899733543618736
hxxp://r.openx.net.akadns.net/set?pid=2076250f-92c2-4ecd-9043-cc63ee6c4577&rtb=812899733543618736
hxxp://192.168.1.121/www/delivery/ajs.php?zoneid=2&target=_top&cb=53064458956&charset=UTF-8&loc=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&referer=http://27773.t.c.adlinker.info/?id=
hxxp://adnproxy.bluefinmediasites.com/www/delivery/ajs.php?zoneid=2&target=_top&cb=53064458956&charset=UTF-8&loc=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&referer=http://27773.t.c.adlinker.info/?id=
hxxp://192.168.1.121/www/images/54a612077439a90c574d3b419113c692.jpg
hxxp://dazlgu219mggh.cloudfront.net/www/images/54a612077439a90c574d3b419113c692.jpg
hxxp://192.168.1.121/w/1.0/arj?ai=b8c8ff88-76ea-7d23-fbbe-36d3f07ccba8&o=6718608652&callback=OX_6718608652&ju=http://diyfashion.com/ads/first-look-katie-holmes-iris-jewelry-43369?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/arj?ai=b8c8ff88-76ea-7d23-fbbe-36d3f07ccba8&o=6718608652&callback=OX_6718608652&ju=http://diyfashion.com/ads/first-look-katie-holmes-iris-jewelry-43369?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://192.168.1.121/d/54m7brmm/566d205b4f9ea3c0950f7fefc9b91227/AA/3
hxxp://95.211.194.79/d/54m7brmm/566d205b4f9ea3c0950f7fefc9b91227/AA/3
hxxp://192.168.1.121/www/delivery/lg.php?bannerid=181&campaignid=6&zoneid=2&loc=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&referer=http://27773.t.c.adlinker.info/?id=&cb=9e0d9173bd
hxxp://adnproxy.bluefinmediasites.com/www/delivery/lg.php?bannerid=181&campaignid=6&zoneid=2&loc=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&referer=http://27773.t.c.adlinker.info/?id=&cb=9e0d9173bd
hxxp://192.168.1.121/w/1.0/arj?cc=1&ai=b8c8ff88-76ea-7d23-fbbe-36d3f07ccba8&o=6718608652&callback=OX_6718608652&ju=http://diyfashion.com/ads/first-look-katie-holmes-iris-jewelry-43369?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/arj?cc=1&ai=b8c8ff88-76ea-7d23-fbbe-36d3f07ccba8&o=6718608652&callback=OX_6718608652&ju=http://diyfashion.com/ads/first-look-katie-holmes-iris-jewelry-43369?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://192.168.1.121/w/1.0/arj?ai=603ab0ab-6f18-78b7-8b39-a6fe63ea2dfe&o=3830223488&callback=OX_3830223488&ju=http://gossipcenter.com/kristen-stewart/kristen-stewart-covers-v-magazines-spring-preview-2013-766014?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12421&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/arj?ai=603ab0ab-6f18-78b7-8b39-a6fe63ea2dfe&o=3830223488&callback=OX_3830223488&ju=http://gossipcenter.com/kristen-stewart/kristen-stewart-covers-v-magazines-spring-preview-2013-766014?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12421&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://192.168.1.121/d/54m7brmm/566d205b4f9ea3c0950f7fefc9b91227/AA/4
hxxp://95.211.194.79/d/54m7brmm/566d205b4f9ea3c0950f7fefc9b91227/AA/4
hxxp://192.168.1.121/w/1.0/sc?r=http://ox-d.bluefinmedianetwork.com/w/1.0/arj?cc=1&ai=b8c8ff88-76ea-7d23-fbbe-36d3f07ccba8&o=6718608652&callback=OX_6718608652&ju=http%3A//diyfashion.com/ads/first-look-katie-holmes-iris-jewelry-43369%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&jr=http%3A//27773.t.c.adlinker.info/%3Fid%3D&pgid=12336&res=1440x900x24&plg=swf%2Cshk%2Cpm&ch=UTF-8&tz=240
