```
├── 2_ordibehesht_1401.pdf
├── 30 ôÃÂ
çñà.pdf
├── Attack_Reports.zip
├── Employees.zip
├── Episode 2/
├── Attack Reports/
├── 02120dcf3b263702028a0441881d339ee4ff8e15_ïòçñô ùÃÂ
ÃÂéñï ÃÂ
çÃÂçÃÂà(èÃÂÃÂ
ÃÂ ÃÂ
çÃÂ_REDACTED.pdf
├── 4037e9382a99fdd96fe93eb0fd4380eea695bd3a_ïòçñô ùÃÂ
ÃÂéñï ÃÂ
çÃÂçÃÂà(èÃÂÃÂ
ÃÂ ÃÂ
çÃÂ_REDACTED.pdf
├── 834e8476d0e1e2b4b508cb3f6240b5ac03945f2e_CVE-2024-1709 - ïòçñô èññóàÃÂ_REDACTED.pdf
├── 8e7931f9f51b48dcd4e4c95445325f4e6f19b236_CVE-2024-1709 - (çÃÂ
çñê - êñéÃÂ_REDACTED.pdf
├── MJD_Monthly-Reps_Mehr_1403/
├── 1403-06-25_MJD_DailyReport.pdf
├── 1403-06-27_MJD_DailyReport.pdf
├── 1403-06-28_MJD_DailyReport.pdf
├── 1403-06-29_MJD_DailyReport.pdf
├── 1403-07-01_MJD_DailyReport.pdf
├── 1403-07-02_MJD_DailyReport.pdf
├── 1403-07-03_MJD_DailyReport.pdf
├── 1403-07-04_MJD_DailyReport.pdf
├── 1403-07-07_MJD_DailyReport.pdf
├── 1403-07-09_MJD_DailyReport.pdf
├── 1403-07-10_MJD_DailyReport.pdf
├── 1403-07-11_MJD_DailyReport.pdf
├── 1403-07-14_MJD_DailyReport.pdf
├── 1403-07-15_MJD_DailyReport.pdf
├── 1403-07-16_MJD_DailyReport.pdf
├── 1403-07-17_MJD_DailyReport.pdf
├── 1403-07-18_MJD_DailyReport.pdf
├── 1403-07-22_MJD_DailyReport.pdf
├── 1403-07-23_MJD_DailyReport.pdf
├── entry_exit_form.pdf
├── ïòçñô éçñ ÃÂ
ÃÂñ- MJD.pdf
├── Report-shrvr-hrv/
├── HSN2/
├── 1403-05-27-hsn_rtm_DailyReport.pdf
├── 1403-05-28-hsn_rtm_DailyReport.pdf
├── 1403-05-29-hsn_rtm_DailyReport.pdf
├── 1403-05-30-hsn_rtm_DailyReport.pdf
├── 1403-06-3-hsn_rtm_DailyReport.pdf
├── 1403-06-5-hsn_rtm_DailyReport.pdf
├── 1403-06-6-hsn_rtm_DailyReport.pdf
├── MJD/
├── 1403-05-27_MJD_DailyReport.pdf
├── 1403-05-28_MJD_DailyReport.pdf
├── 1403-05-29_MJD_DailyReport.pdf
├── 1403-05-30_MJD_DailyReport.pdf
├── 1403-06-03_MJD_DailyReport.pdf
├── 1403-06-05_MJD_DailyReport.pdf
├── 1403-06-06_MJD_DailyReport.pdf
├── e8ed42d00168744e408dd53c795008c76ee788e6_ïòçñô ùÃÂ
ÃÂéñï ÃÂ
çÃÂçÃÂà(èÃÂÃÂ
ÃÂ ÃÂ
çÃÂ_REDACTED.pdf
├── services.pdf
├── ïòçñô çÃÂÃÂÃÂàïóêñóà(wise.pdf
├── ïòçñô ùÃÂ
ÃÂéñï òÃÂ
óêçà- 1403 Final.pdf
├── Malwares and Logs/
├── All Targets/
├── Iran/
├── IR_Proxyshell_target.txt (100 tokens)
├── IR_Proxyshell_target2.txt (900 tokens)
├── mail.barez.org.txt (100 tokens)
├── Kuwait/
├── KW_proxyshell_target.txt (100 tokens)
├── kw-proxyshell-target.kw (100 tokens)
├── mail.kfmb.com.kw (400 tokens)
├── Saudi/
├── 212.12.165.155.yml (100 tokens)
├── 46.235.93.139.txt (100 tokens)
├── 77.240.93.43.txt (600 tokens)
├── SA_Proxyshell_target.txt (100 tokens)
├── mail1.solbsteel.com.txt (300 tokens)
├── Turkey/
├── TR_Exchange_target.txt (200 tokens)
├── hibrit.magmaweld.com.lua (200 tokens)
├── mail.dnstrade.com.tr.sql (300 tokens)
├── target turkey.tr (200 tokens)
├── All_Proxy_Shell_Targets/
├── AT/
├── AT_proxyshell_target.txt (1000 tokens)
├── AU/
├── AU_Proxyshell_target.txt (200 tokens)
├── AZ/
├── 20220509043739_default_89.147.201.146_ad.exchange.mail_652722.txt (1200 tokens)
├── 20220509044804_default_93.88.82.228_ad.exchange.mail_591622.txt (1300 tokens)
├── 20220509050029_default_85.132.107.206_ad.exchange.mail_710330.txt (1400 tokens)
├── 20220509050823_default_217.64.20.92_ad.exchange.mail_720068.txt (200 tokens)
├── 20220509051001_default_89.147.205.122_ad.exchange.mail_177500.txt (1200 tokens)
├── 20220509051255_default_94.20.81.41_ad.exchange.mail_202650.txt (1200 tokens)
├── 20220509051411_default_85.132.39.131_ad.exchange.mail_124921.txt (1100 tokens)
├── 20220509051745_default_89.147.205.100_ad.exchange.mail_249467.txt (1200 tokens)
├── 20220509052441_default_89.147.205.106_ad.exchange.mail_134901.txt (1200 tokens)
├── 20220509052603_default_94.20.74.71_ad.exchange.mail_215089.txt (900 tokens)
├── 20220509052840_default_85.132.79.220_ad.exchange.mail_098345.txt (1200 tokens)
├── 20220509053645_default_185.118.50.123_ad.exchange.mail_872835.txt (1300 tokens)
├── AZ_proxy_shell_target.txt (100 tokens)
├── OWA_site.csv (2.4k tokens)
├── BE/
├── BE_Proxy_Shell_target.txt (200 tokens)
├── Result_1.csv (52k tokens)
├── p1.csv (4.4k tokens)
├── p10.csv (4.5k tokens)
├── p11.csv (3k tokens)
├── p1_xlsx/
├── p1-Sheet1.csv
├── p2.csv (4.5k tokens)
├── p3.csv (4.4k tokens)
├── p4.csv (4.5k tokens)
├── p5.csv (4.5k tokens)
├── p6.csv (4.5k tokens)
├── p7.csv (4.5k tokens)
├── p8.csv (4.6k tokens)
├── p9.csv (4.4k tokens)
├── BH/
├── 20220511051022_default_37.131.21.238_ad.exchange.mail_817345.txt (1000 tokens)
├── 20220511051206_default_80.95.221.227_ad.exchange.mail_604661.txt (1300 tokens)
├── 20220511051251_default_80.95.213.101_ad.exchange.mail_394419.txt (1200 tokens)
├── 20220511051330_default_37.131.21.238_ad.exchange.mail_812166.txt (1000 tokens)
├── 20220511052933_default_80.95.211.36_ad.exchange.mail_461579.txt (1200 tokens)
├── 20220511052954_default_80.95.222.211_ad.exchange.mail_381167.txt (100 tokens)
├── BH_proxy_Shell_target.txt
├── Result_1.csv (1600 tokens)
├── CA/
├── CA_Proxyshell_target.txt (200 tokens)
├── CA_Proxyshell_target/
├── CA_Proxyshell_target.txt (200 tokens)
├── P10_500.csv (9.4k tokens)
├── P11_40_.csv (500 tokens)
├── P11_500.csv (10.2k tokens)
├── P11_500_.csv (9.7k tokens)
├── P1_500.csv (9.5k tokens)
├── P2_500.csv (9.6k tokens)
├── P3_500.csv (9.5k tokens)
├── P4_500.csv (9.6k tokens)
├── P5_500.csv (9.5k tokens)
├── P6_500.csv (9.5k tokens)
├── P7_500.csv (9.4k tokens)
├── P8_500.csv (9.3k tokens)
├── P9_500.csv (9.3k tokens)
├── Result_Exchange.csv (110k tokens)
├── test.csv (1000 tokens)
├── user_finde/
├── user_finde/
├── 20220529022837_default_104.193.39.246_ad.exchange.mail_984654.txt (1200 tokens)
├── 20220529022946_default_142.112.97.21_ad.exchange.mail_694405.txt (300 tokens)
├── 20220529023021_default_142.116.36.81_ad.exchange.mail_878048.txt (100 tokens)
├── 20220529023054_default_147.253.137.66_ad.exchange.mail_547097.txt (800 tokens)
├── 20220529023120_default_148.66.252.244_ad.exchange.mail_744747.txt (1300 tokens)
├── 20220529023509_default_162.223.123.173_ad.exchange.mail_600714.txt (1200 tokens)
├── 20220529023533_default_173.231.107.67_ad.exchange.mail_095415.txt (1300 tokens)
├── 20220529025352_default_173.255.16.195_ad.exchange.mail_253072.txt (1000 tokens)
├── 20220529025416_default_184.67.163.11_ad.exchange.mail_097028.txt (1200 tokens)
├── 20220529025440_default_184.67.163.13_ad.exchange.mail_572440.txt (1200 tokens)
├── 20220529025551_default_184.69.14.118_ad.exchange.mail_344646.txt (700 tokens)
├── 20220529025625_default_184.69.37.34_ad.exchange.mail_383240.txt (1300 tokens)
├── 20220529025822_default_192.159.177.233_ad.exchange.mail_699025.txt (1200 tokens)
├── 20220529025856_default_192.186.64.178_ad.exchange.mail_846946.txt (500 tokens)
├── 20220529025924_default_198.72.29.119_ad.exchange.mail_438133.txt (1300 tokens)
├── 20220529030009_default_199.16.112.155_ad.exchange.mail_521433.txt (300 tokens)
├── 20220529030118_default_199.34.12.86_ad.exchange.mail_872035.txt (1300 tokens)
├── 20220529030154_default_204.19.134.200_ad.exchange.mail_853100.txt (100 tokens)
├── 20220529030834_default_204.19.141.48_ad.exchange.mail_533079.txt (1200 tokens)
├── 20220529030912_default_204.19.142.48_ad.exchange.mail_016851.txt (1200 tokens)
├── 20220529030946_default_204.239.141.9_ad.exchange.mail_379747.txt (1100 tokens)
├── 20220529031024_default_206.47.210.219_ad.exchange.mail_054257.txt (1000 tokens)
├── 20220529031101_default_207.162.105.105_ad.exchange.mail_158726.txt (1400 tokens)
├── 20220529031310_default_207.164.13.67_ad.exchange.mail_346111.txt (1200 tokens)
├── 20220529031354_default_207.164.136.200_ad.exchange.mail_077630.txt (1300 tokens)
├── 20220529031551_default_207.228.101.218_ad.exchange.mail_943407.txt (600 tokens)
├── 20220529032318_default_207.34.121.108_ad.exchange.mail_367396.txt (1200 tokens)
├── 20220529032538_default_207.61.155.93_ad.exchange.mail_629253.txt (1300 tokens)
├── 20220529032611_default_209.104.122.168_ad.exchange.mail_998111.txt (1300 tokens)
├── 20220529035432_default_209.15.208.34_ad.exchange.mail_836851.txt (800 tokens)
├── 20220529035433_default_209.15.93.199_ad.exchange.mail_012556.txt (100 tokens)
├── 20220529035457_default_209.171.241.242_ad.exchange.mail_960754.txt
├── 20220529035926_default_209.202.114.226_ad.exchange.mail_253282.txt (1700 tokens)
├── 20220529042703_default_209.226.27.68_ad.exchange.mail_355072.txt (1300 tokens)
├── 20220529042759_default_209.52.48.212_ad.exchange.mail_512074.txt (1200 tokens)
├── 20220529060519_default_209.91.187.3_ad.exchange.mail_105307.txt (700 tokens)
├── 20220529060555_default_216.113.75.51_ad.exchange.mail_402641.txt (1300 tokens)
├── 20220529060629_default_216.113.56.51_ad.exchange.mail_474508.txt (1300 tokens)
├── 20220529060653_default_216.209.35.26_ad.exchange.mail_498232.txt (1200 tokens)
├── 20220529060826_default_24.37.88.226_ad.exchange.mail_985109.txt (200 tokens)
├── 20220529060857_default_24.37.96.50_ad.exchange.mail_893804.txt (1400 tokens)
├── 20220529060939_default_24.37.97.62_ad.exchange.mail_581225.txt (700 tokens)
├── 20220529061138_default_3.96.32.149_ad.exchange.mail_702423.txt (1100 tokens)
├── 20220529061214_default_35.182.188.95_ad.exchange.mail_823453.txt (1300 tokens)
├── 20220529061712_default_3.96.32.149_ad.exchange.mail_895503.txt (1100 tokens)
├── 20220529062112_default_38.110.76.189_ad.exchange.mail_585020.txt
├── 20220529062153_default_38.117.68.191_ad.exchange.mail_377022.txt (600 tokens)
├── 20220529062839_default_38.99.147.3_ad.exchange.mail_431062.txt (1400 tokens)
├── 20220529062913_default_50.71.147.49_ad.exchange.mail_120344.txt (1300 tokens)
├── 20220529062946_default_52.228.33.23_ad.exchange.mail_589288.txt (1200 tokens)
├── 20220529063637_default_54.39.238.87_ad.exchange.mail_504355.txt
├── 20220529064219_default_64.119.215.10_ad.exchange.mail_527550.txt (1100 tokens)
├── 20220529064256_default_64.201.165.98_ad.exchange.mail_063540.txt (700 tokens)
├── 20220529064831_default_64.4.74.142_ad.exchange.mail_863326.txt (1300 tokens)
├── 20220529065131_default_66.199.35.253_ad.exchange.mail_494181.txt (1400 tokens)
├── 20220529065142_default_66.70.167.75_ad.exchange.mail_306886.txt (100 tokens)
├── 20220529065221_default_67.71.254.21_ad.exchange.mail_255766.txt (1200 tokens)
├── 20220529065434_default_68.179.89.90_ad.exchange.mail_620986.txt (700 tokens)
├── 20220529065648_default_69.46.96.25_ad.exchange.mail_542505.txt (1300 tokens)
├── 20220529065804_default_69.70.76.86_ad.exchange.mail_860548.txt (400 tokens)
├── 20220529065954_default_70.35.216.179_ad.exchange.mail_827648.txt (1200 tokens)
├── 20220529070957_default_72.138.165.154_ad.exchange.mail_585904.txt (300 tokens)
├── 20220529071241_default_72.138.21.130_ad.exchange.mail_505777.txt
├── 20220529071313_default_72.138.32.11_ad.exchange.mail_913788.txt (1300 tokens)
├── 20220529072656_default_72.138.60.69_ad.exchange.mail_571809.txt (1300 tokens)
├── 20220529072856_default_72.38.186.117_ad.exchange.mail_175072.txt (1000 tokens)
├── 20220529080952_default_74.216.250.166_ad.exchange.mail_062823.txt (1100 tokens)
├── 20220529081017_default_96.53.16.34_ad.exchange.mail_750615.txt (1400 tokens)
├── 20220529081042_default_99.245.20.84_ad.exchange.mail_223193.txt (200 tokens)
├── EG/
├── EG_Proxyshell_target.txt (100 tokens)
├── Result_1.csv (6.8k tokens)
├── p1.csv (4k tokens)
├── p2.csv (3.2k tokens)
├── GR/
├── GR_ProxyShell_target.txt (200 tokens)
├── Result_Exchange.csv (10.4k tokens)
├── p2.csv (900 tokens)
├── user_find/
├── 20220529082712_default_85.75.34.43_ad.exchange.mail_549460.txt (500 tokens)
├── 20220529082741_default_87.203.88.242_ad.exchange.mail_817552.txt (200 tokens)
├── 20220529082934_default_62.103.28.62_ad.exchange.mail_232167.txt (900 tokens)
├── 20220529083045_default_85.74.94.209_ad.exchange.mail_849934.txt (100 tokens)
├── 20220529083205_default_85.74.94.209_ad.exchange.mail_306674.txt (100 tokens)
├── 20220529083432_default_85.74.94.209_ad.exchange.mail_872401.txt (100 tokens)
├── 20220529083930_default_213.140.144.122_ad.exchange.mail_399690.txt (1300 tokens)
├── 20220529084013_default_62.103.74.102_ad.exchange.mail_631673.txt (900 tokens)
├── 20220529084431_default_62.74.232.193_ad.exchange.mail_396193.txt (900 tokens)
├── 20220529084510_default_84.254.50.203_ad.exchange.mail_492527.txt (1200 tokens)
├── 20220529092648_default_83.235.188.199_ad.exchange.mail_287449.txt (400 tokens)
├── 20220529092717_default_62.1.6.153_ad.exchange.mail_729589.txt (700 tokens)
├── 20220529092746_default_85.72.41.81_ad.exchange.mail_091593.txt (1200 tokens)
├── 20220529093028_default_79.129.38.207_ad.exchange.mail_040038.txt (400 tokens)
├── 20220529093450_default_85.72.57.26_ad.exchange.mail_051622.txt (100 tokens)
