has MS fixed?

[anthonysecurity]

Using the example file, I receive:

It doesn't look like 'eoirgoaiejrgoi.com' uses o365 It doesn't look like 'microsoft.com' uses o365 INVALID: [email protected]

Has MS now addressed this issue?

[anthonysecurity]

It appears using Protocol=rest instead of Autodiscoveryv1 allows enumeration to continue