hxxp://prod-mkt-d.d.xx.openx.com.akadns.net/w/1.0/sc?r=http://ox-d.bluefinmedianetwork.com/w/1.0/arj?cc=1&ai=b8c8ff88-76ea-7d23-fbbe-36d3f07ccba8&o=6718608652&callback=OX_6718608652&ju=http%3A//diyfashion.com/ads/first-look-katie-holmes-iris-jewelry-43369%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&jr=http%3A//27773.t.c.adlinker.info/%3Fid%3D&pgid=12336&res=1440x900x24&plg=swf%2Cshk%2Cpm&ch=UTF-8&tz=240
hxxp://192.168.1.121/d/54m7brmm/566d205b4f9ea3c0950f7fefc9b91227/AA/1
hxxp://95.211.194.79/d/54m7brmm/566d205b4f9ea3c0950f7fefc9b91227/AA/1
hxxp://192.168.1.121/w/1.0/ri?ts=1fHJhaWQ9NGViMWY0MGYtZTAwMi00Y2VhLWFkZGEtNmRjZWIwMGY5YjA3fGF1aWQ9MTE1ODU4fGx3PTE0NDF8YWlkPTEwMjc0NTd8b2lkPTEwOTk0N3xibT1CVVlJTkcuTk9OR1VBUkFOVEVFRHxzc2lkPTEwNDk5fGFkdj0xNDYwMXxzaWQ9MTg1MzZ8YXM9MzAweDI1MHx1cj1uTEpESFdzNXFQfHBpZD0xMjQyMXxwdWI9NDEyNXxhdW09RE1JRC5XRUJ8bGlkPTYxNzY5NXx1PTF8dD00fHJpZD1hNjQ4ZWZmNy05MjZjLTQwM2QtYjc1My03ODdhYThmMWM2MjJ8cGM9VVNEfHA9MzN8YWM9VVNEfHBtPVBSSUNJTkcuQ1BNfHJ0PTEzNzY3OTkwNjZ8bGM9Mnxwcj0zMw
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/ri?ts=1fHJhaWQ9NGViMWY0MGYtZTAwMi00Y2VhLWFkZGEtNmRjZWIwMGY5YjA3fGF1aWQ9MTE1ODU4fGx3PTE0NDF8YWlkPTEwMjc0NTd8b2lkPTEwOTk0N3xibT1CVVlJTkcuTk9OR1VBUkFOVEVFRHxzc2lkPTEwNDk5fGFkdj0xNDYwMXxzaWQ9MTg1MzZ8YXM9MzAweDI1MHx1cj1uTEpESFdzNXFQfHBpZD0xMjQyMXxwdWI9NDEyNXxhdW09RE1JRC5XRUJ8bGlkPTYxNzY5NXx1PTF8dD00fHJpZD1hNjQ4ZWZmNy05MjZjLTQwM2QtYjc1My03ODdhYThmMWM2MjJ8cGM9VVNEfHA9MzN8YWM9VVNEfHBtPVBSSUNJTkcuQ1BNfHJ0PTEzNzY3OTkwNjZ8bGM9Mnxwcj0zMw
hxxp://192.168.1.121/00/53/14/uat_21453.js?ad_size=300x250
hxxp://gs1.wac.edgecastcdn.net/00/53/14/uat_21453.js?ad_size=300x250
hxxp://192.168.1.121/click/?s=0.0&a=Y-wuNNu40CJSDGWqOxqb839C2QktpvuKD20iJw7R__HZW2awOtBeXZYfLsTIBToswJNC9drPJ9F42UPAkAR2sUyER_mOdJYb3HaALBK-ZmFbwcGmBU7C8gV9tFNHPGGVtZiXh05YAw4g_So9RVdmPiFkIpYr7Eqbzh6OLkwLtMJUZF2YMK07-tgWoOR2NyUiMW5Idzyzv35zNd0QfJ99kUqf3rP7VodTAPtC7zTnxcM9YsB4w5K3pVPEwwmwLr1tbx1y41t7KTCXAcA1jM88WNBIrltd4rCAGLmaEI3ElC_VxcdK_NvTXh_tX_TdWGU2EqpcD0bGFsEEhjq0yrtRQA==&l=sBYJJqMR5t_J3JFoLV0EyuqTHpZ-1KePedoBDLDtwUWy4RPf4x0l5b3JvtDEm7JskwOsJ0jvtUz_p8sfkzffsi1_K-v87rruyIeR9KRZszz8jP2rmjfpOkF-TXKtZozK8pXuuVz6nZrUh1MW-6uTJ_-oz2kTZ4v4WOx2php9wvAU1qtcjh4XbgMlvTnzZN4UWNzfPt85s3liGAN5N83ENFXCbIhr6MLbF9tF3GhAqbC156bnGXGatuao9EcCGpBPvXu7Eju5KJasAuFbTgWIdU2ww1BD57F0sKxLPkjGWQnpR17M-N4jB8edRsMKBwvU7UfH043Wz0DfHb6LrDaVR7hl2qdEqw8FOyCGYMMynrk=
hxxp://c.t.c.t.c.clickpayz.com/click/?s=0.0&a=Y-wuNNu40CJSDGWqOxqb839C2QktpvuKD20iJw7R__HZW2awOtBeXZYfLsTIBToswJNC9drPJ9F42UPAkAR2sUyER_mOdJYb3HaALBK-ZmFbwcGmBU7C8gV9tFNHPGGVtZiXh05YAw4g_So9RVdmPiFkIpYr7Eqbzh6OLkwLtMJUZF2YMK07-tgWoOR2NyUiMW5Idzyzv35zNd0QfJ99kUqf3rP7VodTAPtC7zTnxcM9YsB4w5K3pVPEwwmwLr1tbx1y41t7KTCXAcA1jM88WNBIrltd4rCAGLmaEI3ElC_VxcdK_NvTXh_tX_TdWGU2EqpcD0bGFsEEhjq0yrtRQA==&l=sBYJJqMR5t_J3JFoLV0EyuqTHpZ-1KePedoBDLDtwUWy4RPf4x0l5b3JvtDEm7JskwOsJ0jvtUz_p8sfkzffsi1_K-v87rruyIeR9KRZszz8jP2rmjfpOkF-TXKtZozK8pXuuVz6nZrUh1MW-6uTJ_-oz2kTZ4v4WOx2php9wvAU1qtcjh4XbgMlvTnzZN4UWNzfPt85s3liGAN5N83ENFXCbIhr6MLbF9tF3GhAqbC156bnGXGatuao9EcCGpBPvXu7Eju5KJasAuFbTgWIdU2ww1BD57F0sKxLPkjGWQnpR17M-N4jB8edRsMKBwvU7UfH043Wz0DfHb6LrDaVR7hl2qdEqw8FOyCGYMMynrk=
hxxp://192.168.1.121/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=9045/24870&geo=na&co=ca
hxxp://a978.g.akamai.net/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=9045/24870&geo=na&co=ca