├── 20220529093555_default_84.254.41.33_ad.exchange.mail_422578.txt (300 tokens)
├── 20220529093618_default_62.38.51.180_ad.exchange.mail_313196.txt (1100 tokens)
├── 20220529093656_default_85.73.22.169_ad.exchange.mail_720146.txt (200 tokens)
├── 20220530012104_default_195.46.29.225_ad.exchange.mail_390968.txt (700 tokens)
├── 20220530012133_default_62.38.92.182_ad.exchange.mail_210705.txt (500 tokens)
├── 20220530012158_default_185.180.38.203_ad.exchange.mail_541784.txt (1400 tokens)
├── 20220530013627_default_195.167.110.233_ad.exchange.mail_336168.txt (400 tokens)
├── 20220530013713_default_195.97.126.97_ad.exchange.mail_233458.txt (300 tokens)
├── 20220530013828_default_80.106.185.234_ad.exchange.mail_529938.txt (500 tokens)
├── 20220530014028_default_62.103.243.184_ad.exchange.mail_686276.txt (500 tokens)
├── 20220530014234_default_83.235.251.119_ad.exchange.mail_591686.txt (1200 tokens)
├── 20220530015424_default_62.74.228.94_ad.exchange.mail_006706.txt (1300 tokens)
├── 20220530015509_default_195.97.6.157_ad.exchange.mail_524681.txt (300 tokens)
├── 20220530022511_default_195.46.13.225_ad.exchange.mail_058820.txt (400 tokens)
├── 20220530022530_default_79.129.36.92_ad.exchange.mail_411271.txt (100 tokens)
├── 20220530022600_default_94.65.84.78_ad.exchange.mail_956547.txt (900 tokens)
├── IN/
├── 20220525060252_default_1.22.125.14_ad.exchange.mail_096870.txt (100 tokens)
├── 20220525060628_default_117.232.121.200_ad.exchange.mail_802251.txt (1300 tokens)
├── 20220525060707_default_117.239.143.46_ad.exchange.mail_470404.txt (1100 tokens)
├── 20220525060937_default_118.185.8.156_ad.exchange.mail_427612.txt (1400 tokens)
├── 20220525070129_default_119.82.65.142_ad.exchange.mail_154891.txt (1200 tokens)
├── 20220525070405_default_122.15.20.201_ad.exchange.mail_210359.txt (1200 tokens)
├── 20220525070447_default_122.166.147.41_ad.exchange.mail_278569.txt
├── 20220525071147_default_122.170.103.21_ad.exchange.mail_637090.txt (200 tokens)
├── 20220525071215_default_122.183.248.102_ad.exchange.mail_195939.txt (1100 tokens)
├── 20220525071919_default_122.252.229.120_ad.exchange.mail_966226.txt (1100 tokens)
├── 20220525071955_default_123.63.56.181_ad.exchange.mail_116079.txt (1400 tokens)
├── 20220525072234_default_124.30.226.219_ad.exchange.mail_600633.txt (1400 tokens)
├── 20220525074325_default_14.140.249.139_ad.exchange.mail_723356.txt (400 tokens)
├── 20220525074553_default_14.141.208.68_ad.exchange.mail_733145.txt (1300 tokens)
├── 20220525082835_default_14.141.41.62_ad.exchange.mail_203049.txt (1400 tokens)
├── 20220525082901_default_14.141.78.52_ad.exchange.mail_324302.txt (1100 tokens)
├── 20220525083015_default_14.99.145.138_ad.exchange.mail_644051.txt (1300 tokens)
├── 20220525085730_default_14.99.146.244_ad.exchange.mail_683408.txt (1300 tokens)
├── 20220525085752_default_14.99.146.243_ad.exchange.mail_698751.txt (1300 tokens)
├── 20220526024215_default_14.99.213.27_ad.exchange.mail_784012.txt (1200 tokens)
├── 20220526024300_default_14.99.218.204_ad.exchange.mail_186313.txt (1500 tokens)
├── 20220526024310_default_14.99.61.227_ad.exchange.mail_037138.txt (1300 tokens)
├── 20220526025934_default_150.107.118.122_ad.exchange.mail_258475.txt (1400 tokens)
├── 20220526030010_default_182.18.131.144_ad.exchange.mail_912052.txt (1200 tokens)
├── 20220526030434_default_182.156.242.169_ad.exchange.mail_399703.txt (1000 tokens)
├── 20220526030503_default_182.73.104.66_ad.exchange.mail_148562.txt (1300 tokens)
├── 20220526030934_default_182.73.248.38_ad.exchange.mail_386358.txt (1000 tokens)
├── 20220526031704_default_182.74.239.3_ad.exchange.mail_345393.txt (1600 tokens)
├── 20220526031724_default_183.82.127.31_ad.exchange.mail_183399.txt (1000 tokens)
├── 20220526031744_default_202.131.107.153_ad.exchange.mail_719019.txt (900 tokens)
├── 20220526031907_default_202.144.30.58_ad.exchange.mail_202932.txt (1400 tokens)
├── 20220526032031_default_203.101.89.17_ad.exchange.mail_745950.txt (1400 tokens)
├── 20220526032314_default_203.112.142.165_ad.exchange.mail_257115.txt (1300 tokens)
├── 20220526035437_default_203.123.134.141_ad.exchange.mail_628991.txt (1200 tokens)
├── 20220526035810_default_210.212.97.24_ad.exchange.mail_866215.txt (1300 tokens)
├── 20220526035826_default_219.65.73.131_ad.exchange.mail_029199.txt (1400 tokens)
├── 20220526040008_default_221.135.84.164_ad.exchange.mail_015511.txt (600 tokens)
├── 20220526060900_default_27.54.170.53_ad.exchange.mail_825762.txt (900 tokens)
├── 20220526060932_default_43.254.110.230_ad.exchange.mail_608144.txt (1500 tokens)
├── 20220528014454_default_45.123.1.107_ad.exchange.mail_805717.txt (1100 tokens)
├── 20220528014517_default_45.251.32.199_ad.exchange.mail_535355.txt (1200 tokens)
├── 20220528014539_default_45.114.193.78_ad.exchange.mail_874055.txt (700 tokens)
├── 20220528030229_default_59.144.118.1_ad.exchange.mail_021537.txt (1200 tokens)
├── IN_Proxyshell_Target.txt (200 tokens)
├── Result_Exchange.csv (11.1k tokens)
├── part_1.csv (9.7k tokens)
├── part_2.csv (1400 tokens)
├── ameen-alkhalij.nu.log (5010.5k tokens)
├── ea3e059ca58eec16a98691bcae372170d83b97c0_Shell failed.txt (500 tokens)
├── f4c79f1f5be8a21ee11dc3a1ba8264d4db79dee2_log.txt (700 tokens)
├── zsh_history.txt
├── Episode 3/
├── BellaCiao/
├── Variant1/
├── Eposta/
├── Backdoor/
├── ShellDropper 2/
├── MicrosoftAgentServices.sln (200 tokens)
├── MicrosoftAgentServices.suo
├── MicrosoftAgentServices/
├── MicrosoftAgentServices.csproj (600 tokens)
├── MicrosoftAgentServices.csproj.user
├── Program.cs (200 tokens)
├── ProjectInstaller.Designer.cs (200 tokens)
├── ProjectInstaller.cs (100 tokens)
├── Properties/
├── AssemblyInfo.cs (300 tokens)
├── Service1.Designer.cs (200 tokens)
├── Service1.cs (500 tokens)
├── app.config
├── bin/
├── Release/
├── Microsoft Monitoring Exchange Services.exe
├── Microsoft Monitoring Exchange Services.exe.config
├── Microsoft Monitoring Exchange Services.pdb
├── cs.bat
├── obj/
├── Debug/
├── MicrosoftAgentServices.exe
├── MicrosoftAgentServices.pdb
├── MicrosoftAgentServices.csproj.FileListAbsolute.txt (900 tokens)
├── Release/
├── DesignTimeResolveAssemblyReferences.cache
├── DesignTimeResolveAssemblyReferencesInput.cache
├── Microsoft Monitoring Exchange Services.exe
├── Microsoft Monitoring Exchange Services.pdb
├── MicrosoftAgentServices.csproj.CoreCompileInputs.cache
├── MicrosoftAgentServices.csproj.FileListAbsolute.txt (1900 tokens)
├── MicrosoftAgentServices.csprojAssemblyReference.cache
├── WinUpdateService.pdb
├── eposta.txt (700 tokens)
├── ShellDropper/
├── Microsoft Exchange Services Health.txt
├── MicrosoftAgentServices.sln (200 tokens)
├── MicrosoftAgentServices/
├── MicrosoftAgentServices.csproj (600 tokens)
├── MicrosoftAgentServices.csproj.user
├── Program.cs (200 tokens)
├── ProjectInstaller.Designer.cs (200 tokens)
├── ProjectInstaller.cs (100 tokens)
├── Properties/
├── AssemblyInfo.cs (300 tokens)
├── Service1.Designer.cs (200 tokens)
├── Service1.cs (1600 tokens)
├── app.config
├── bin/
├── Microsoft Exchange Agent Diagnostic Services.exe.config
├── Microsoft Exchange Agent Diagnostic Services.pdb
├── Release/
├── cs.bat
├── obj/
├── Debug/
├── MicrosoftAgentServices.exe
├── MicrosoftAgentServices.pdb
├── MicrosoftAgentServices.csproj.FileListAbsolute.txt (900 tokens)
├── Release/
├── .NETFramework,Version=v4.0.AssemblyAttributes.cs
├── DesignTimeResolveAssemblyReferences.cache
├── DesignTimeResolveAssemblyReferencesInput.cache
├── Microsoft Exchange Agent Diagnostic Services.pdb
├── MicrosoftAgentServices.csproj.AssemblyReference.cache
├── MicrosoftAgentServices.csproj.CoreCompileInputs.cache
├── MicrosoftAgentServices.csproj.FileListAbsolute.txt (1700 tokens)
├── MicrosoftAgentServices.csprojAssemblyReference.cache
├── WinUpdateService.pdb
├── eposta.txt (700 tokens)
├── ShellDropper/
├── MicrosoftAgentServices.sln (200 tokens)
├── MicrosoftAgentServices.suo
├── MicrosoftAgentServices/
├── AssemblyInfo.cs (300 tokens)
├── MicrosoftAgentServices.csproj (600 tokens)
├── MicrosoftAgentServices.csproj.user
├── Program.cs (200 tokens)
├── ProjectInstaller.Designer.cs (200 tokens)
├── ProjectInstaller.cs (100 tokens)
├── Service1.Designer.cs (200 tokens)
├── Service1.cs (2.2k tokens)
├── app.config
├── bin/
├── Release/
├── Exchange Agent Diagnostic Services.exe.config
├── Exchange Agent Diagnostic Services.pdb
├── obj/
├── Debug/
├── MicrosoftAgentServices.exe
├── MicrosoftAgentServices.pdb
├── MicrosoftAgentServices.csproj.FileListAbsolute.txt (900 tokens)
├── Release/
├── DesignTimeResolveAssemblyReferences.cache
├── DesignTimeResolveAssemblyReferencesInput.cache
├── Exchange Agent Diagnostic Services.pdb
├── MicrosoftAgentServices.csproj.CoreCompileInputs.cache
├── MicrosoftAgentServices.csproj.FileListAbsolute.txt (1500 tokens)
├── MicrosoftAgentServices.csprojAssemblyReference.cache
├── WinUpdateService.pdb
├── Variant2/
├── iis.ps1 (4.2k tokens)
├── iis.txt (5.6k tokens)
├── log.txt (100 tokens)
├── Documents/
├── 208b5cd4699993b848832a3f65ee1bfd940f08f4_signal-2023-11-14-104340.jpg
├── 261f7c8ffb308f138bb51eb68f34c6cab0aec801_óçÃÂ
çÃÂàëçÃÂè 1.pdf
├── 28d5d8c113c53493d959668ba36113568f56be93_Sreverse_docx/
├── 28d5d8c113c53493d959668ba36113568f56be93_Sreverse.pdf
├── 28d5d8c113c53493d959668ba36113568f56be93_Sreverse.txt (900 tokens)
├── 2a79ef2bb98fc05db7ea4f4c4bab0a5800eb2eb3_technical_docx/
├── 2a79ef2bb98fc05db7ea4f4c4bab0a5800eb2eb3_technical.pdf
├── 2a79ef2bb98fc05db7ea4f4c4bab0a5800eb2eb3_technical.txt (3.1k tokens)
├── 3fc320d73fa8506e3f6ec161ed641edb2dd92a82_RAT-2Ac2-ïòçñô çÃÂÃÂÃÂà(v.pdf
├── 53cfc8d717f7bde85079a7d83594c7bf6f56737a_Test_v1.pdf
├── 5e98006a2cf1c15a164279558eed4a15018e34a0_èóÃÂ
àêùçÃÂÃÂ.pdf
├── 682089f4bd1c3e6636e15b89e967bf4fa9d7861a_#78TPDD.pdf
├── 9e1904ba122bf539207e153b0adc0cd528469b85_1725189461.pdf
├── ïñçÃÂÃÂ.pdf
├── Webshells & Python framework/
├── RCE4.py (400 tokens)
├── connect.py (500 tokens)
├── file.asp (100 tokens)
├── m0s.asp (300 tokens)
├── rce5.py (500 tokens)
├── webshell.asp (100 tokens)
├── Episode 4/
├── 0-SERVICE-Service.csv
├── 0-SERVICE-payment BTC.csv
├── 1-NET-Sheet1.csv
├── A1_AsImages.pdf
├── A2_AsImages.pdf
├── Esxi 6.pdf
├── ÷ñàþÃÂôÃÂÃÂçïà- ôñéê ÃÂçàÃÂùçàþòôéàÃÂ
ÃÂÃÂïóÃÂ_AsImages.pdf
├── Malware_and_Logs.zip
├── README.md (1700 tokens)
├── _50.jpg
```
## /2_ordibehesht_1401.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/2_ordibehesht_1401.pdf
## /30 ôÃÂ
çñà.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/30 ôÃÂ
çñà.pdf
## /Attack_Reports.zip
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Attack_Reports.zip
## /Employees.zip
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Employees.zip
## /Episode 2/Attack Reports/02120dcf3b263702028a0441881d339ee4ff8e15_ïòçñô ùÃÂ
ÃÂéñï ÃÂ
çÃÂçÃÂà(èÃÂÃÂ
ÃÂ ÃÂ
çÃÂ_REDACTED.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/02120dcf3b263702028a0441881d339ee4ff8e15_ïòçñô ùÃÂ
ÃÂéñï ÃÂ
çÃÂçÃÂà(èÃÂÃÂ
ÃÂ ÃÂ
çÃÂ_REDACTED.pdf
## /Episode 2/Attack Reports/4037e9382a99fdd96fe93eb0fd4380eea695bd3a_ïòçñô ùÃÂ
ÃÂéñï ÃÂ
çÃÂçÃÂà(èÃÂÃÂ
ÃÂ ÃÂ
çÃÂ_REDACTED.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/4037e9382a99fdd96fe93eb0fd4380eea695bd3a_ïòçñô ùÃÂ
ÃÂéñï ÃÂ
çÃÂçÃÂà(èÃÂÃÂ
ÃÂ ÃÂ
çÃÂ_REDACTED.pdf
## /Episode 2/Attack Reports/834e8476d0e1e2b4b508cb3f6240b5ac03945f2e_CVE-2024-1709 - ïòçñô èññóàÃÂ_REDACTED.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/834e8476d0e1e2b4b508cb3f6240b5ac03945f2e_CVE-2024-1709 - ïòçñô èññóàÃÂ_REDACTED.pdf
## /Episode 2/Attack Reports/8e7931f9f51b48dcd4e4c95445325f4e6f19b236_CVE-2024-1709 - (çÃÂ
çñê - êñéÃÂ_REDACTED.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/8e7931f9f51b48dcd4e4c95445325f4e6f19b236_CVE-2024-1709 - (çÃÂ
