https://hackershare.dev/bookmarks/676367
Office 365 leaking BCC domain name