hxxp://192.168.1.121/00/53/14/adserv_21453.js?ad_size=300x250&referrer=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&nsafe=general&reftype=none&disp=none&tmiv=1&tcb=0.6545579836238176
hxxp://uat-net.technoratimedia.com/00/53/14/adserv_21453.js?ad_size=300x250&referrer=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&nsafe=general&reftype=none&disp=none&tmiv=1&tcb=0.6545579836238176
hxxp://192.168.1.121/b?c1=8&c2=6036211&c3=11001&c4=21453&ns__t=1376799087295&ns_c=UTF-8&c8=Happy 19th Birthday Justin Bieber! | GossipCenter - Entertainment News Leaders&c7=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&c9=http://27773.t.c.adlinker.info/?id=
hxxp://a1294.w20.akamai.net/b?c1=8&c2=6036211&c3=11001&c4=21453&ns__t=1376799087295&ns_c=UTF-8&c8=Happy 19th Birthday Justin Bieber! | GossipCenter - Entertainment News Leaders&c7=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&c9=http://27773.t.c.adlinker.info/?id=
hxxp://192.168.1.121/ttj?id=997779&size=300x250&pfm=1&tent=ch&tlfs=ch&tclb=ch&rtg=ga&brw=cr3&os=wvs&prm=0&nwk=1&efo=0&dir=0&rem=1&pas=0&position=below&uatRandNo=9731&ad_type=ad&section=3711779&ad_size=300x250&referrer=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&nsafe=general&reftype=none&disp=none&pub_url=hxxp://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&cb=8530042496
hxxp://ib.adnxs.com/ttj?id=997779&size=300x250&pfm=1&tent=ch&tlfs=ch&tclb=ch&rtg=ga&brw=cr3&os=wvs&prm=0&nwk=1&efo=0&dir=0&rem=1&pas=0&position=below&uatRandNo=9731&ad_type=ad&section=3711779&ad_size=300x250&referrer=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&nsafe=general&reftype=none&disp=none&pub_url=hxxp://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&cb=8530042496
hxxp://192.168.1.121/b2?c1=8&c2=6036211&c3=11001&c4=21453&ns__t=1376799087295&ns_c=UTF-8&c8=Happy 19th Birthday Justin Bieber! | GossipCenter - Entertainment News Leaders&c7=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&c9=http://27773.t.c.adlinker.info/?id=
hxxp://a1294.w20.akamai.net/b2?c1=8&c2=6036211&c3=11001&c4=21453&ns__t=1376799087295&ns_c=UTF-8&c8=Happy 19th Birthday Justin Bieber! | GossipCenter - Entertainment News Leaders&c7=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&c9=http://27773.t.c.adlinker.info/?id=
hxxp://192.168.1.121/w/1.0/arj?ai=6c9acdd6-9481-7381-4764-1444119cf3aa&o=8725893794&callback=OX_8725893794&ju=http://diyfashion.com/scoopstips/10-dresses-make-you-look-10-pounds-lighter-without-counting-calories-41248?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/arj?ai=6c9acdd6-9481-7381-4764-1444119cf3aa&o=8725893794&callback=OX_8725893794&ju=http://diyfashion.com/scoopstips/10-dresses-make-you-look-10-pounds-lighter-without-counting-calories-41248?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://192.168.1.121/bounce?/ttj?id=997779&size=300x250&pfm=1&tent=ch&tlfs=ch&tclb=ch&rtg=ga&brw=cr3&os=wvs&prm=0&nwk=1&efo=0&dir=0&rem=1&pas=0&position=below&uatRandNo=9731&ad_type=ad&section=3711779&ad_size=300x250&referrer=http%3A//gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&nsafe=general&reftype=none&disp=none&pub_url=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&cb=8530042496
hxxp://ib.adnxs.com/bounce?/ttj?id=997779&size=300x250&pfm=1&tent=ch&tlfs=ch&tclb=ch&rtg=ga&brw=cr3&os=wvs&prm=0&nwk=1&efo=0&dir=0&rem=1&pas=0&position=below&uatRandNo=9731&ad_type=ad&section=3711779&ad_size=300x250&referrer=http%3A//gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&nsafe=general&reftype=none&disp=none&pub_url=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&cb=8530042496