çñê - êñéÃÂ_REDACTED.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-06-25_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-06-25_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-06-27_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-06-27_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-06-28_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-06-28_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-06-29_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-06-29_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-01_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-01_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-02_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-02_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-03_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-03_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-04_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-04_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-07_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-07_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-09_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-09_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-10_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-10_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-11_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-11_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-14_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-14_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-15_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-15_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-16_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-16_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-17_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-17_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-18_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-18_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-22_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-22_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-23_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/1403-07-23_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/entry_exit_form.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/entry_exit_form.pdf
## /Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/ïòçñô éçñ ÃÂ
ÃÂñ- MJD.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/MJD_Monthly-Reps_Mehr_1403/ïòçñô éçñ ÃÂ
ÃÂñ- MJD.pdf
## /Episode 2/Attack Reports/Report-shrvr-hrv/HSN2/1403-05-27-hsn_rtm_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/Report-shrvr-hrv/HSN2/1403-05-27-hsn_rtm_DailyReport.pdf
## /Episode 2/Attack Reports/Report-shrvr-hrv/HSN2/1403-05-28-hsn_rtm_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/Report-shrvr-hrv/HSN2/1403-05-28-hsn_rtm_DailyReport.pdf
## /Episode 2/Attack Reports/Report-shrvr-hrv/HSN2/1403-05-29-hsn_rtm_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/Report-shrvr-hrv/HSN2/1403-05-29-hsn_rtm_DailyReport.pdf
## /Episode 2/Attack Reports/Report-shrvr-hrv/HSN2/1403-05-30-hsn_rtm_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/Report-shrvr-hrv/HSN2/1403-05-30-hsn_rtm_DailyReport.pdf
## /Episode 2/Attack Reports/Report-shrvr-hrv/HSN2/1403-06-3-hsn_rtm_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/Report-shrvr-hrv/HSN2/1403-06-3-hsn_rtm_DailyReport.pdf
## /Episode 2/Attack Reports/Report-shrvr-hrv/HSN2/1403-06-5-hsn_rtm_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/Report-shrvr-hrv/HSN2/1403-06-5-hsn_rtm_DailyReport.pdf
## /Episode 2/Attack Reports/Report-shrvr-hrv/HSN2/1403-06-6-hsn_rtm_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/Report-shrvr-hrv/HSN2/1403-06-6-hsn_rtm_DailyReport.pdf
## /Episode 2/Attack Reports/Report-shrvr-hrv/MJD/1403-05-27_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/Report-shrvr-hrv/MJD/1403-05-27_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/Report-shrvr-hrv/MJD/1403-05-28_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/Report-shrvr-hrv/MJD/1403-05-28_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/Report-shrvr-hrv/MJD/1403-05-29_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/Report-shrvr-hrv/MJD/1403-05-29_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/Report-shrvr-hrv/MJD/1403-05-30_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/Report-shrvr-hrv/MJD/1403-05-30_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/Report-shrvr-hrv/MJD/1403-06-03_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/Report-shrvr-hrv/MJD/1403-06-03_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/Report-shrvr-hrv/MJD/1403-06-05_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/Report-shrvr-hrv/MJD/1403-06-05_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/Report-shrvr-hrv/MJD/1403-06-06_MJD_DailyReport.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/Report-shrvr-hrv/MJD/1403-06-06_MJD_DailyReport.pdf
## /Episode 2/Attack Reports/e8ed42d00168744e408dd53c795008c76ee788e6_ïòçñô ùÃÂ
ÃÂéñï ÃÂ
çÃÂçÃÂà(èÃÂÃÂ
ÃÂ ÃÂ
çÃÂ_REDACTED.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/e8ed42d00168744e408dd53c795008c76ee788e6_ïòçñô ùÃÂ
ÃÂéñï ÃÂ
çÃÂçÃÂà(èÃÂÃÂ
ÃÂ ÃÂ
çÃÂ_REDACTED.pdf
## /Episode 2/Attack Reports/services.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/services.pdf
## /Episode 2/Attack Reports/ïòçñô çÃÂÃÂÃÂàïóêñóà(wise.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/ïòçñô çÃÂÃÂÃÂàïóêñóà(wise.pdf
## /Episode 2/Attack Reports/ïòçñô ùÃÂ
ÃÂéñï òÃÂ
óêçà- 1403 Final.pdf
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Attack Reports/ïòçñô ùÃÂ
ÃÂéñï òÃÂ
óêçà- 1403 Final.pdf
## /Episode 2/Malwares and Logs/All Targets/Iran/IR_Proxyshell_target.txt
109.125.132.66 shell
109.232.1.181 mail
178.252.191.163 qudsdaily
185.110.30.177
185.142.124.20
185.172.212.18
185.172.212.20
185.179.222.50
185.189.122.142 error
185.95.152.161
185.95.180.51
2.187.19.189
217.218.21.105 setad mobareze ba qachaq v arz
217.219.209.11
37.235.27.28 error
45.147.77.137 legacyDN
46.100.58.29
## /Episode 2/Malwares and Logs/All Targets/Iran/IR_Proxyshell_target2.txt
109.232.1.181 legacyDN
109.125.132.66 Shell postman
178.252.191.163 Shell qudsdaily.com
185.110.30.177
185.172.212.18
185.142.124.20
185.172.212.20
185.179.222.50
185.189.122.142 Shell theonecorp.ir
185.95.180.51 failed
185.95.152.161
2.187.19.189
217.218.21.105 failed
217.219.209.11
37.235.27.28 failed
45.147.77.137 legacyDN
46.100.58.29
5.160.178.162 failed
5.160.24.139 legacyDN
5.160.25.228
5.160.29.37 failed
5.160.31.38 failed
5.160.72.235
5.160.70.10
78.39.246.84 failed
80.210.18.229 failed
87.107.115.6 Shell mapfaco.net/
89.144.135.118
91.108.130.203
91.108.132.115
91.92.191.42 Shell
91.92.204.96 Shell mahanmarket
93.118.123.160
autodiscover.icbs.ir failed
edgemail.wagonbar.org
email.mazinoorelectronics.com failed
email.msvco.com failed
email.supamedical.net failed
exch.firouzacranes.com
exch2.hctlinked.com
exchange.ariantel.ir
exchange.sazehsazan.com Shell sazehsazan.com
exserver.elmosanat.com
hqex1.tobacco.ir
hemail.ir
idco-ex-01.irandelco.com failed
idco-ex-02.irandelco.com failed
mail-srv.sarehkhodro.com Shell sarehkhodro.com
mail.abrii.ac.ir
mail.absaran.net Shell absaran.net
mail.aftco.ir
mail.agrizanjan.ir failed
mail.ahuan.ir
mail.albrw.ir
mail.apwood.ir
mail.arianatech.ir failed
mail.aryalogistics.ir
mail.atu.ac.ir
mail.avandarman.com
mail.azimkhodro.com
mail.barez.com mail
mail.barezkurdistan.com
mail.bahartel.ir
mail.baroline.com
mail.batabco.ir
mail.ddcpersia.net
mail.dmc-osp.com
mail.dianparsian.com failed
mail.dibahd.com
mail.dorsaco.net
mail.doe.ir Shell check mail.doe.ir/aspnet_client/lscaqk.aspx
mail.dpgsl.com
mail.dpsco.com
mail.eastcool.com
mail.ecoiran.com
mail.endvisa.com Shell endvisa.com aspnet_client/qrrto.aspx
mail.exonvision.ir
mail.fanava.com
mail.faraadid.com Shell faraadid.com aspnet_client/qklsn.aspx
mail.fcp.ir failed
mail.flawingo.com Shell flawingo.com aspnet_client/myzqt.aspx
mail.fsn-co.com
mail.hampaco.org
mail.hamyar-niroo.com
mail.iaushiraz.ac.ir
mail.irandelco.com failed
mail.iranatlaskish.com
mail.iraneyebank.org
mail.izicenter.ir
mail.jums.ac.ir
mail.kamjachoob.com Shell kamjachoob.com aspnet_client/zbrub.aspx
mail.karaj.ir failed
mail.kaylagroup.com failed
mail.kpe-co.com
mail.lufc.ir
mail.lpaco.ir failed
mail.ma-bg.com
mail.maaref.ac.ir
mail.mah-taab.com failed
mail.map.ir Shell map.ir aspnet_client/qhkas.aspx
mail.mavira.net
mail.mehrcampars.com
mail.mmte.ir
mail.moein-ig.com Shell moein-ig.com aspnet_client/swlui.aspx
mail.msvco.com failed
mail.mse.ir
mail.mubabol.ac.ir failed
mail.mvmco.ir
mail.naed.nargan.com failed
mail.niazerooz.com Shell niazerooz.com aspnet_client/mzrdz.aspx
mail.nikanaghsh.com Shell nikanaghsh.com owa/auth/mgifc.aspx
mail.nilagasht.com
mail.nit.ac.ir
mail.nsedna.com
mail.ondpline.com
mail.paravar.co failed
mail.parsianhotels.com
mail.pcdco.org
mail.persian-ir.com failed
mail.pgbidboland.ir Shell pgbidboland.ir aspnet_client/owlzy.aspx
mail.plannet.ir
mail.porsoo.com
mail.psppakhsh.ir failed
mail.pu.ac.ir
mail.qzsc.ir
mail.rabani.com
mail.rodman.ir Shell rodman.ir aspnet_client/updqt.aspx
mail.rouzbeh.info failed
mail.rsct.ir
mail.sadragroup.ir failed
mail.sakp.ir failed
mail.samantajhiz.com
mail.samix.ir
mail.sanat-sharif.com
mail.sanjehkish.com
mail.sfg.ir legacyDN
mail.shimbar.com
mail.son.ir failed
mail.spariran.ir
mail.switch.ir
mail.synaco.co Shell synaco aspnet_client/cvjmi.aspx
mail.szf.ir
mail.teyfplast.com failed
mail.telekish.ir
mail.tosantechno.net
mail.vfb-co.com failed
mail.zardband.com
mail.zibon.ir
mail.zidcc.ir
mail2.tritapharma.com
mailing.techchi.ir legacyDN
patron-exc.patron-group.org
spariran.ir
stu.yazd.ac.ir
webmail.fanap.plus
wmail.kianm.com Shell kianm.com aspnet_client/ugcwo.aspx
wsrv-edge-a.mom.ir ` legacyDN
## /Episode 2/Malwares and Logs/All Targets/Iran/mail.barez.org.txt
fqdn ex1.big.org
- #BarezKerman@barez.com
- #BarezKurdestan@barez.com
- #Finance@barez.com
- #Herasat@barez.com
- #HR@barez.com
- #INNO@barez.com
- #IT@barez.com
- #Management@barez.com
- #Marketing@barez.com
- #Purchasing@barez.com
- #Sales@barez.com
- #Strategy@barez.com
+ aaa@barez.com
## /Episode 2/Malwares and Logs/All Targets/Kuwait/KW_proxyshell_target.txt
webmail.kccec.com.kw
mx03.koutcloud.com
mx2.specialitieskuwait.com
smg.zamzamtakaful.com
mx02.koutcloud.com
mail.yousifi.com.kw
mail.sih-kw.com
mail.montania.org
mail.kiti.com.kw
mail.kfmb.com.kw
mail.azzadgroup.com.kw
exch1.kyfco.com
83.96.77.227
83.96.120.39
78.89.184.155
62.215.215.46
62.215.164.41
62.215.142.5
31.214.10.52
193.22.172.225
168.187.130.99
## /Episode 2/Malwares and Logs/All Targets/Kuwait/kw-proxyshell-target.kw
```kw path="/Episode 2/Malwares and Logs/All Targets/Kuwait/kw-proxyshell-target.kw"
webmail.kccec.com.kw failed
mx03.koutcloud.com failed
mx2.specialitieskuwait.com failed
smg.zamzamtakaful.com
mx02.koutcloud.com failed
mail.yousifi.com.kw
mail.sih-kw.com failed
mail.montania.org
mail.kiti.com.kw
mail.kfmb.com.kw mail
mail.azzadgroup.com.kw failed
exch1.kyfco.com
83.96.77.227
83.96.120.39 failed
78.89.184.155
62.215.215.46 shell
62.215.164.41
62.215.142.5
31.214.10.52 failed
193.22.172.225
168.187.130.99
```
## /Episode 2/Malwares and Logs/All Targets/Kuwait/mail.kfmb.com.kw
```kw path="/Episode 2/Malwares and Logs/All Targets/Kuwait/mail.kfmb.com.kw"
fqdn exch02.kfmb.com.kw
- kareem.alnassar@kfmb.com.kw
- abdalazez.youssef@kfmb.com.kw
- abdel.jaber@kfmb.com.kw
- Abdelaziz.Alqenaei@kfmb.com.kw
- AbdelAziz.Hamed@kfmb.com.kw
- abdo.awad@kfmb.com.kw
- ABDOU.ELMASSRY@kfmb.com.kw
- razk@kfmb.com.kw
- abdul.aziz@kfmb.com.kw
- abdulaziz.aljaser@kfmb.com.kw
- aziz.sanousi@kfmb.com.kw
- Abdul.Khadar@kfmb.com.kw
- Abdulmejeed.sbari@kfmb.com.kw
- abdo.zare@kfmb.com.kw
- abd.moawad@kfmb.com.kw
- al.rumaih@kfmb.com.kw
- a.alhamlan@kfmb.com.kw
- abdul.raoof@kfmb.com.kw
- abdulrazak.aldossary@kfmb.com.kw
- AbdulShinaf@kfmb.com.kw
- AbdulAziz.Alateeqi@kfmb.com.kw
- Abdulaziz.Alsheha@kfmb.com.kw
- abdulhakem.mohamed@kfmb.com.kw
- Alwahaibi@kfmb.com.kw
- Abdulla.Alhoty@kfmb.com.kw
- Abdulla.Alshamali@kfmb.com.kw
- abdalla.elhumaidi@kfmb.com.kw
- Abdullah.Abdelkarim@kfmb.com.kw
- AlAbbad@kfmb.com.kw
- abdullah.aldousari@kfmb.com.kw
- abdullah.alkhars@kfmb.com.kw
- Abdullah.Almuzaini@kfmb.com.kw
- ABDULLAH.ALQAHTANI@kfmb.com.kw
- Abdullah.Salah@kfmb.com.kw
- abdullah.shaik@kfmb.com.kw
- abdullatheef.chalil@kfmb.com.kw
- Abdulrahaman.Shaik@kfmb.com.kw
- Abdulrahman.Ali@kfmb.com.kw
- Abdulrahman.ALzeyad@kfmb.com.kw
- AbdulRahman.Saleah@kfmb.com.kw
- Abdulwahab@kfmb.com.kw
- act.mandoob@kfmb.com.kw
- actbank@kfmb.com.kw
- Adel.Alshamroukh@kfmb.com.kw
- Adelfekry@kfmb.com.kw
- adham.ali@kfmb.com.kw
+ Administrator@kfmb.com.kw
- A.Khan@kmefic.com
- AAlrebdi@mefic.com.sa
- a.alalyan@kmefic.com
- A.alroudan@kmefic.com
- a.albusairi@kmefic.com
- A.Alhumaidi@kmefic.com
- A.AlJowaied@kmefic.com
- a.buqamber@kmefic.com
- A.Fajri@kmefic.com
- A.Almelhem@kmefic.com
- AAlshehri@mefic.com.sa
- A.Mohamed@kmefic.com
- A.Raiz@kmefic.com
- a.althuwaikh@kmefic.com
- a.alhumaidhi@kmefic.com
- A.Sellman@kmefic.com
- EStatement@ahlibank.com.qa
+ a@kmefic.com
```
## /Episode 2/Malwares and Logs/All Targets/Saudi/212.12.165.155.yml
```yml path="/Episode 2/Malwares and Logs/All Targets/Saudi/212.12.165.155.yml"
a@ajlanbros.com
- a_aziz@ajlanbros.com
- graphic.designer@ajlanbros.com