hxxp://192.168.1.121/dis/usersync.aspx?r=6&p=2&cp=rubiconus&url=http://pixel.rubiconproject.com/tap.php?v=5421&nid=2054&put=@@CRITEO_USERID@@&expires=30
hxxp://dis.criteo.com/dis/usersync.aspx?r=6&p=2&cp=rubiconus&url=http://pixel.rubiconproject.com/tap.php?v=5421&nid=2054&put=@@CRITEO_USERID@@&expires=30
hxxp://192.168.1.121/c/1376799088153/o?p=http://feed-rt.baronsoffers.com/offer/feed/q/aT01OTk2LHM9MzAweDI1MCxuPWlmcmFtZQ==?subid=default&r=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&pid=2406&__js__=true
hxxp://e846.g.akamaiedge.net/c/1376799088153/o?p=http://feed-rt.baronsoffers.com/offer/feed/q/aT01OTk2LHM9MzAweDI1MCxuPWlmcmFtZQ==?subid=default&r=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&pid=2406&__js__=true
hxxp://192.168.1.121/ast/tt/09/px.gif
hxxp://a1092.g.akamai.net/ast/tt/09/px.gif
hxxp://192.168.1.121/w/1.0/sc?cc=1&r=http://ox-d.bluefinmedianetwork.com/w/1.0/arj?cc=1&ai=b8c8ff88-76ea-7d23-fbbe-36d3f07ccba8&o=6718608652&callback=OX_6718608652&ju=http%3A//diyfashion.com/ads/first-look-katie-holmes-iris-jewelry-43369%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&jr=http%3A//27773.t.c.adlinker.info/%3Fid%3D&pgid=12336&res=1440x900x24&plg=swf%2Cshk%2Cpm&ch=UTF-8&tz=240
hxxp://prod-mkt-d.d.xx.openx.com.akadns.net/w/1.0/sc?cc=1&r=http://ox-d.bluefinmedianetwork.com/w/1.0/arj?cc=1&ai=b8c8ff88-76ea-7d23-fbbe-36d3f07ccba8&o=6718608652&callback=OX_6718608652&ju=http%3A//diyfashion.com/ads/first-look-katie-holmes-iris-jewelry-43369%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&jr=http%3A//27773.t.c.adlinker.info/%3Fid%3D&pgid=12336&res=1440x900x24&plg=swf%2Cshk%2Cpm&ch=UTF-8&tz=240
hxxp://192.168.1.121/c/1376799088613/o?p=http://feed-rt.baronsoffers.com/offer/feed/q/aT01OTk2LHM9MzAweDI1MCxuPWlmcmFtZQ==?subid=default&r=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&pid=2406&__js__=true
hxxp://e846.g.akamaiedge.net/c/1376799088613/o?p=http://feed-rt.baronsoffers.com/offer/feed/q/aT01OTk2LHM9MzAweDI1MCxuPWlmcmFtZQ==?subid=default&r=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&pid=2406&__js__=true
hxxp://192.168.1.121/iframe/1209/!?che=38267&camid=032112&plaid=997779&adgid=2419&channel=5,7,21
hxxp://sjcpool.data.agkn.com/iframe/1209/!?che=38267&camid=032112&plaid=997779&adgid=2419&channel=5,7,21
hxxp://192.168.1.121/w/1.0/arj?cc=1&ai=6c9acdd6-9481-7381-4764-1444119cf3aa&o=8725893794&callback=OX_8725893794&ju=http://diyfashion.com/scoopstips/10-dresses-make-you-look-10-pounds-lighter-without-counting-calories-41248?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/arj?cc=1&ai=6c9acdd6-9481-7381-4764-1444119cf3aa&o=8725893794&callback=OX_8725893794&ju=http://diyfashion.com/scoopstips/10-dresses-make-you-look-10-pounds-lighter-without-counting-calories-41248?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://192.168.1.121/w/1.0/arj?mi=a7ad2905-0c67-43f6-8ac0-919ad1fd3962&mn=1&mc=1&cc=1&ai=b8c8ff88-76ea-7d23-fbbe-36d3f07ccba8&o=6718608652&callback=OX_6718608652&ju=http://diyfashion.com/ads/first-look-katie-holmes-iris-jewelry-43369?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/arj?mi=a7ad2905-0c67-43f6-8ac0-919ad1fd3962&mn=1&mc=1&cc=1&ai=b8c8ff88-76ea-7d23-fbbe-36d3f07ccba8&o=6718608652&callback=OX_6718608652&ju=http://diyfashion.com/ads/first-look-katie-holmes-iris-jewelry-43369?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&jr=http://27773.t.c.adlinker.info/?id=&pgid=12336&res=1440x900x24&plg=swf,shk,pm&ch=UTF-8&tz=240