- alsadig.mohamed@ajlanbros.com
- abdelgawad.attia@ajlanbros-holding.com
- abdelhafiz.hassan@ajlanbros.com
- Abdelhamid.Elsharkawy@ajlanbros.com
- a.boulahcen@ajlanbros.com
- abdul.alim@ajlanbros.com
+ abdulaziz.alhuwaishi@ajlanbros.com
```
## /Episode 2/Malwares and Logs/All Targets/Saudi/46.235.93.139.txt
fqdn epc-pl1-mbx037v.epcco.com.sa
- aalrashed@epcco.com
- aalyaqub@epcco.com
- aghazwi@epcco.com
- ahawsawi@epcco.com
- amohammad@epcco.com
- sabdulkhadar@epcco.com
- aalsoolan@epcco.com
- aali@epcco.com
- akalam@epcco.com
- awaqeeallah@epcco.com
- aalfarhan@epcco.com
+ awalghamdi@epcco.com
## /Episode 2/Malwares and Logs/All Targets/Saudi/77.240.93.43.txt
fqdn rdc-mbx01.othaim.com
- a.abas@othaimmarkets.com
- a.abdalrahim@othaimmarkets.com
- a.abdelgadir@othaimmarkets.com
- a.abdelghani@othaimmarkets.com
- a.Abdelhamid@othaimmarkets.com
- a.abdellatef@othaimmarkets.com
- a.abdellatif@othaimmarkets.com
- a.abdelmajid@othaimmarkets.com
- a.abdelmeguid@othaimmarkets.com
- a.abdelsamad@othaimmarkets.com
- a.abdelwahab@othaimmarkets.com
- a.abdelwhab@othaimmarkets.com
- A.Abdullah@othaimmarkets.com
- a.abdulrahem@othaimmarkets.com
- A.Abdulrahman@othaimmarkets.com
- a.aboelgheit@othaimmarkets.com
- A.Abouelnafayael@othaimmarkets.com
- a.abouserie@othaimmarkets.com
- a.abousholoue@othaimmarkets.com
- a.abozaid@othaimmarkets.com
- a.abualasal@othaimmarkets.com
- a.abubadi@othaimmarkets.com
- a.abubakar@othaimmarkets.com
- a.abuhagil@othaimmarkets.com
- a.acas@othaimmarkets.com
- a.ahmad@othaimmarkets.com
- a.alabboud@othaimmarkets.com
- a.alaboudi@othaimmarkets.com
- a.alam@othaimmarkets.com
- A.Alameen@othaimmarkets.com
- a.alamri@othaimmarkets.com
- a.alanzi@othaimmarkets.com
- a.alarsan@othaimmarkets.com
- a.alawbathani@othaimmarkets.com
- a.albadrani@othaimmarkets.com
- a.albastewesi@othaimmarkets.com
- a.albastowisi@othaimmarkets.com
- a.aldaylami@othaimmarkets.com
- a.aldeeb@othaimmarkets.com
- a.alenazi@othaimmarkets.com
- a.alenzi@othaimmarkets.com
- a.alenzy@othaimmarkets.com
- a.alfallaj@othaimmarkets.com
- a.alfareej@othaimmarkets.com
- A.Alfify@othaimmarkets.com
- a.alfreje@othaimmarkets.com
- A.Algafeis@othaimmarkets.com
- a.algarni@othaimmarkets.com
- a.algayshan@othaimmarkets.com
- a.algenean@othaimmarkets.com
- a.algonom@othaimmarkets.com
- A.Alhajyousef@othaimmarkets.com
- A.Alharby@othaimmarkets.com
- a.alhayaei@othaimmarkets.com
- a.Alhmidat@othaimmarkets.com
- a.alhomed@othaimmarkets.com
- a.alhrbei@othaimmarkets.com
- a.alhutam@othaimmarkets.com
- A.Ali@othaimmarkets.com
- a.AlJaloud@othaimmarkets.com
- a.aljebreen@othaimmarkets.com
- a.aljebren@othaimmarkets.com
- a.aljewd@othaimmarkets.com
- a.aljoufi@othaimmarkets.com
- a.aljuwaied@othaimmarkets.com
- a.aljurays@othaimmarkets.com
- a.allam@othaimmarkets.com
- a.almahi@othaimmarkets.com
- a.almalki@othaimmarkets.com
- a.almanon@othaimmarkets.com
- a.almasri@othaimmarkets.com
- A.Alnaheti@othaimmarkets.com
- a.alnawab@othaimmarkets.com
- a.aloamar@othaimmarkets.com
- a.alolaiwi@othaimmarkets.com
- a.alomer@othaimmarkets.com
- a.alonazy@othaimmarkets.com
- a.alosta@othaimmarkets.com
- a.alqahtani@othaimmarkets.com
- a.alreutha@othaimmarkets.com
- a.alsayed@othaimmarkets.com
- a.alsharkawy@othaimmarkets.com
- a.alsheyaty@othaimmarkets.com
- a.altawil@othaimmarkets.com
- a.altork@othaimmarkets.com
- a.altubakhi@othaimmarkets.com
- a.Alwani@othaimmarkets.com
- a.alyahya@othaimmarkets.com
- a.alzafiri@othaimmarkets.com
- a.amin@othaimmarkets.com
- a.ansari@othaimmarkets.com
- a.arabeen@othaimmarkets.com
- a.arevalo@othaimmarkets.com
- a.ariola@othaimmarkets.com
- a.atef@othaimmarkets.com
- a.atif@othaimmarkets.com
- a.atwa@othaimmarkets.com
- a.aziz@othaimmarkets.com
- a.bahram@othaimmarkets.com
- a.balano@othaimmarkets.com
## /Episode 2/Malwares and Logs/All Targets/Saudi/SA_Proxyshell_target.txt
212.12.165.155 Shell
212.12.178.178
213.236.56.117
37.224.113.215
46.235.93.139
77.240.91.151 failed
77.240.91.154 failed
77.240.91.155 failed
77.240.93.43 mail
85.184.233.203 Shell
87.101.187.92
93.112.12.130
94.77.201.86
email.samama.com failed
mail.aiccp.com.sa
mail.albarakatgroup.com
mail.almanahospital.com.sa legacyDN
mail.alrashidabetong.com
mail.arabian-homes.com
mail.goldenbrown.sa
mail.ihcc.sa legacyDN
mail.sosgroup.com
mail.tanhatmining.com
mail1.manafea.net Shell
mail1.solbsteel.com
outbound.familycare.com.sa failed
smtp.baroid-sa.com
webmail.almanahospital.com.sa failed
## /Episode 2/Malwares and Logs/All Targets/Saudi/mail1.solbsteel.com.txt
fqdn jaz-mail2.solb.local
- allemployees@solbsteel.com
- allsscemployees@solbsteel.com
- allsscmanagers@solbsteel.com
- allsscsectionheads@solbsteel.com
- allsteefcoemployees@solbsteel.com
- citc@solbsteel.com
- cmdinchargeteam@solbsteel.com
- rm2team@solbsteel.com
- SAP_Info@solbsteel.com
- smpbilletyard@solbsteel.com
- sscsmshiftreport@solbsteel.com
- sscfgteam@solbsteel.com
- sscimsauditors@solbsteel.com
- sscscmrmh@solbsteel.com
- 5steam@solbsteel.com
- AA@solbsteel.com
- ssccanteen@solbsteel.com
- ssccmd@solbsteel.com
- complains@solbsteel.com
- SSCConferenceRooms@solbsteel.com
- cootechnicalteam@solbsteel.com
- ssccrane@solbsteel.com
- sscfinance@solbsteel.com
- sscfocalpoint@solbsteel.com
- sschr@solbsteel.com
- sschrpayroll@solbsteel.com
- sschse@solbsteel.com
- sscit@solbsteel.com
- sscitsupport@solbsteel.com
- ssclync@solbsteel.com
- ssc.mci@solbsteel.com
- SSCMECTeam@solbsteel.com
- sscppc@solbsteel.com
- sscprocurement@solbsteel.com
- sscpublicrelations@solbsteel.com
- sscrecruitment@solbsteel.com
- sscsafetypromoters@solbsteel.com
- sscsales@solbsteel.com
- sscsalesoperation@solbsteel.com
- sscsappmpowerusers@solbsteel.com
- SSCSAPBusinessProcessOwners@solbsteel.com
- sscsappowerusers@solbsteel.com
- SSCSAPSupport@solbsteel.com
- sscsapusers@solbsteel.com
- sscsaudiengineers@solbsteel.com
- sscmiiusers@solbsteel.com
- sscsecurity@solbsteel.com
- sscshipping@solbsteel.com
- sscsmpsapintegration@solbsteel.com
- ssctraining@solbsteel.com
- ssctrainingcoordinators@solbsteel.com
- yourvoice@solbsteel.com
- sscstarsptm@solbsteel.com
- sscstarsscom@solbsteel.com
- STEEFCOSAP@solbsteel.com
- abdul.ali@steefco.com
+ AbdulAhad@solbsteel.com
## /Episode 2/Malwares and Logs/All Targets/Turkey/TR_Exchange_target.txt
eposta.mfa.gov.ct.tr
exchange.akbasoglu.com
hibrit.magmaweld.com
mail.24yemek.com.tr
mail.akartextile.com
mail.bahcelievler.bel.tr
mail.basakoglu.com.tr
mail.basturkcam.com.tr
mail.bilpagida.com
mail.dcaokullari.com
mail.dnstrade.com.tr
mail.duzeymode.com
antivirusgw.teknikgumruk.com.tr
mail.gopayless.com.tr
mail.itpro.com.tr
mail.kmcgroup.com.tr
mail.mersin.bel.tr
mail.mtplastech.com.tr
mail.narkonteks.com
mail.nisahastanesi.com
mail.noahsark.com.tr
mail.ozerensigorta.com
mail.taf-inter.com
mail.umur.com.tr
mail.uzmantek.com
mail.zenitled.com.tr
mail1.otaknetworks.com
msexc.aydintextil.com.tr
owa.myl.com.tr
smtp.aydinaski.gov.tr
srv0.kurgu-e.com
static-169-40-68-212.sadecehosting.net
static-185-132-125-83.ptr.name.tr
ulak.neutecin.com
webmail.calor.com.tr
webmail.intimesolutions.net
## /Episode 2/Malwares and Logs/All Targets/Turkey/hibrit.magmaweld.com.lua
```lua path="/Episode 2/Malwares and Logs/All Targets/Turkey/hibrit.magmaweld.com.lua"
fqdn exchange2016.oerlikon.local
- 112@zaimogluholding.com.tr
- 4449353@magmaweld.com
- 5s@magmaweld.com
- 700@magmaweld.com
- abdullah.altinok@magmaweld.com
- abdullahkarakafa4554@gmail.com
- Abubekir.Ozdemir@magmaweld.com
- Acil.Uyari@zaimogluholding.com.tr
- adem.guney@magmaweld.com
- adil.bozan@magmaweld.com
- admin@magmaweld.com
- ahmet.akbs@hotmail.com
- AhmetCaner.Yokus@magmaweld.com
- ahmet.dagli@magmaweld.com
- Ahmet.Kayali@magmaweld.com
- ahmet.koc@magmaweld.com
- Ahmet.Obalioglu@magmaweld.com
- Ahmet.Sanliturk@magmaweld.com
- Ahmet.YAVAS@magmaweld.com
- a.z.saci@hotmail.com
- Aleksey.Nekrasov@magmaweld.com
- alibal@hidrel.com.tr
- Eren.Kocamis@magmaweld.com
- ali.kirgoz@magmaweld.com
- Ali.KOSAROGLU@magmaweld.com
- Ali.MIDILIC@magmaweld.com
- aliocakoren27@gmail.com
- alimkodgrubu@magmaweld.com
- amb.tasarim@magmaweld.com
- ambalaj.pc@magmaweld.com
- ambuniteyon@magmaweld.com
- gavshins@kron-spb.com
- Andrey.Aleksandrovich@magmaweld.com
- Andrey.Ganzhela@magmaweld.com
- Andrey.Gavshinsky@magmaweld.com
+ Andrey.Kirillov@magmaweld.com
```
## /Episode 2/Malwares and Logs/All Targets/Turkey/mail.dnstrade.com.tr.sql
```sql path="/Episode 2/Malwares and Logs/All Targets/Turkey/mail.dnstrade.com.tr.sql"
fqdn akman.dorce.local
- A1cevik@dorce.com
- A2cevik@dorce.com.tr
- eabdulvahap@dorce.com.tr
- yaadem@dorce.com.tr
- admin@dorce.com.tr
- reklam@dorce.com.tr
- madylbek@dorce.com.tr
- ceahmet@dorce.com.tr
- ozfirat@dorce.com.tr
- kaahmet@dorce.com.tr
- mahmet@dorce.com.tr
- tahmet@dorce.com.tr
- takin@dorce.com.tr
- aalay@dorce.com.tr
- alce@alce.com.tr
- dali@dorce.com.tr
- ess-qamgr@dorce.com.tr
- shali@dorce.com.tr
- balp@dorce.com.tr
- talparslan@dorce.com.tr
- mammar@dorce.com.tr
- danil@dorce.com.tr
- karif@dorce.com.tr
- asakar@dorce.com.tr
- zasem@dorce.com.tr
- yatilla@dorce.com.tr
- gaydin@dorce.com.tr
- tayhan@dorce.com.tr
- caykut@dorce.com.tr
- cazad@dorce.com.tr
- gazad@dorce.com.tr
- dorcecanada@dorce.com.tr
- abahadir@dorce.com.tr
- abakytzhan@dorce.com.tr
- tbaris@dorce.com.tr
- basrahospital@dorce.com.tr
- bceren@dorcemozambique.com
- sbehcet@dorce.com.tr
- kberati@dorce.com.tr
- aberkay@dorce.com.tr
- abertug@dorce.com.tr
- tco-whsechief@dorce.com.tr
+ bimtest@dorce.com.tr
- molmez@sds.com.tr
- aberkbasan@yagizsut.com
- AKaragoz@sds.com.tr
- AZengin@sds.com.tr
- ahmet.ambaroglu@zenitled.com.tr
- AAykutluca@sds.com.tr
- ACiftci@sds.com.tr
+ ahmet.dural@zenitled.com.tr
- abapdeveloper@umur.com.tr
- abdullah.karatekin@umur.com.tr
- abdullah.sahin@umur.com.tr
- abdulselam.urtanur@umur.com.tr
- agul@umur.com.tr
+ acikpozisyonlar@umur.com.tr
- AEren@sds.com.tr
- molmez@sds.com.tr
- aberkbasan@yagizsut.com
- AKaragoz@sds.com.tr
- AZengin@sds.com.tr
- ahmet.ambaroglu@zenitled.com.tr
- AAykutluca@sds.com.tr
- ACiftci@sds.com.tr
+ ahmet.dural@zenitled.com.tr
```
## /Episode 2/Malwares and Logs/All Targets/Turkey/target turkey.tr
```tr path="/Episode 2/Malwares and Logs/All Targets/Turkey/target turkey.tr"
eposta.mfa.gov.ct.tr
exchange.akbasoglu.com
hibrit.magmaweld.com mail
mail.24yemek.com.tr
mail.akartextile.com
mail.bahcelievler.bel.tr
mail.basakoglu.com.tr
mail.basturkcam.com.tr
mail.bilpagida.com 403
mail.dcaokullari.com
mail.dnstrade.com.tr mail
mail.duzeymode.com
antivirusgw.teknikgumruk.com.tr failed
mail.gopayless.com.tr
mail.itpro.com.tr
mail.kmcgroup.com.tr
mail.mersin.bel.tr
mail.mtplastech.com.tr
mail.narkonteks.com
mail.nisahastanesi.com
mail.noahsark.com.tr
mail.ozerensigorta.com
mail.taf-inter.com
mail.umur.com.tr
mail.uzmantek.com
mail.zenitled.com.tr
mail1.otaknetworks.com
msexc.aydintextil.com.tr
owa.myl.com.tr
smtp.aydinaski.gov.tr
srv0.kurgu-e.com
static-169-40-68-212.sadecehosting.net
static-185-132-125-83.ptr.name.tr
ulak.neutecin.com
webmail.calor.com.tr
webmail.intimesolutions.net
```
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AT/AT_proxyshell_target.txt
last update 20220620 in kali
109.68.110.82 shell https://109.68.110.82/owa/auth/webclient.aspx full shell Access Denied
178.188.158.186 shell https://178.188.158.186/aspnet_client/System_web/webclient.aspx full shell ok... auhofcenter.at
178.188.194.114 shell https://178.188.194.114/owa/auth/webclient.aspx full shell {404 shell}
178.188.71.190 shell https://178.188.71.190/owa/auth/webclient.aspx full shell {404 shell}
178.189.1.226 shell https://178.189.1.226/owa/auth/webclient.aspx full shell {404 shell} land-oberoesterreich.gv.at
178.189.15.226 shell https://178.189.15.226/owa/auth/webclient.aspx full shell {404 shell} stallprofi.at
185.50.235.189 shell https://185.50.235.189/owa/auth/msfuj.aspx Not execute 404
185.50.235.198
185.77.254.37
193.30.163.46 shell https://193.30.163.46/owa/auth/webclient.aspx full shell {404 shell} autohaus-wagner.at
194.107.20.9
195.191.252.186
195.191.252.190
195.230.161.180
212.17.85.93
212.186.112.92
212.186.113.198
212.186.208.171 shell https://212.186.208.171/aspnet_client/System_web/webclient.aspx full shell ok... oegf.at
213.153.52.73
213.47.81.107 shell https://213.47.81.107/aspnet_client/System_web/webclient.aspx full shell ok... gappen.at
62.218.51.131 shell https://62.218.51.131/aspnet_client/System_web/webclient.aspx full shell ok... hauser-kaibling.at
62.218.59.124
62.218.82.2
62.99.188.58 shell https://62.99.188.58/aspnet_client/System_web/webclient.aspx full shell ok... utanet.at