hxxp://192.168.1.121/00/53/14/adserv_21453.js?ad_size=300x250&referrer=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&nsafe=general&reftype=none&disp=none&tmiv=1&tcb=0.33129308582283556
hxxp://uat-net.technoratimedia.com/00/53/14/adserv_21453.js?ad_size=300x250&referrer=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&nsafe=general&reftype=none&disp=none&tmiv=1&tcb=0.33129308582283556
hxxp://192.168.1.121/w/1.0/sc?r=http://ox-d.bluefinmedianetwork.com/w/1.0/arj?cc=1&ai=6c9acdd6-9481-7381-4764-1444119cf3aa&o=8725893794&callback=OX_8725893794&ju=http%3A//diyfashion.com/scoopstips/10-dresses-make-you-look-10-pounds-lighter-without-counting-calories-41248%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&jr=http%3A//27773.t.c.adlinker.info/%3Fid%3D&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf%2Cshk%2Cpm&ch=UTF-8&tz=240
hxxp://prod-mkt-d.d.xx.openx.com.akadns.net/w/1.0/sc?r=http://ox-d.bluefinmedianetwork.com/w/1.0/arj?cc=1&ai=6c9acdd6-9481-7381-4764-1444119cf3aa&o=8725893794&callback=OX_8725893794&ju=http%3A//diyfashion.com/scoopstips/10-dresses-make-you-look-10-pounds-lighter-without-counting-calories-41248%3Futm_source%3D27773%26utm_medium%3Dcpc%26utm_campaign%3Dclickpayz_27773&jr=http%3A//27773.t.c.adlinker.info/%3Fid%3D&pgid=12336&c.area=fashion&res=1440x900x24&plg=swf%2Cshk%2Cpm&ch=UTF-8&tz=240
hxxp://192.168.1.121/ttj?id=997779&size=300x250&pfm=1&tent=ch&tlfs=ch&tclb=ch&rtg=ga&brw=cr3&os=wvs&prm=0&nwk=1&efo=0&dir=0&rem=1&pas=0&position=below&uatRandNo=27803&ad_type=ad&section=3711779&ad_size=300x250&referrer=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&nsafe=general&reftype=none&disp=none&pub_url=hxxp://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&cb=10865273881
hxxp://ib.adnxs.com/ttj?id=997779&size=300x250&pfm=1&tent=ch&tlfs=ch&tclb=ch&rtg=ga&brw=cr3&os=wvs&prm=0&nwk=1&efo=0&dir=0&rem=1&pas=0&position=below&uatRandNo=27803&ad_type=ad&section=3711779&ad_size=300x250&referrer=http://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&nsafe=general&reftype=none&disp=none&pub_url=hxxp://gossipcenter.com/justin-bieber/happy-19th-birthday-justin-bieber-815329?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&cb=10865273881
hxxp://192.168.1.121/w/1.0/ri?ts=1fHJhaWQ9NGViMWY0MGYtZTAwMi00Y2VhLWFkZGEtNmRjZWIwMGY5YjA3fGF1aWQ9MTE1ODU3fGx3PTE0NDF8YWlkPTEwMjc0NTd8b2lkPTEwOTk0N3xibT1CVVlJTkcuTk9OR1VBUkFOVEVFRHxzc2lkPTEwNDk5fGFkdj0xNDYwMXxzaWQ9MTg1MzZ8YXM9MzAweDI1MHx1cj1jSjV1b1dFbG15fHBpZD0xMjQyMXxwdWI9NDEyNXxhdW09RE1JRC5XRUJ8bGlkPTYxNzY5NXx1PTF8dD00fHJpZD0yZWE2MmE0ZC04NmZjLTRhNTQtODA3MC1hZTNmZTUwNDg3OTd8cGM9VVNEfHA9MzN8YWM9VVNEfHBtPVBSSUNJTkcuQ1BNfHJ0PTEzNzY3OTkwNjZ8bGM9Mnxwcj0zMw
hxxp://prod30-brandtech-d.d.xx.openx.com.akadns.net/w/1.0/ri?ts=1fHJhaWQ9NGViMWY0MGYtZTAwMi00Y2VhLWFkZGEtNmRjZWIwMGY5YjA3fGF1aWQ9MTE1ODU3fGx3PTE0NDF8YWlkPTEwMjc0NTd8b2lkPTEwOTk0N3xibT1CVVlJTkcuTk9OR1VBUkFOVEVFRHxzc2lkPTEwNDk5fGFkdj0xNDYwMXxzaWQ9MTg1MzZ8YXM9MzAweDI1MHx1cj1jSjV1b1dFbG15fHBpZD0xMjQyMXxwdWI9NDEyNXxhdW09RE1JRC5XRUJ8bGlkPTYxNzY5NXx1PTF8dD00fHJpZD0yZWE2MmE0ZC04NmZjLTRhNTQtODA3MC1hZTNmZTUwNDg3OTd8cGM9VVNEfHA9MzN8YWM9VVNEfHBtPVBSSUNJTkcuQ1BNfHJ0PTEzNzY3OTkwNjZ8bGM9Mnxwcj0zMw
hxxp://192.168.1.121/ast/tt/09/loading.gif
hxxp://a1092.g.akamai.net/ast/tt/09/loading.gif
hxxp://192.168.1.121/v4/init?ts=1376799089135&pagecl=8063&fv=11&muid=&refurl=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&ipid=43219&jscallback=$iTXT.js.callback0
hxxp://ny1-g007.intellitxt.com/v4/init?ts=1376799089135&pagecl=8063&fv=11&muid=&refurl=http://diyfashion.com/scoopstips/todays-obsession-hms-conscious-exclusive-collection-43477?utm_source=27773&utm_medium=cpc&utm_campaign=clickpayz_27773&ipid=43219&jscallback=$iTXT.js.callback0
hxxp://192.168.1.121/e/getdata.xgi?che=38267&dt=br&pkey=rfkm88wbvzn36&reppipe=,&edr=on&repequal=_&ru=http://p.acxiom-online.com/pixel/pel?pid=1001&id=&t=1001&uid=&ot=pixel
hxxp://oregon-cassandra-tomcat-01-599590717.us-west-2.elb.amazonaws.co/e/getdata.xgi?che=38267&dt=br&pkey=rfkm88wbvzn36&reppipe=,&edr=on&repequal=_&ru=http://p.acxiom-online.com/pixel/pel?pid=1001&id=&t=1001&uid=&ot=pixel
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/katieh031513-_2.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/katieh031513-_2.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/katieh031513-_3.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/katieh031513-_3.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/khudson-073113-_1.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/khudson-073113-_1.jpg
hxxp://192.168.1.121/events/naomi-campbell-taking-face-uk-43519?utm_source=27922&utm_medium=cpc&utm_campaign=clickpayz_27922
hxxp://diyfashion.com/events/naomi-campbell-taking-face-uk-43519?utm_source=27922&utm_medium=cpc&utm_campaign=clickpayz_27922
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/katieh031513-_1.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/katieh031513-_1.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/rag-071713-_3.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/rag-071713-_3.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/rob-080813-1.jpeg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/rob-080813-1.jpeg
hxxp://192.168.1.121/adserver/dwReconcile.aspx
hxxp://a907.g.akamai.net/adserver/dwReconcile.aspx
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/rag-071713-_1.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/rag-071713-_1.jpg
hxxp://192.168.1.121/d/54m7brmm/566d205b4f9ea3c0950f7fefc9b91227/AA/0
hxxp://95.211.194.79/d/54m7brmm/566d205b4f9ea3c0950f7fefc9b91227/AA/0
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/khudson-073113-_4.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/khudson-073113-_4.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/rag-071713-_2.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/rag-071713-_2.jpg
hxxp://192.168.1.121/iframe/1209/!?che=77417&camid=032112&plaid=997779&adgid=2419&channel=5,7,21
hxxp://sjcpool.data.agkn.com/iframe/1209/!?che=77417&camid=032112&plaid=997779&adgid=2419&channel=5,7,21
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/khudson-073113-_2.jpg
hxxp://dkfcp51of8gut.cloudfront.net/sites/diyfashion.com/files/imagecache/115x151/images/khudson-073113-_2.jpg
hxxp://192.168.1.121/sites/diyfashion.com/files/imagecache/115x151/images/turlington-ck-ad-07182013-01.jpg