80.109.157.74 shell https://80.109.157.74/owa/auth/webclient.aspx full shell {404 shell} armas.at
80.120.155.222 shell https://80.120.155.222/aspnet_client/System_web/webclient.aspx full shell ok... jansen-competition.com
80.120.20.178 shell https://80.120.20.178/owa/auth/webclient.aspx full shell Access Denied f2-architekten.at
80.120.41.94 shell https://80.120.41.94/aspnet_client/wsrnt.aspx status 500 {404 shell}
80.121.245.134 shell https://80.121.245.134/aspnet_client/dggle.aspx status 500 {404 shell}
80.122.132.246 shell https://80.122.132.246/owa/auth/webclient.aspx full shell {404 shell} hinterberger-kaffee.at
80.122.134.114
80.122.141.154 shell https://80.122.141.154/aspnet_client/System_web/webclient.aspx full shell ok... www.messewieselburg.at/
80.123.144.202 shell https://80.123.144.202/owa/auth/webclient.aspx full shell Access Denied https://primatech.at ok full shell
81.10.188.66 shell https://81.10.188.66/aspnet_client/System_web/webclient.aspx full shell ok https://acon.at/
81.223.141.202
81.223.143.210 shell https://81.223.143.210/aspnet_client/maggb.aspx Not Execute 404 amr.at
81.223.95.99
83.65.180.42
89.249.184.178 shell https://89.249.184.178/owa/auth/webclient.aspx full shell Access Denied www.hf-group.at ok
90.146.12.163 shell https://90.146.12.163/aspnet_client/hoqea.aspx full shell {404 shell} www.eder-stb.at/ 404 Not Execute
90.146.6.2 shell https://90.146.6.2/owa/auth/webclient.aspx full shell {404 shell} laborbauer.at
91.112.166.102
91.112.229.70 shell https://91.112.229.70/owa/auth/webclient.aspx full shell {404 shell} holzmann-fvl.at
91.112.230.102
91.112.237.124 shell https://91.112.237.124/owa/auth/webclient.aspx full shell {404 shell} https://www.schuldenberatung.at
91.113.177.132
91.114.88.52 shell https://91.114.88.52/aspnet_client/System_web/webclient.aspx full shell ok... www.technometall.at ok full Shell
91.118.16.73 shell https://91.118.16.73/aspnet_client/System_web/webclient.aspx full shell Access Denied www.dmw-wien.at
92.61.49.194 shell https://92.61.49.194/owa/auth/webclient.aspx full shell Access Denied www.bohr.at/
93.189.27.5 shell https://93.189.27.5/owa/auth/loolm.aspx Full shell 404
93.83.6.10 shell https://93.83.6.10/aspnet_client/System_web/webclient.aspx Full shell ok hembach.at
93.83.90.202
94.136.20.18
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AU/AU_Proxyshell_target.txt
101.178.204.44 shell https://101.178.204.44/owa/auth/webclient.aspx web: atmmarketing.com.au full shell Access Denied
103.99.64.32
104.210.69.154
115.64.231.26
119.40.104.189
123.243.161.131
123.243.43.98
123.243.54.162
123.51.39.195
124.254.123.178
125.254.49.75
13.55.111.30
144.139.36.207
144.140.230.10
150.101.240.242
180.95.21.164
180.95.21.94
180.95.24.229
203.100.3.122
203.129.24.19
203.129.21.134 -------
203.185.200.82
203.219.31.170
203.23.196.2
203.24.11.11
203.24.22.146
203.33.118.21
203.34.109.212
203.35.209.116
203.37.2.29
203.41.235.139
203.47.10.115 shell https://203.47.10.115/aspnet_client/tiikr.aspx web: http://oraclebuildingcorp.com.au full shell
203.49.40.53
203.53.175.40
47.74.71.198 shell https://47.74.71.198/aspnet_client/iomjj.aspx web: fujifilm not respans 404
49.176.130.226 shell https://49.176.130.226/aspnet_client/vpsem.aspx not execute
52.237.253.104
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/20220509043739_default_89.147.201.146_ad.exchange.mail_652722.txt
EmailAddress,Name,RoutingType,MailboxType
"ABArtificialLift@karasuopco.com","AB Artificial Lift","SMTP","Contact"
"ABWellService@karasuopco.com","AB Well Service","SMTP","Contact"
"Abbas.Rzayev@shirvanoil.com","Abbas Rzayev","SMTP","Contact"
"Arzayev@AOC.az","Abbas Rzayev","SMTP","Contact"
"Accounting@binagadioil.com","Accounting","SMTP","PublicDL"
"accounting.dept@binagadioil.com","Accounting Department","SMTP","Mailbox"
"ABeylarov@karasuopco.com","Adil Beylarov","SMTP","Contact"
"ABunyatov@aoc.az","Adil Bunyatov","SMTP","Contact"
"bocmain@binagadioil.com","Admin BOC","SMTP","Mailbox"
"Administrator@binagadioil.com","Administrator","SMTP","Mailbox"
"Afa.Khalilzade@karasuopco.com","Afa Khalilzade","SMTP","Contact"
"afe.boc@binagadioil.com","AFE","SMTP","PublicDL"
"ADaniyarova@binagadioil.com","Afet Daniyarova","SMTP","Mailbox"
"Afet.Hajiyeva@karasuopco.com","Afet Hajiyeva","SMTP","Contact"
"AKasimova@karasuopco.com","Afet Kasimova","SMTP","Contact"
"Agalar.Farzaliyev@binagadioil.com","Agalar Farzaliyev","SMTP","Mailbox"
"arahimov@binagadioil.com","Agaselim Rahimov","SMTP","Mailbox"
"AAgayev@binagadioil.com","Agayar Agayev","SMTP","Mailbox"
"agil.akhmedov@binagadioil.com","Agil Akhmedov","SMTP","Mailbox"
"AMelikov@karasuopco.com","Agil Melikov","SMTP","Contact"
"AKalashov@karasuopco.com","Ahmad Kalashov","SMTP","Contact"
"aguliyeva@binagadioil.com","Aida Guliyeva","SMTP","Mailbox"
"akbarmammadov@binagadioil.com","Akbar Mammadov","SMTP","Mailbox"
"akhmed_isayev@binagadioil.com","Akhmed Isayev","SMTP","Mailbox"
"AZeynalov@karasuopco.com","Akhmed Zeynalov","SMTP","Contact"
"akif.mazanov@karasuopco.com","Akif Mazanov","SMTP","Contact"
"Aladdin.Shakarov@shirvanoil.com","Aladdin Shakarov","SMTP","Contact"
"Ashipilov@aoc.az","Aleksandr Shipilov","SMTP","Contact"
"Aleksandr.Soklakov@SHIRVANOIL.COM","Aleksandr Soklakov","SMTP","Contact"
"akiselyov@binagadioil.com","Aleksey Kiselyov","SMTP","Mailbox"
"APlotnikov@AOC.az","Aleksey Plotnikov","SMTP","Contact"
"areshetnikov@AOC.az","Aleksey Reshetnikov","SMTP","Contact"
"anasirov@binagadioil.com","Alesker Nasirov","SMTP","Mailbox"
"HRAliBayramli@karasuopco.com","Ali Bayramli","SMTP","Contact"
"aabdullayev@binagadioil.com","Alik Abdullayev","SMTP","Mailbox"
"AVeliyev@karasuopco.com","Alisatdar Veliyev","SMTP","Contact"
"alkam@nsa.az","Alkam","SMTP","Contact"
"allstaff@nsa.az","All staff","SMTP","Contact"
"AllStaff@binagadioil.com","All Staff","SMTP","PublicDL"
"amal.javadov@binagadioil.com","Amal Javadov","SMTP","Mailbox"
"Amil.Qurbanov@noc.az","Amil Qurbanov","SMTP","Contact"
"AAgamaliyev@karasuopco.com","Anar Agamaliyev","SMTP","Contact"
"Anar.Asadov@SHIRVANOIL.COM","Anar Asadov","SMTP","Contact"
"abadalov@AOC.az","Anar Badalov","SMTP","Contact"
"ADashdamirov@AOC.az","Anar Dashdamirov","SMTP","Contact"
"anar.guluzade@binagadioil.com","Anar Guluzade","SMTP","Mailbox"
"Anar.Gurbanov@karasuopco.com","Anar Gurbanov","SMTP","Contact"
"Anar.Hasanov@karasuopco.com","Anar Hasanov","SMTP","Contact"
"AHeydarov@AOC.az","Anar Heydarov","SMTP","Contact"
"aibadov@nsa.az","Anar Ibadov","SMTP","Contact"
"Anar.Musayev@binagadioil.com","Anar Musayev","SMTP","Mailbox"
"AShushaly@karasuopco.com","Anar Shushaly","SMTP","Contact"
"anar.yusifov@binagadioil.com","Anar Yusifov","SMTP","Mailbox"
"ABolshakova@AOC.az","Anastasiya Bolshakova","SMTP","Contact"
"AKonopelkin@AOC.az","Andrey Konopelkin","SMTP","Contact"
"Andrey.Kozlov@SHIRVANOIL.COM","Andrey Kozlov","SMTP","Contact"
"Andrey.Shapovalov@karasuopco.com","Andrey Shapovalov","SMTP","Contact"
"aocstaff@aoc.az","AOC All Staff","SMTP","Contact"
"AOCKuratori@AOC.az","AOC Kuratori","SMTP","Contact"
"Araz.Azizov@karasuopco.com","Araz Azizov","SMTP","Contact"
"AAkhundlu@AOC.az","Arif Akhundlu","SMTP","Contact"
"Arif.Alishov@karasuopco.com","Arif Alishov","SMTP","Contact"
"Arif.Farajov@karasuopco.com","Arif Farajov","SMTP","Contact"
"Arif.Ibrahimov@shirvanoil.com","Arif Ibrahimov","SMTP","Contact"
"amammadov@binagadioil.com","Arif Mammadov","SMTP","Mailbox"
"arif.zeynalov@noc.az","Arif Zeynalov","SMTP","Contact"
"ArtificialLift@karasuopco.com","Artificial Lift","SMTP","Contact"
"Aruze.Esedova@noc.az","Aruze Esedova","SMTP","Contact"
"arzu.babayeva@binagadioil.com","Arzu Babayeva","SMTP","Mailbox"
"ABadalova@AOC.az","Arzu Badalova","SMTP","Contact"
"Arzu.Gezalova@karasuopco.com","Arzu Gezalova","SMTP","Contact"
"AIsmailova@karasuopco.com","Arzu Ismailova","SMTP","Contact"
"Arzu.Omarov@karasuopco.com","Arzu Omarov","SMTP","Contact"
"asad.asgerov@binagadioil.com","Asad Asgerov","SMTP","Mailbox"
"ASamedov@AOC.az","Asadulla Samedov","SMTP","Contact"
"Asif.Baloglanov@karasuopco.com","Asif Baloglanov","SMTP","Contact"
"AMirzoyev@karasuopco.com","Asif Mirzoyev","SMTP","Contact"
"Akerimov@AOC.az","Asker Kerimov","SMTP","Contact"
"AMukhametzyanov@noc.az","Askhat Mukhametzyanov","SMTP","Contact"
"ABaxishli@karasuopco.com","Asli Baxishli","SMTP","Contact"
"abilalova@binagadioil.com","Asya Bilalova","SMTP","Mailbox"
"AShukurov@noc.az","Atamaly Shukurov","SMTP","Contact"
"Ababayeva@karasuopco.com","Aybeniz Babayeva","SMTP","Contact"
"Aybeniz.Orudjeva@karasuopco.com","Aybeniz Orudjeva","SMTP","Contact"
"Aynur.Kerimova@shirvanoil.com","Aynur Kerimova","SMTP","Contact"
"Aynura.Guliyeva@karasuopco.com","Aynura Guliyeva","SMTP","Contact"
"Aynura.Rahimova@binagadioil.com","Aynura Rahimova","SMTP","Mailbox"
"Aynura.Shabanova@karasuopco.com","Aynura Shabanova","SMTP","Contact"
"aguliyeva@nsa.az","Aysel Guliyeva","SMTP","Contact"
"aysel.hasanova@binagadioil.com","Aysel Hasanova","SMTP","Mailbox"
"AAllakhverdiyeva@AOC.az","Ayten Allakhverdiyeva","SMTP","Contact"
"AFarmanov@karasuopco.com","Azad Farmanov","SMTP","Contact"
"aismayilov@binagadioil.com","Azer Ismayilov","SMTP","Mailbox"
"azer.rzazade@binagadioil.com","Azer Rzazade","SMTP","Mailbox"
"Azer.Shirinov@SHIRVANOIL.COM","Azer Shirinov","SMTP","Contact"
"ayusifov@binagadioil.com","Azer Yusifov","SMTP","Mailbox"
"Azer.Zeynalov@karasuopco.com","Azer Zeynalov","SMTP","Contact"
"AYagubov@AOC.az","Aziz Yagubov","SMTP","Contact"
"backup1@binagadioil.com","backup1","SMTP","Mailbox"
"backup3@binagadioil.com","backup3","SMTP","Mailbox"
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/20220509044804_default_93.88.82.228_ad.exchange.mail_591622.txt
EmailAddress,Name,RoutingType,MailboxType
"Abbas.Abbaszade@pashaproperty.az","Abbas Abbaszade","SMTP","Mailbox"
"Abdulahad.Samadov@blueplanet.az","Abdulahad Samadov","SMTP","Mailbox"
"contactus@absheronapartments.az","Absheron Apartments","SMTP","Mailbox"
"Afag.Habib-zada@pashaproperty.az","Afag Habib-zada","SMTP","Mailbox"
"Aghakishi.Aghayev@portbaku.az","Aghakishi Aghayev","SMTP","Mailbox"
"Agil.Huseynov@blueplanet.az","Agil Huseynov","SMTP","Mailbox"
"Aitaj.Gumbatova@blueplanet.az","Aitaj Gumbatova","SMTP","Mailbox"
"Aleksey.Krapivko@blueplanet.az","Aleksey Krapivko","SMTP","Mailbox"
"Ali.Abbasov@blueplanet.az","Ali Abbasov","SMTP","Mailbox"
"Ali.Musali@blueplanet.az","Ali Musali","SMTP","Mailbox"
"Alifagha.Gasimov@pbt.az","Alifagha Gasimov","SMTP","Mailbox"
"Aliya.Zeynalova@portbaku.az","Aliya Zeynalova","SMTP","Mailbox"
"Alla.Imanova@blueplanet.az","Alla Imanova","SMTP","Mailbox"
"AM.GoSport.Cashier1@blueplanet.az","AM.GoSport Cashier1","SMTP","Mailbox"
"AM.GoSport.Stock@pbt.az","AM.GoSport Stock","SMTP","Mailbox"
"Amil.Azizov@bilgahestates.az","Amil Azizov","SMTP","Mailbox"
"Amil.Mansumov@portbaku.az","Amil Mansumov","SMTP","Mailbox"
"Amina.Temirova@blueplanet.az","Amina Temirova","SMTP","Mailbox"
"Anar.Aliyev@pashaproperty.az","Anar Aliyev","SMTP","Mailbox"
"Anar.Azimov@blueplanet.az","Anar Azimov","SMTP","Mailbox"
"Anar.Habibov@blueplanet.az","Anar Habibov","SMTP","Mailbox"
"office@aliyeva.org","Andrey Sipilin","SMTP","Mailbox"
"Anna.Suleymanova@blueplanet.az","Anna Suleymanova","SMTP","Mailbox"
"Arifa.Abbasova@pashaproperty.az","Arifa Abbasova","SMTP","Mailbox"
"Arzu.Aghayeva@pashaproperty.az","Arzu Aghayeva","SMTP","Mailbox"
"Asif.Ibrahimov@blueplanet.az","Asif Ibrahimov","SMTP","Mailbox"
"Aslan.Huseynov@kresidence.az","Aslan Huseynov","SMTP","Mailbox"
"Athula.Gedara@pbt.az","Athula Gedara","SMTP","Mailbox"
"AV.Engineer@pbt.az","AV Engineer","SMTP","Mailbox"
"Avaz.Kazimov@pashaproperty.az","Avaz Kazimov","SMTP","Mailbox"
"Avenue.Outlet@blueplanet.az","Avenue Outlet","SMTP","Mailbox"
"Avenue.Outlet2@blueplanet.az","Avenue Outlet 2","SMTP","Mailbox"
"Awad.Nour@theclub.az","Awad Nour","SMTP","Mailbox"
"Ayaz.Ordukhanov@bilgahestates.az","Ayaz Ordukhanov","SMTP","Mailbox"
"Aydan.Ismailova@blueplanet.az","Aydan Ismailova","SMTP","Mailbox"
"Aydan.Mahmudova@pashaproperty.az","Aydan Mahmudova","SMTP","Mailbox"
"Aydan.Qurbanova@bilgahestates.az","Aydan Qurbanova","SMTP","Mailbox"
"Aygun.Karimli@blueplanet.az","Aygun Karimli","SMTP","Mailbox"
"Aykhan.Khalifa@blueplanet.az","Aykhan Khalifa","SMTP","Mailbox"
"Ayla.Abasova@blueplanet.az","Ayla Abasova","SMTP","Mailbox"
"Aynura.Imanova@pashaproperty.az","Aynura Imanova","SMTP","Mailbox"
"Aysel.Abasova@theclub.az","Aysel Abasova","SMTP","Mailbox"
"Aysel.Aliyeva@blueplanet.az","Aysel Aliyeva","SMTP","Mailbox"
"Aysel.Ashrafova@blueplanet.az","Aysel Ashrafova","SMTP","Mailbox"
"Ayten.Babashova@blueplanet.az","Ayten Babashova","SMTP","Mailbox"
"Bagtu.Tosun@blueplanet.az","Bagtu Tosun","SMTP","Mailbox"
"Bakhtiyar.Pashayev@pbt.az","Bakhtiyar Pashayev","SMTP","Mailbox"
"BakuPalace@bakupalace.net","BakuPalace","SMTP","PublicDL"
"Banu.Zamanova@blueplanet.az","Banu Zamanova","SMTP","Mailbox"
"BCV@bakucityvillas.az","BCV","SMTP","PublicDL"
"BEC@bakuexpocenter.az","BEC","SMTP","PublicDL"
"Behnam.Taghiyev@pbt.az","Behnam Taghiyev","SMTP","Mailbox"
"BEV@bilgahestates.az","BEV","SMTP","PublicDL"
"BLC.Stock@blueplanet.az","BLC","SMTP","Mailbox"
"Blue.Planet@blueplanet.az","BluePlanet","SMTP","PublicDL"
"Brunello.Cucinelli@blueplanet.az","Brunello Cucinelli","SMTP","Mailbox"
"Bvlgari@blueplanet.az","Bvlgari","SMTP","Mailbox"
"CallCenter@frem.az","Call Center","SMTP","Mailbox"
"CAydemir@pashaconstruction.com","Caner Aydemir","SMTP","Contact"
"Career@pashaproperty.az","Career","SMTP","Mailbox"
"Celine@blueplanet.az","Celine","SMTP","Mailbox"
"CEO@pashaproperty.az","CEO","SMTP","Mailbox"
"Chaminda.Kankanamalage@pbt.az","Chaminda Kankanamalage","SMTP","Mailbox"
"Chinara.Fataliyeva@blueplanet.az","Chinara Fataliyeva","SMTP","Mailbox"
"Chingiz.Karimov@bakucityvillas.az","Chingiz Karimov","SMTP","Mailbox"
"CHouse@bilgahestates.az","Club House","SMTP","Mailbox"
"Clubreception@theclub.az","Clubreception","SMTP","Mailbox"
"Contact@bakuexpocenter.az","Contact BakuExpoCenter","SMTP","Mailbox"
"Coordinator@olympicresidence.az","Coordinator Olympic Residence","SMTP","Mailbox"
"Courir@blueplanet.az","Courir BluePlanet","SMTP","Mailbox"
"courirbaku-pbm@blueplanet.az","Courir Cashier","SMTP","Mailbox"
"Courir.HC@blueplanet.az","Courir HC","SMTP","Mailbox"
"CRRE.Division@pfm.az","CRRE","SMTP","PublicDL"
"Dany.Alam@pbt.az","Dany Alam","SMTP","Mailbox"
"Dashgin.Baghirov@blueplanet.az","Dashgin Baghirov","SMTP","Mailbox"
"Digital@go-sport.az","Digital GoSport","SMTP","Mailbox"
"Digital1@courir.az","Digital1 Courir","SMTP","Mailbox"
"Dina.Hajiyeva@blueplanet.az","Dina Hajiyeva","SMTP","Mailbox"
"Dinara.Askerova@blueplanet.az","Dinara Askerova","SMTP","Mailbox"
"MsExchDiscoveryMailboxD919BA05-46A6-415f-80AD-7E09334BB852@bakupalace.net","DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852}","SMTP","Mailbox"
"DM.Courir.Cashier1@blueplanet.az","DM.Courir.Cashier1","SMTP","Mailbox"
"DM.GoSport.Cashier1@blueplanet.az","DM.GoSport.Cashier1","SMTP","Mailbox"
"DM.GoSport.Cashier2@blueplanet.az","DM.GoSport.Cashier2","SMTP","Mailbox"
"DM.GoSport.Cashier3@blueplanet.az","DM.GoSport.Cashier3","SMTP","Mailbox"
"DM.Nike.Cashier1@blueplanet.az","DM.Nike.Cashier1","SMTP","Mailbox"
"DM.Nike.Cashier2@blueplanet.az","DM.Nike.Cashier2","SMTP","Mailbox"
"DM.Skechers.Cashier1@blueplanet.az","DM.Skechers.Cashier1","SMTP","Mailbox"
"DM.Skechers.Cashier2@blueplanet.az","DM.Skechers.Cashier2","SMTP","Mailbox"
"Dolce.Gabbana@blueplanet.az","Dolce Gabbana","SMTP","Mailbox"
"Elchin.Abdullayev@blueplanet.az","Elchin Abdullayev","SMTP","Mailbox"
"Elchin.Gadimov@pashaproperty.az","Elchin Gadimov","SMTP","Mailbox"
"Eldar.Bakhshiyev@pbt.az","Eldar Bakhshiyev","SMTP","Mailbox"
"Elgun.Zarbiyev@portbaku.az","Elgun Zarbiyev","SMTP","Mailbox"
"Elkhan.Abushov@pbt.az","Elkhan Abushov","SMTP","Mailbox"
"Elkhan.Salimzada@theclub.az","Elkhan Salimzada","SMTP","Mailbox"
"Elman.Humbatov@bakucityvillas.az","Elman Humbatov","SMTP","Mailbox"
"Elman.Mustafayev@pashaconstruction.com","Elman Mustafayev","SMTP","Contact"
"Elmar.Alizada@blueplanet.az","Elmar Alizada","SMTP","Mailbox"
"Elmar.Baghirov@pbt.az","Elmar Baghirov","SMTP","Mailbox"
"Elnara.Ibrahimova@olympicresidence.az","Elnara Ibrahimova","SMTP","Mailbox"
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/20220509050029_default_85.132.107.206_ad.exchange.mail_710330.txt
EmailAddress,Name,RoutingType,MailboxType
"3cxsupport@zeytunpharma.az","3cxsupport","SMTP","Mailbox"
"Administrative@zeytunpharm.az","Administrative","SMTP","PublicDL"
"aflatun.babayev@zeytunpharma.az","Aflatun Babayev","SMTP","Mailbox"
"agshin.karimov@zeytunpharma.az","Agshin Karimov","SMTP","Mailbox"
"akif.beydullayev@zeytunpharma.az","Akif Beydullayev","SMTP","Mailbox"
"Alena.Makarova@zeytunpharma.az","Alena Makarova","SMTP","Mailbox"
"ali.mammadli@zeytunpharma.az","Ali Mammadli","SMTP","Mailbox"
"ali.saftarov@zeytunpharma.az","Ali Saftarov","SMTP","Mailbox"
"aliabbas.mammadov@zeytunpharma.az","Aliabbas Mammadov","SMTP","Mailbox"
"aliheydar.bashirov@zeytunpharma.az","Aliheydar Bashirov","SMTP","Mailbox"
"alima.nurullayeva@zeytunpharma.az","Alima Nurullayeva","SMTP","Mailbox"
"aliya.nabiyeva@zeytunpharma.az","Aliya Nabiyeva","SMTP","Mailbox"
"AllStaff@zeytunpharm.az","AllStaff","SMTP","PublicDL"
"almaz.asgarova@zeytunpharma.az","Almaz Asgarova","SMTP","Mailbox"
"amid.karimov@zeytunpharma.az","Amid Karimov","SMTP","Mailbox"
"anar.aliyev@zeytunpharma.az","Anar Aliyev","SMTP","Mailbox"
"anar.jafarov@zeytunpharma.az","Anar Jafarov","SMTP","Mailbox"
"angelina.jabrayilova@zeytunpharma.az","Angelina Jabrayilova","SMTP","Mailbox"
"arzu.abdullayev@zeytunpharma.az","Arzu Abdullayev","SMTP","Mailbox"
"asad.huseynzade@zeytunpharma.az","Asad Huseynzade","SMTP","Mailbox"
"asad.mamedov@zeytunpharma.az","Asad Mamedov","SMTP","Mailbox"
"asif.mammadov@zeytunpharma.az","Asif Mammadov","SMTP","Mailbox"
"AuditDepartment@zeytunpharm.az","AuditDepartment","SMTP","PublicDL"
"aydan.azimova@zeytunpharma.az","Aydan Azimova","SMTP","Mailbox"
"aydan.guliyeva@zeytunpharma.az","Aydan Guliyeva","SMTP","Mailbox"
"aydan.nazarli@zeytunpharma.az","Aydan Nazarli","SMTP","Mailbox"
"aygun.namazova@zeytunpharma.az","Aygun Namazova","SMTP","Mailbox"
"ayla.hajiyeva@zeytunpharma.az","Ayla Hajiyeva","SMTP","Mailbox"
"aynur.huseynova@zeytunpharma.az","Aynur Huseynova","SMTP","Mailbox"
"aynur.nasibzada@zeytunpharma.az","Aynur Nasibzada","SMTP","Mailbox"
"aysel.amirova@zeytunpharma.az","Aysel Amirova","SMTP","Mailbox"
"aysel.maharramova@zeytunpharma.az","Aysel Maharramova","SMTP","Mailbox"
"ayshan.monsumlu@zeytunpharma.az","Ayshan Monsumlu","SMTP","Mailbox"
"aytan.rasulova@zeytunpharma.az","Aytan Rasulova","SMTP","Mailbox"
"azad.akhmadov@zeytunpharma.az","Azad Akhmadov","SMTP","Mailbox"
"azer.abbasov@zeytunpharma.az","Azer Abbasov","SMTP","Mailbox"
"azer.seyidov@zeytunpharma.az","Azer Seyidov","SMTP","Mailbox"
"bahruz.shiraliyev@zeytunpharma.az","Bahruz Shiraliyev","SMTP","Mailbox"
"bakhtiyar.gurbanov@zeytunpharma.az","Bakhtiyar Gurbanov","SMTP","Mailbox"
"bakuiade@zeytunpharma.az","Baku Iade","SMTP","Mailbox"
"bakuqebul@zeytunpharma.az","Baku Qebul","SMTP","Mailbox"
"BakuDepo@zeytunpharm.az","BakuDepo","SMTP","PublicDL"
"british.aptek@zeytunpharma.az","British Aptek","SMTP","Mailbox"
"CallCenterDepartment@zeytunpharm.az","CallCenterDepartment","SMTP","PublicDL"
"canon.scan@zeytunpharma.az","Canon Scan","SMTP","Mailbox"
"CashierDepartment@zeytunpharm.az","CashierDepartment","SMTP","PublicDL"
"cavidan.ahmadov@zeytunpharma.az","Cavidan Ahmadov","SMTP","Mailbox"
"chingiz.safarov@zeytunpharma.az","Chingiz Safarov","SMTP","Mailbox"
"Depots@zeytunpharm.az","Depots","SMTP","PublicDL"
"dilbar.javadova@zeytunpharma.az","Dilbar Javadova","SMTP","Mailbox"
"dilgusha.ismayilova@zeytunpharma.az","Dilgusha Ismayilova","SMTP","Mailbox"
"dmitriy.gurbanov@zeytunpharma.az","Dmitriy Gurbanov","SMTP","Mailbox"
"edgar.zakiyev@zeytunpharma.az","Edgar Zakiyev","SMTP","Mailbox"
"elchin.gardashaliyev@zeytunpharma.az","Elchin Gardashaliyev","SMTP","Mailbox"
"elchin.guliyev@zeytunpharma.az","Elchin Guliyev","SMTP","Mailbox"
"elchin.ibadov@zeytunpharma.az","Elchin Ibadov","SMTP","Mailbox"
"elchin.soltanov@zeytunpharma.az","Elchin Soltanov","SMTP","Mailbox"
"eldar.aliyev@zeytunpharma.az","Eldar Aliyev","SMTP","Mailbox"
"eljan.mammadov@zeytunpharma.az","Eljan Mammadov","SMTP","Mailbox"
"elkhan.pashayev@zeytunpharma.az","Elkhan Pashayev","SMTP","Mailbox"
"Elmaddin.Mammadov@zeytunpharma.az","Elmaddin Mammadov","SMTP","Mailbox"
"elmin.bagirov@zeytunpharma.az","Elmin Bagirov","SMTP","Mailbox"
"elmir.damirov@zeytunpharma.az","Elmir Damirov","SMTP","Mailbox"
"elnara.aliyeva@zeytunpharma.az","Elnara Aliyeva","SMTP","Mailbox"
"elnur.aliyev@zeytunpharma.az","Elnur Aliyev","SMTP","Mailbox"
"elnur.gadirov@zeytunpharma.az","Elnur Gadirov","SMTP","Mailbox"
"elnur.ismayilov@zeytunpharma.az","Elnur Ismayilov","SMTP","Mailbox"
"elnur.mehdiyev@zeytunpharma.az","Elnur Mehdiyev","SMTP","Mailbox"
"elnur.salahov@zeytunpharma.az","Elnur Salahov","SMTP","Mailbox"
"elshan.gardashaliyev@zeytunpharma.az","Elshan Gardashaliyev","SMTP","Mailbox"
"elvin.abushev@zeytunpharma.az","Elvin Abushev","SMTP","Mailbox"
"elvin.alili@zeytunpharma.az","Elvin Alili","SMTP","Mailbox"
"elvin.aliyev@zeytunpharma.az","Elvin Aliyev","SMTP","Mailbox"
"elvin.allahverdiyev@zeytunpharma.az","Elvin Allahverdiyev","SMTP","Mailbox"
"elvin.khasmammadov@zeytunpharma.az","Elvin Khasmammadov","SMTP","Mailbox"
"emil.babirov@zeytunpharma.az","Emil Babirov","SMTP","Mailbox"
"emil.garibov@zeytunpharma.az","Emil Garibov","SMTP","Mailbox"
"emil.jabbarov@zeytunpharma.az","Emil Jabbarov","SMTP","Mailbox"
"emilya.gasimova@zeytunpharma.az","Emilya Gasimova","SMTP","Mailbox"
"emin.abbasov@zeytunpharma.az","Emin Abbasov","SMTP","Mailbox"
"ErpDepartment@zeytunpharm.az","ErpDepartment","SMTP","PublicDL"
"esed.mammadov@zeytunpharma.az","Esed Mammadov","SMTP","Mailbox"
"experience@zeytunpharma.az","Experience","SMTP","Mailbox"
"faida.kocharli@zeytunpharma.az","Faida Kocharli","SMTP","Mailbox"
"fakhri.rustamli@zeytunpharma.az","Fakhri Rustamli","SMTP","Mailbox"
"farhad.aliyev@zeytunpharma.az","Farhad Aliyev","SMTP","Mailbox"
"farid.dilavarov@zeytunpharma.az","Farid Dilavarov","SMTP","Mailbox"
"farid.ismayilov@zeytunpharma.az","Farid Ismayilov","SMTP","Mailbox"
"farid.ramazanov@zeytunpharma.az","Farid Ramazanov","SMTP","Mailbox"
"farida.guliyeva@zeytunpharma.az","Farida Guliyeva","SMTP","Mailbox"
"farida.kazimova@zeytunpharma.az","Farida Kazimova","SMTP","Mailbox"
"farida.mustafayeva@zeytunpharma.az","Farida Mustafayeva","SMTP","Mailbox"
"farida.salahova@zeytunpharma.az","Farida Salahova","SMTP","Mailbox"
"fariz.valiyev@zeytunpharma.az","Fariz Valiyev","SMTP","Mailbox"
"fatima.aliyeva@zeytunpharma.az","Fatima Aliyeva","SMTP","Mailbox"
"fazil.bagirov@zeytunpharma.az","Fazil Bagirov","SMTP","Mailbox"
"fidan.babayeva@zeytunpharma.az","Fidan Babayeva","SMTP","Mailbox"
"fikret.dadashzade@zeytunpharma.az","Fikret Dadashzade","SMTP","Mailbox"
"FinanceDepartment@zeytunpharm.az","FinanceDepartment","SMTP","PublicDL"
"fuad.dadashov@zeytunpharma.az","Fuad Dadashov","SMTP","Mailbox"
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/20220509050823_default_217.64.20.92_ad.exchange.mail_720068.txt
EmailAddress,Name,RoutingType,MailboxType
"aguliyev@aris.az","Amiraslan Aris","SMTP","Contact"
"ArisSysadmin@sta.az","Aris SysAdmin Team","SMTP","PublicDL"
"Camaladdin.Quliyev@sta.az","Camaladdin H. Quliyev","SMTP","Mailbox"
"fsuleymanli@aris.az","Fuad Aris","SMTP","Contact"
"Fuad.Asadov@sta.az","Fuad D. Asadov","SMTP","Mailbox"
"Humay.Qadimova@sta.az","Humay G. Qadimova","SMTP","Mailbox"
"nmammadov@aris.az","Nail Aris","SMTP","Contact"
"nabasov@aris.az","Nuran Aris","SMTP","Contact"
"Orxan.Alixanli@sta.az","Orxan H. Alixanli","SMTP","Mailbox"
"Qazanfar.Bayramov@sta.az","Qazanfar H. Bayramov","SMTP","Mailbox"
"Rafiga.Pashayeva@sta.az","Rafiga M. Pashayeva","SMTP","Mailbox"
"Sabina.Goyushova@sta.az","Sabina S. Goyushova","SMTP","Mailbox"
"Saida.Agalarova@sta.az","Saida F. Agalarova","SMTP","Mailbox"
"Sevinc.Qarakishiyeva@sta.az","Sevinc Sh. Qarakishiyeva","SMTP","Mailbox"
"tkhaligov@aris.az","Tabriz Aris","SMTP","Contact"
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/20220509051001_default_89.147.205.122_ad.exchange.mail_177500.txt
EmailAddress,Name,RoutingType,MailboxType
"ABWellService@karasuopco.com","AB Well Service","SMTP","Contact"
"Arzayev@AOC.az","Abbas Rzayev","SMTP","Mailbox"
"AOCStaff@AOC.az","Absheron Operating Company Staff","SMTP","PublicDL"
"Adil.Abbasov@SHIRVANOIL.COM","Adil Abbasov","SMTP","Contact"
"Adil.Ahmedov@SHIRVANOIL.COM","Adil Ahmedov","SMTP","Contact"
"ABeylarov@karasuopco.com","Adil Beylarov","SMTP","Contact"
"ABunyatov@karasuopco.com","Adil Bunyatov","SMTP","Contact"
"Afet.Hajiyeva@karasuopco.com","Afet Hajiyeva","SMTP","Contact"
"arahimov@binagadioil.com","Agaselim Rahimov","SMTP","Contact"
"AAgayev@binagadioil.com","Agayar Agayev","SMTP","Contact"
"AMelikov@karasuopco.com","Agil Melikov","SMTP","Contact"
"aguliyeva@binagadioil.com","Aida Guliyeva","SMTP","Contact"
"AIM@SHIRVANOIL.COM","AIM","SMTP","Contact"
"akbarmammadov@binagadioil.com","Akbar Mammadov","SMTP","Contact"
"AZeynalov@karasuopco.com","Akhmed Zeynalov","SMTP","Contact"