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Terminate malicious process(es) (How to End a Process With the Task Manager):

   gbadkfeh.exe:1832
   nmpgbadk.exe:1092
   nmpgbadk.exe:del:1668
   rundll32.exe:1564
   mpgbadkf.exe:960
   4539a63f0a9ee57fe4b6a4b63258697f.exe:468

2. Delete the original Trojan file.
   
3. Delete or disinfect the following files created/modified by the Trojan:

   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CHEZ8TER\desktop.ini (67 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CHEZ8TER\mario[1].jar (134 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\1.exe (134 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\nmpgbadk.exe:del (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CHEZ8TER\5.1.2600_3[1].0_32 (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\svxvmpd\sdxwhnr\wow.dll (102 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\svxvmpd\sdxwhnr\wow.ini (108 bytes)
   %Documents and Settings%\%current user%\Application Data\GHISLER\WIN2.exe (15692 bytes)
   %Documents and Settings%\%current user%\Local Settings\Application Data\rosighm.dll (75 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\gbadkfeh.exe (137 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\mpgbadkf.exe (73 bytes)

4. Delete the following value(s) in the autorun key (How to Work with System Registry):

   [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   "GameServer33" = "%Documents and Settings%\%current user%\Application Data\GHISLER\WIN2.exe⥾"
   
   [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
   "rosighm" = "rundll32 %Documents and Settings%\%current user%\Local Settings\Application Data\rosighm.dll,rosighm"

5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
   
6. Reboot the computer.
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

Network Activity

Map

Strings from Dumps