"AShipilov@AOC.az","Aleksandr Shipilov","SMTP","Mailbox"
"Aleksandr.Soklakov@SHIRVANOIL.COM","Aleksandr Soklakov","SMTP","Contact"
"APlotnikov@AOC.az","Aleksey Plotnikov","SMTP","Mailbox"
"areshetnikov@AOC.az","Aleksey Reshetnikov","SMTP","Mailbox"
"anasirov@binagadioil.com","Alesker Nasirov","SMTP","Contact"
"aabdullayev@binagadioil.com","Alik Abdullayev","SMTP","Contact"
"Alikhan.MIriyev@binagadioil.com","Alikhan Miriyev","SMTP","Contact"
"AVeliyev@karasuopco.com","Alisatdar Veliyev","SMTP","Contact"
"Amil.Qurbanov@noc.az","Amil Qurbanov","SMTP","Contact"
"Anar.Asadov@SHIRVANOIL.COM","Anar Asadov","SMTP","Contact"
"abadalov@AOC.az","Anar Badalov","SMTP","Mailbox"
"ADashdamirov@AOC.az","Anar Dashdamirov","SMTP","Mailbox"
"Anar.Gurbanov@karasuopco.com","Anar Gurbanov","SMTP","Contact"
"Anar.Hasanov@karasuopco.com","Anar Hasanov","SMTP","Contact"
"AHeydarov@AOC.az","Anar Heydarov","SMTP","Mailbox"
"Anar.Musayev@binagadioil.com","Anar Musayev","SMTP","Contact"
"AShushaly@karasuopco.com","Anar Shushaly","SMTP","Contact"
"anar.yusifov@binagadioil.com","Anar Yusifov","SMTP","Contact"
"Abolshakova@noc.az","Anastasiya Bolshakova","SMTP","Contact"
"AKonopelkin@AOC.az","Andrey Konopelkin","SMTP","Mailbox"
"Andrey.Kozlov@SHIRVANOIL.COM","Andrey Kozlov","SMTP","Contact"
"alichuk@gea.az","Andrey Lichuk","SMTP","Contact"
"Antiga.Jafarova@SHIRVANOIL.COM","Antiga Jafarova","SMTP","Contact"
"Anvar@socar.gov.az","Anvar Socar","SMTP","Contact"
"aocbackupadmin@AOC.az","AOC Backup Administrator","SMTP","Mailbox"
"AOC_Finance@AOC.az","AOC Finance","SMTP","PublicDL"
"AOCKuratori@AOC.az","AOC Kuratori","SMTP","PublicDL"
"aoczgbackupadmin@AOC.az","AOC ZG Backup Administrator","SMTP","Mailbox"
"Araz.Azizov@karasuopco.com","Araz Azizov","SMTP","Contact"
"AAkhundlu@AOC.az","Arif Akhundlu","SMTP","Mailbox"
"Arif.Alishov@karasuopco.com","Arif Alishov","SMTP","Contact"
"amammadov@binagadioil.com","Arif Mammadov","SMTP","Contact"
"arif.zeynalov@noc.az","Arif Zeynalov","SMTP","Contact"
"ArtificialLift@karasuopco.com","Artificial Lift","SMTP","Contact"
"Aruze.Esedova@noc.az","Aruze Esedova","SMTP","Contact"
"ABadalova@AOC.az","Arzu Badalova","SMTP","Mailbox"
"Arzu.Gezalova@karasuopco.com","Arzu Gezalova","SMTP","Contact"
"AIsmailova@karasuopco.com","Arzu Ismailova","SMTP","Contact"
"Arzu.Omarov@karasuopco.com","Arzu Omarov","SMTP","Contact"
"ASamedov@AOC.az","Asadulla Samedov","SMTP","Mailbox"
"AMirzoyev@karasuopco.com","Asif Mirzoyev","SMTP","Contact"
"AMukhametzyanov@noc.az","Askhad Mukhametzyanov","SMTP","Contact"
"ABaxishli@karasuopco.com","Asli Baxishli","SMTP","Contact"
"asutpadmin@AOC.az","ASUTP Admin","SMTP","Mailbox"
"abilalova@binagadioil.com","Asya Bilalova","SMTP","Contact"
"AShukurov@noc.az","Atamaly Shukurov","SMTP","Contact"
"Ateshin.Ahmedova@binagadioil.com","Ateshin Ahmedova","SMTP","Contact"
"Ayaz.Hajiyev@SHIRVANOIL.COM","Ayaz Hajiyev","SMTP","Contact"
"Ababayeva@karasuopco.com","Aybeniz Babayeva","SMTP","Contact"
"Aybeniz.Orudjeva@karasuopco.com","Aybeniz Orudjeva","SMTP","Contact"
"aosmanova@binagadioil.com","Aybeniz Osmanova","SMTP","Contact"
"Aynur.Alikhanova@SHIRVANOIL.COM","Aynur Alikhanova","SMTP","Contact"
"Aynura.Rahimova@binagadioil.com","Aynura Rahimova","SMTP","Contact"
"AAllakhverdiyeva@AOC.az","Ayten Allakhverdiyeva","SMTP","Mailbox"
"AFarmanov@karasuopco.com","Azad Farmanov","SMTP","Contact"
"ANadjafov@AOC.az","Azad Nadjafov","SMTP","Mailbox"
"aismayilov@binagadioil.com","Azer Ismayilov","SMTP","Contact"
"akhalilov@binagadioil.com","Azer Khalilov","SMTP","Contact"
"Azer.Shirinov@SHIRVANOIL.COM","Azer Shirinov","SMTP","Contact"
"ayusifov@binagadioil.com","Azer Yusifov","SMTP","Contact"
"Azer.Zeynalov@karasuopco.com","Azer Zeynalov","SMTP","Contact"
"AzerinAliyeva@aoc.az","Azerin Aliyeva","SMTP","Contact"
"AYagubov@AOC.az","Aziz Yagubov","SMTP","Mailbox"
"bismayilov@karasuopco.com","Babek Ismayilov","SMTP","Contact"
"BHuseynova@binagadioil.com","Bahar Huseynova","SMTP","Contact"
"Bahman.Abdullayev@SHIRVANOIL.COM","Bahman Abdullayev","SMTP","Contact"
"Bahruz.Anverli@SHIRVANOIL.COM","Bahruz Anverli","SMTP","Contact"
"Banovsha.Gorchiyeva@noc.az","Banovsha Gorchiyeva","SMTP","Contact"
"Baqiyat.Nadjafova@binagadioil.com","Baqiyat Nadjafova","SMTP","Contact"
"Basti.Hadjiyeva@karasuopco.com","Basti Hadjiyeva","SMTP","Contact"
"Baxtiyar.Alekperov@SHIRVANOIL.COM","Baxtiyar Alekperov","SMTP","Contact"
"BTatliyev@AOC.az","Bayram Tatliyev Gpcgroup","SMTP","Mailbox"
"BBekirov@binagadioil.com","Bekir Bekirov","SMTP","Contact"
"Bella.Minayetova@SHIRVANOIL.COM","Bella Minayetova","SMTP","Contact"
"Beyrek.Abuzerli@noc.az","Beyrek Abuzerli","SMTP","Contact"
"DHasanova@binagadioil.com","Bibixanum Hasanova","SMTP","Contact"
"BOCIT@binagadioil.com","BOCIT","SMTP","Contact"
"Bogdan.Kit@shirvanoil.com","Bogdan Kit","SMTP","Contact"
"Boyukaga.Mamedov@noc.az","Boyukaga Mamedov","SMTP","Contact"
"CCahangirov@karasuopco.com","Casarat Cahangirov","SMTP","Contact"
"cdng@AOC.az","CDNG","SMTP","Mailbox"
"CDSuser@binagadioil.com","CDSuser","SMTP","Contact"
"cets@karasuopco.com","CETS","SMTP","Contact"
"CETSShiftSV@karasuopco.com","CETS Shift Supervisor","SMTP","Contact"
"chiefman@socar.az","Chiefman Socar","SMTP","Contact"
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/20220509051255_default_94.20.81.41_ad.exchange.mail_202650.txt
EmailAddress,Name,RoutingType,MailboxType
"3300upgradeteam@qsz.az","3300upgradeteam","SMTP","PublicDL"
"Abit.Abbasov@qsz.az","Abit H. Abbasov","SMTP","Mailbox"
"Administrator@qsz.az","Administrator","SMTP","Mailbox"
"Afqan.Mehdixanov@qsz.az","Afqan E. Mehdixanov","SMTP","Mailbox"
"Afqan.Allahverdiyev@qsz.az","Afqan R. Allahverdiyev","SMTP","Mailbox"
"Akif.Mammadov@qsz.az","Akif G. Mammadov","SMTP","Mailbox"
"Akkord.Beton@qsz.az","Akkord Beton","SMTP","Mailbox"
"Ali.Ahmedov@qsz.az","Ali A. Ahmedov","SMTP","Mailbox"
"Altay.Rustamov@qsz.az","Altay F. Rustamov","SMTP","Mailbox"
"Amil.Mammadov@qsz.az","Amil N. Mammadov","SMTP","Mailbox"
"Amrah.Allahverdiyev@qsz.az","Amrah G. Allahverdiyev","SMTP","Mailbox"
"Anar.Kerimov@qsz.az","Anar E. Kerimov","SMTP","Mailbox"
"Araz.Calilov@qsz.az","Araz E. Calilov","SMTP","Mailbox"
"Araz.Yusifli@qsz.az","Araz M. Yusifli","SMTP","Mailbox"
"armagankocatepe@armgrupyapi.com","Armagan Kocatepe","SMTP","Contact"
"Ayaz.Babayev@qsz.az","Ayaz C. Babayev","SMTP","Mailbox"
"Ayaz.Huseynov@qsz.az","Ayaz Huseynov","SMTP","Mailbox"
"Aygun.Shafiyeva@qsz.az","Aygun H. Shafiyeva","SMTP","Mailbox"
"Aynur.Allahverdiyeva@qsz.az","Aynur P. Allahverdiyeva","SMTP","Mailbox"
"Aynur.Qurbanova@qsz.az","Aynur Qurbanova","SMTP","Mailbox"
"Aytac.Ahmedova@qsz.az","Aytac I. Ahmedova","SMTP","Mailbox"
"Aytekin.Velizade@qsz.az","Aytekin Y. Velizade","SMTP","Mailbox"
"Azer.Mehdiyev@qsz.az","Azer A. Mehdiyev","SMTP","Mailbox"
"Balagadesh.Safarov@qsz.az","Balagadesh Safarov","SMTP","Mailbox"
"Balash.Heydarov@qsz.az","Balash Y. Heydarov","SMTP","Mailbox"
"Behruz.Qasimov@qsz.az","Behruz Qasimov","SMTP","Mailbox"
"Bunyad.Goyushov@qsz.az","Bunyad Sh. Goyushov","SMTP","Mailbox"
"Burhan.Memmedov@qsz.az","Burhan Memmedov","SMTP","Mailbox"
"Cahandar.Orucov@qsz.az","Cahandar Orucov","SMTP","Mailbox"
"Cavad.Talibov@qsz.az","Cavad Talibov","SMTP","Mailbox"
"Cavid.Nasibov@qsz.az","Cavid Nasibov","SMTP","Mailbox"
"CCR.Takip@qsz.az","CCR Takip","SMTP","Mailbox"
"Cengiz.Celik@qsz.az","Cengiz Celik","SMTP","Mailbox"
"cengiz.celik@arkoz.com.tr","Cengiz Celik","SMTP","Contact"
"Ceyhun.Ismayilov@qsz.az","Ceyhun Ismayilov","SMTP","Mailbox"
"Chingiz.Ayvazov@qsz.az","Chingiz N. Ayvazov","SMTP","Mailbox"
"citypoint_meeting@qsz.az","CityPoint Meeting Room","SMTP","Mailbox"
"Coshqun.Cafarov@qsz.az","Coshqun Cafarov","SMTP","Mailbox"
"Dilqam.Ahmedov@qsz.az","Dilqam Z. Ahmedov","SMTP","Mailbox"
"dlqszadmindep@qsz.az","DL QSZ Administrativ Department","SMTP","PublicDL"
"dl_qsz_baku_office@qsz.az","DL QSZ Baku Office","SMTP","PublicDL"
"dlqszbeton@qsz.az","DL QSZ Beton","SMTP","PublicDL"
"dlqszbetonsifarishi@qsz.az","DL QSZ Beton Sifarishi","SMTP","PublicDL"
"dlqszcement@qsz.az","DL QSZ Cement","SMTP","PublicDL"
"dlqszistehsalat@qsz.az","DL QSZ Istehsalat","SMTP","PublicDL"
"dlqszitdep@qsz.az","DL QSZ IT Department","SMTP","PublicDL"
"dl_qsz_maliyye@qsz.az","DL QSZ Maliyye","SMTP","PublicDL"
"dl_qsz_rehberler@qsz.az","DL QSZ Rehber Heyeti","SMTP","PublicDL"
"dlqszeveryone@qsz.az","DL_QSZ_Everyone","SMTP","PublicDL"
"durush@qsz.az","Durush","SMTP","PublicDL"
"Edalet.Memmedov@qsz.az","Edalet Memmedov","SMTP","Mailbox"
"eflow@qsz.az","eflow","SMTP","Mailbox"
"Elchin.Ahmedov@qsz.az","Elchin Ahmedov","SMTP","Mailbox"
"Elchin.Guliyev@qsz.az","Elchin H. Guliyev","SMTP","Mailbox"
"Elcin.Memmedov@qsz.az","Elcin Memmedov","SMTP","Mailbox"
"Elcin.Qasimov@qsz.az","Elcin Qasimov","SMTP","Mailbox"
"Elfaq.Amiraslanov@qsz.az","Elfaq Amiraslanov","SMTP","Mailbox"
"Elman.Musayev@qsz.az","Elman A. Musayev","SMTP","Mailbox"
"Elmar.Amiraslanov@qsz.az","Elmar Amiraslanov","SMTP","Mailbox"
"Elmeddin.Mardaliyev@qsz.az","Elmeddin M. Mardaliyev","SMTP","Mailbox"
"Elnur.Orucov@qsz.az","Elnur Orucov","SMTP","Mailbox"
"Elvin.Amiraslanov@qsz.az","Elvin Amiraslanov","SMTP","Mailbox"
"Elvin.Mamedzade@qsz.az","Elvin O. Mamedzade","SMTP","Mailbox"
"Emil.Musayev@qsz.az","Emil Musayev","SMTP","Mailbox"
"Emin.Veliyev@qsz.az","Emin E. Veliyev","SMTP","Mailbox"
"Emin.Qurbanov@qsz.az","Emin V. Qurbanov","SMTP","Mailbox"
"Faiq.Ahmedov@qsz.az","Faiq Ahmedov","SMTP","Mailbox"
"Farid.Adilov@qsz.az","Farid A. Adilov","SMTP","Mailbox"
"Farid.Abdullazade@qsz.az","Farid Abdullazade","SMTP","Mailbox"
"Feqani.Qabulov@qsz.az","Feqani A. Qabulov","SMTP","Mailbox"
"Ferit.Nuriyev@qsz.az","Ferit Nuriyev","SMTP","Mailbox"
"Fidan.Musayeva@qsz.az","Fidan Ch. Musayeva","SMTP","Mailbox"
"Flora.Ismayilova@qsz.az","Flora Ismayilova","SMTP","Mailbox"
"Giorgi.Jangveladze@qsz.az","Giorgi Jangveladze","SMTP","Mailbox"
"giorgi.jangveladze@germancement.ge","Giorgi Jangveladze","SMTP","Contact"
"Gulgez.Kerimli@qsz.az","Gulgez S. Kerimli","SMTP","Mailbox"
"Gulnar.Mammadova@qsz.az","Gulnar T. Mammadova","SMTP","Mailbox"
"Gultekin.Velizade@qsz.az","Gultekin Y. Velizade","SMTP","Mailbox"
"Hagigat.Guliyeva@qsz.az","Hagigat Guliyeva","SMTP","Mailbox"
"Hamid.Huseynov@qsz.az","Hamid Huseynov","SMTP","Mailbox"
"Hamza.Xocayev@qsz.az","Hamza M. Xocayev","SMTP","Mailbox"
"Hans.Cordes@qsz.az","Hans Cordes","SMTP","Mailbox"
"HealthMailboxDGFV224@qsz.az","HealthMailboxDGFV224","SMTP","Mailbox"
"HealthMailboxZZLT76@qsz.az","HealthMailboxZZLT76","SMTP","Mailbox"
"HelpDesk@qsz.az","Help Desk","SMTP","Mailbox"
"Heyran.Orucova@qsz.az","Heyran Orucova","SMTP","Mailbox"
"Hidayat.Mammadov@qsz.az","Hidayat Y. Mammadov","SMTP","Mailbox"
"Hikmet.Aliyev@qsz.az","Hikmet A. Aliyev","SMTP","Mailbox"
"Hikmet.Esgerov@qsz.az","Hikmet Esgerov","SMTP","Mailbox"
"Hikmet.Shabanov@qsz.az","Hikmet M. Shabanov","SMTP","Mailbox"
"Huseyin.Mehdiyev@qsz.az","Huseyin Mehdiyev","SMTP","Mailbox"
"Husniyye.Kazimova@qsz.az","Husniyye Kazimova","SMTP","Mailbox"
"Ibrahim.Allahverenli@qsz.az","Ibrahim Allahverenli","SMTP","Mailbox"
"Ilham.Aliyev@qsz.az","Ilham Aliyev","SMTP","Mailbox"
"Ilham.Mehtiyev@qsz.az","Ilham R. Mehtiyev","SMTP","Mailbox"
"Ilham.Sultanov@qsz.az","Ilham S. Sultanov","SMTP","Mailbox"
"Ilqar.Ibrahimov@qsz.az","Ilqar B. Ibrahimov","SMTP","Mailbox"
"info@qsz.az","info","SMTP","Mailbox"
"Insan.Resurslari@qsz.az","Insan Resurslari","SMTP","Mailbox"
"Intigam.Mehtiyev@qsz.az","Intigam S. Mehtiyev","SMTP","Mailbox"
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/20220509051411_default_85.132.39.131_ad.exchange.mail_124921.txt
EmailAddress,Name,RoutingType,MailboxType
"Gunay.rasulova@max-print.biz","Accountant","SMTP","Mailbox"
"accounting@max-print.biz","accounting","SMTP","PublicDL"
"aida.huseynzade@max-print.biz","Aida Huseynzade","SMTP","Mailbox"
"a.nasirov@max-print.biz","Alekper Nasirov","SMTP","Mailbox"
"amis@max-print.biz","Amis","SMTP","Mailbox"
"promodesign@max-print.biz","Anton Osver","SMTP","Mailbox"
"arif@max-print.biz","Arif Sultanov","SMTP","Mailbox"
"arzuprint@max-print.biz","Arzu Mirzayeva","SMTP","Mailbox"
"a.ibrahimli@max-print.biz","Asad Ibrahimli","SMTP","Mailbox"
"a.hasanzade@max-print.biz","Asya Hasanzade","SMTP","Mailbox"
"aydan@max-print.biz","Aydan Shukurova","SMTP","Mailbox"
"aygul@max-print.biz","Aygul Mirzayeva","SMTP","Mailbox"
"a.guseynli@max-print.biz","Aynur Guseynli","SMTP","Mailbox"
"aysel.kerimova@max-print.biz","Aysel Kerimova","SMTP","Mailbox"
"bp.online@max-print.biz","bp.online","SMTP","PublicDL"
"chinara@max-print.biz","Chinara Majidova","SMTP","Mailbox"
"corpo@max-print.biz","corpo","SMTP","PublicDL"
"dinara@max-print.biz","Dinara Sadikhbayova","SMTP","Mailbox"
"exch.migrator@max-print.biz","exch.migrator","SMTP","Mailbox"
"f.seyfaliyev@max-print.biz","Faiq Seyfaliyev","SMTP","Mailbox"
"procreklam@max-print.biz","Farhad","SMTP","Mailbox"
"adaccounting@max-print.biz","Farid Shukurov","SMTP","Mailbox"
"feedback@max-print.biz","feedback","SMTP","PublicDL"
"fidan@max-print.biz","Fidan Huseynli","SMTP","Mailbox"
"finance@max-print.biz","finance","SMTP","PublicDL"
"Firuz.salamzadeh@max-print.biz","Firuz Salamzadeh","SMTP","Mailbox"
"frontoffice@max-print.biz","frontoffice","SMTP","PublicDL"
"f.murshudov@max-print.biz","Fuad Murshudov","SMTP","Mailbox"
"g.nasirova@max-print.biz","Gulbeniz Nasirova","SMTP","Mailbox"
"gunay.huseynova@max-print.biz","Gunay Huseynova","SMTP","Mailbox"
"gunay.ibrahimova@max-print.biz","Gunay Ibrahimova","SMTP","Mailbox"
"promosales2@max-print.biz","Gunel Qarayeva","SMTP","Mailbox"
"hr@max-print.biz","hr","SMTP","PublicDL"
"i.shiraliyeva@max-print.biz","Ilaha","SMTP","Mailbox"
"i.ismailov@max-print.biz","Ilham Ismailov","SMTP","Mailbox"
"i.orujov@max-print.biz","Imran","SMTP","Mailbox"
"irana@max-print.biz","Irana Mamedova","SMTP","Mailbox"
"j.shahbazov@max-print.biz","Jabrayil Shahbazov","SMTP","Mailbox"
"j.ahmadov@max-print.biz","Jahandar Ahmadov","SMTP","Mailbox"
"promologistics2@max-print.biz","Kamran Abdullayev","SMTP","Mailbox"
"lala@max-print.biz","Lala Gasimova","SMTP","Mailbox"
"mailflow@max-print.biz","mailflow","SMTP","Mailbox"
"malik@max-print.biz","Malik Rashidov","SMTP","Mailbox"
"m.gurshumov@max-print.biz","Maxim Gurshumov","SMTP","Mailbox"
"printonline@max-print.biz","MaxPrint Printonline","SMTP","Mailbox"
"staff@max-print.biz","MaxPrint staff","SMTP","PublicDL"
"orucova.m@max-print.biz","Minaya Orucova","SMTP","Mailbox"
"promo@max-print.biz","Muhammed","SMTP","Mailbox"
"murad.aliyev@max-print.biz","Murad Aliyev","SMTP","Mailbox"
"nadir.farajov@max-print.biz","Nadir Farajov","SMTP","Mailbox"
"Nazilya@max-print.biz","Nazilya","SMTP","Mailbox"
"n.mammadli@max-print.biz","Nigar Mammadli","SMTP","Mailbox"
"n.miralay@max-print.biz","Nigar Miralay","SMTP","Mailbox"
"office@max-print.biz","office","SMTP","PublicDL"
"o.ignatova@max-print.biz","Oksana Ignatova","SMTP","Mailbox"
"o.mikhailova@max-print.biz","Olga Mikhailova","SMTP","Mailbox"
"olya@max-print.biz","Olya","SMTP","Mailbox"
"o.ahmadov@max-print.biz","Omar Ahmadov","SMTP","Mailbox"
"online@max-print.biz","Online","SMTP","Mailbox"
"onlinegroup@max-print.biz","onlinegroup","SMTP","PublicDL"
"onlinepay@max-print.biz","onlinepay","SMTP","PublicDL"
"orders.online@max-print.biz","orders.online","SMTP","PublicDL"
"sklad@max-print.biz","Orkhan Shukurov","SMTP","Mailbox"
"p.sadiqov@max-print.biz","Parviz Sadiqov","SMTP","Mailbox"
"p.hasanzade@max-print.biz","Pervin Hasanzade","SMTP","Mailbox"
"arrangement@max-print.biz","Rafael Guliyev","SMTP","Mailbox"
"design@max-print.biz","Ragim Alekberov","SMTP","Mailbox"
"r.vekilov@max-print.biz","Rauf","SMTP","Mailbox"
"reklam@max-print.biz","Reklam","SMTP","Mailbox"
"r.riad@max-print.biz","Riad Rzali","SMTP","Mailbox"
"r.basovich@max-print.biz","Roman Basovich","SMTP","Mailbox"
"r.nasibli@max-print.biz","Rovshan Nasibli","SMTP","Mailbox"
"r.gurbanov@max-print.biz","Rufat Gurbanov","SMTP","Mailbox"
"r.hasanov@max-print.biz","Ruslan Hasanov","SMTP","Mailbox"
"supply@max-print.biz","Rustam","SMTP","Mailbox"
"sabina.mahammadova@max-print.biz","Sabina","SMTP","Mailbox"
"s.antonov@max-print.biz","Sergey Antonov","SMTP","Mailbox"
"s.xudiyeva@max-print.biz","Sevda Xudiyeva","SMTP","Mailbox"
"s.rustamov@max-print.biz","Seymur Rustamov","SMTP","Mailbox"
"promologistics@max-print.biz","Tamerlan Ibragimov","SMTP","Mailbox"
"test.user@max-print.biz","test.user","SMTP","Mailbox"
"textile@max-print.biz","Tofig Guliyev","SMTP","Mailbox"
"t.ajdarli@max-print.biz","Togrul Ajdarli","SMTP","Mailbox"
"procreklam2@max-print.biz","Tural Ajdarli","SMTP","Mailbox"
"t.veliyev@max-print.biz","Tural Veliyev","SMTP","Mailbox"
"promosales3@max-print.biz","Ugur Fuzulizade","SMTP","Mailbox"
"u.meherremova@max-print.biz","Ulker Meherremova","SMTP","Mailbox"
"u.ibrahimova@max-print.biz","Ulviya Ibrahimova","SMTP","Mailbox"
"v.cafarova@max-print.biz","Vafa Jafarova","SMTP","Mailbox"
"v.xasiyev@max-print.biz","Vidadi Xasiyev","SMTP","Mailbox"
"vugar.mammadov@max-print.biz","Vugar Mammadov","SMTP","Mailbox"
"promoperations@max-print.biz","Yevgeniya Orkodashvili","SMTP","Mailbox"
"z.abbasov@max-print.biz","Zaur Abbasov","SMTP","Mailbox"
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/20220509051745_default_89.147.205.100_ad.exchange.mail_249467.txt
EmailAddress,Name,RoutingType,MailboxType
"ABAssignments@karasuopco.com","AB Assignments","SMTP","PublicDL"
"ABWellService@karasuopco.com","AB Well Service","SMTP","PublicDL"
"Arzayev@AOC.az","Abbas Rzayev","SMTP","Contact"
"FINANCE@karasuopco.com","Access to Finance Folder","SMTP","PublicDL"
"Adil.Abbasov@SHIRVANOIL.COM","Adil Abbasov","SMTP","Contact"
"Adil.Ahmedov@SHIRVANOIL.COM","Adil Ahmedov","SMTP","Contact"
"ABunyatov@karasuopco.com","Adil Bunyatov","SMTP","Mailbox"
"Administration@karasuopco.com","Administration","SMTP","PublicDL"
"Administrator@karasuopco.com","Administrator","SMTP","Mailbox"
"AfetHajiyeva@karasuopco.com","Afet Hajiyeva","SMTP","Mailbox"
"arahimov@binagadioil.com","Agaselim Rahimov","SMTP","Contact"
"AAgayev@binagadioil.com","Agayar Agayev","SMTP","Contact"
"aguliyeva@binagadioil.com","Aida Guliyeva","SMTP","Contact"
"AIM@SHIRVANOIL.COM","AIM","SMTP","Contact"
"akbarmammadov@binagadioil.com","Akbar Mammadov","SMTP","Contact"
"AZeynalov@karasuopco.com","Akhmed Zeynalov","SMTP","Mailbox"
"AMazanov@karasuopco.com","Akif Mazanov","SMTP","Mailbox"
"Ashipilov@aoc.az","Aleksandr Shipilov","SMTP","Contact"
"Aleksandr.Soklakov@SHIRVANOIL.COM","Aleksandr Soklakov","SMTP","Contact"
"APlotnikov@AOC.az","Aleksey Plotnikov","SMTP","Contact"
"areshetnikov@AOC.az","Aleksey Reshetnikov","SMTP","Contact"
"anasirov@binagadioil.com","Alesker Nasirov","SMTP","Contact"
"aabdullayev@binagadioil.com","Alik Abdullayev","SMTP","Contact"
"Alikhan.MIriyev@binagadioil.com","Alikhan Miriyev","SMTP","Contact"
"alisatdar.veliyev@shirvanoil.com","Alisatdar Veliyev","SMTP","Contact"
"ALLKAOCABUsers@karasuopco.com","ALL ALI-BAYRAMLI OFFCIE USERS","SMTP","PublicDL"
"ALLKAOCBakuUsers@karasuopco.com","ALL BAKU OFFICE USERS","SMTP","PublicDL"
"ALLKAOCUsers@karasuopco.com","ALL KARASU USERS","SMTP","PublicDL"
"Amil.Qurbanov@noc.az","Amil Qurbanov","SMTP","Contact"
"Anar.Asadov@SHIRVANOIL.COM","Anar Asadov","SMTP","Contact"
"abadalov@AOC.az","Anar Badalov","SMTP","Contact"
"ADashdamirov@AOC.az","Anar Dashdamirov","SMTP","Contact"
"Anar.Gurbanov@karasuopco.com","Anar Gurbanov","SMTP","Mailbox"
"Anar.Hasanov@karasuopco.com","Anar Hasanov","SMTP","Mailbox"
"AHeydarov@AOC.az","Anar Heydarov","SMTP","Contact"
"Anar.Musayev@binagadioil.com","Anar Musayev","SMTP","Contact"
"AShushaly@karasuopco.com","Anar Shushaly","SMTP","Mailbox"
"anar.yusifov@binagadioil.com","Anar Yusifov","SMTP","Contact"
"Anastasiya.Bolshakova@shirvanoil.com","Anastasiya Bolshakova","SMTP","Contact"
"AKonopelkin@AOC.az","Andrey Konopelkin","SMTP","Contact"
"Andrey.Kozlov@SHIRVANOIL.COM","Andrey Kozlov","SMTP","Contact"
"alichuk@gea.az","Andrey Lichuk","SMTP","Contact"
"AZaluchenov@karasuopco.com","Andrey Zaluchenov","SMTP","Mailbox"
"Antiga.Jafarova@SHIRVANOIL.COM","Antiga Jafarova","SMTP","Contact"
"AOCKuratori@AOC.az","AOC Kuratori","SMTP","Contact"
"Araz.Azizov@karasuopco.com","Araz Azizov","SMTP","Mailbox"
"AAkhundlu@AOC.az","Arif Akhundlu","SMTP","Contact"
"amammadov@binagadioil.com","Arif Mammadov","SMTP","Contact"
"arif.zeynalov@noc.az","Arif Zeynalov","SMTP","Contact"
"ArtificialLift@karasuopco.com","Artificial Lift","SMTP","PublicDL"
"Aruze.Esedova@noc.az","Aruze Esedova","SMTP","Contact"
"ABadalova@AOC.az","Arzu Badalova","SMTP","Contact"
"Arzu.Gezalova@karasuopco.com","Arzu Gezalova","SMTP","Mailbox"
"AIsmailova@karasuopco.com","Arzu Ismailova","SMTP","Mailbox"
"Arzu.Omarov@karasuopco.com","Arzu Omarov","SMTP","Mailbox"
"ASamedov@AOC.az","Asadulla Samedov","SMTP","Contact"
"Akerimov@AOC.az","Asker Kerimov","SMTP","Contact"
"AMukhametzyanov@karasuopco.com","Askhat Mukhametzyanov","SMTP","Mailbox"
"AMukhametzyanov@noc.az","Askhat Mukhametzyanov","SMTP","Contact"
"ABaxishli@karasuopco.com","Asli Baxishli","SMTP","Mailbox"
"abilalova@binagadioil.com","Asya Bilalova","SMTP","Contact"
"AShukurov@noc.az","Atamaly Shukurov","SMTP","Contact"
"Ateshin.Ahmedova@binagadioil.com","Ateshin Ahmedova","SMTP","Contact"
"Ayaz.Hajiyev@SHIRVANOIL.COM","Ayaz Hajiyev","SMTP","Contact"
"Ababayeva@karasuopco.com","Aybeniz Babayeva","SMTP","Mailbox"
"Aybeniz.Orudjeva@karasuopco.com","Aybeniz Orudjeva","SMTP","Mailbox"
"aosmanova@binagadioil.com","Aybeniz Osmanova","SMTP","Contact"
"Aynur.Alikhanova@SHIRVANOIL.COM","Aynur Alikhanova","SMTP","Contact"
"Aynura.Rahimova@binagadioil.com","Aynura Rahimova","SMTP","Contact"
"aysel.hasanova@binagadioil.com","Aysel Hasanova","SMTP","Contact"
"AAllakhverdiyeva@AOC.az","Ayten Allakhverdiyeva","SMTP","Contact"
"AFarmanov@karasuopco.com","Azad Farmanov","SMTP","Mailbox"
"aismayilov@binagadioil.com","Azer Ismayilov","SMTP","Contact"
"akhalilov@binagadioil.com","Azer Khalilov","SMTP","Contact"
"Azer.Shirinov@SHIRVANOIL.COM","Azer Shirinov","SMTP","Contact"
"ayusifov@binagadioil.com","Azer Yusifov","SMTP","Contact"
"Azer.Zeynalov@karasuopco.com","Azer Zeynalov","SMTP","Mailbox"
"AzerinAliyeva@gea.az","Azerin Aliyeva","SMTP","Contact"
"AYagubov@AOC.az","Aziz Yagubov","SMTP","Contact"
"BIsmayilov@karasuopco.com","Babek Ismayilov","SMTP","Mailbox"
"BHuseynova@binagadioil.com","Bahar Huseynova","SMTP","Contact"
"Bahman.Abdullayev@SHIRVANOIL.COM","Bahman Abdullayev","SMTP","Contact"
"BAkperov@karasuopco.com","Bahram Akperov","SMTP","Mailbox"
"Bahruz.Anverli@SHIRVANOIL.COM","Bahruz Anverli","SMTP","Contact"
"Banovsha.Gorchiyeva@noc.az","Banovsha Gorchiyeva","SMTP","Contact"
"Baqiyat.Nadjafova@binagadioil.com","Baqiyat Nadjafova","SMTP","Contact"
"BHadjiyeva@karasuopco.com","Basti Hadjiyeva","SMTP","Mailbox"
"Baxtiyar.Alekperov@SHIRVANOIL.COM","Baxtiyar Alekperov","SMTP","Contact"
"btatliyev@aoc.az","Bayram Tatliyev","SMTP","Contact"
"BBekirov@binagadioil.com","Bekir Bekirov","SMTP","Contact"
"Bella.Minayetova@SHIRVANOIL.COM","Bella Minayetova","SMTP","Contact"
"Beyrek.Abuzerli@noc.az","Beyrek Abuzerli","SMTP","Contact"
"DHasanova@binagadioil.com","Bibixanum Hasanova","SMTP","Contact"
"BOCConference@karasuopco.com","BOCConference","SMTP","Mailbox"
"BOCIT@binagadioil.com","BOCIT","SMTP","Contact"
"Boyukaga.Mamedov@noc.az","Boyukaga Mamedov","SMTP","Contact"
"CCahangirov@karasuopco.com","Casarat Cahangirov","SMTP","Mailbox"
"cdng@AOC.az","CDNG","SMTP","Contact"
"CDSuser@binagadioil.com","CDSuser","SMTP","Contact"
"cets@karasuopco.com","CETS","SMTP","Mailbox"
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/20220509052441_default_89.147.205.106_ad.exchange.mail_134901.txt
EmailAddress,Name,RoutingType,MailboxType
"ABWellService@karasuopco.com","AB Well Service","SMTP","Contact"
"Arzayev@AOC.az","Abbas Rzayev","SMTP","Contact"
"Adil.Abbasov@SHIRVANOIL.COM","Adil Abbasov","SMTP","Contact"
"Adil.Ahmedov@SHIRVANOIL.COM","Adil Ahmedov","SMTP","Contact"
"ABunyatov@karasuopco.com","Adil Bunyatov","SMTP","Contact"
"Afet.Hajiyeva@karasuopco.com","Afet Hajiyeva","SMTP","Contact"
"arahimov@binagadioil.com","Agaselim Rahimov","SMTP","Contact"
"AAgayev@binagadioil.com","Agayar Agayev","SMTP","Contact"
"AMelikov@karasuopco.com","Agil Melikov","SMTP","Contact"
"aguliyeva@binagadioil.com","Aida Guliyeva","SMTP","Contact"
"AIM@SHIRVANOIL.COM","AIM","SMTP","Contact"
"akbarmammadov@binagadioil.com","Akbar Mammadov","SMTP","Contact"
"AZeynalov@karasuopco.com","Akhmed Zeynalov","SMTP","Contact"
"Ashipilov@aoc.az","Aleksandr Shipilov","SMTP","Contact"
"Aleksandr.Soklakov@SHIRVANOIL.COM","Aleksandr Soklakov","SMTP","Contact"
"APlotnikov@AOC.az","Aleksey Plotnikov","SMTP","Contact"
"areshetnikov@AOC.az","Aleksey Reshetnikov","SMTP","Contact"
"anasirov@binagadioil.com","Alesker Nasirov","SMTP","Contact"
"aabdullayev@binagadioil.com","Alik Abdullayev","SMTP","Contact"
"Alikhan.MIriyev@binagadioil.com","Alikhan Miriyev","SMTP","Contact"
"AVeliyev@karasuopco.com","Alisatdar Veliyev","SMTP","Contact"
"AllGEAMUsers@gea.az","All GEAM Users","SMTP","PublicDL"
"Amil.Qurbanov@noc.az","Amil Qurbanov","SMTP","Contact"
"Anar.Asadov@SHIRVANOIL.COM","Anar Asadov","SMTP","Contact"
"abadalov@AOC.az","Anar Badalov","SMTP","Contact"
"ADashdamirov@AOC.az","Anar Dashdamirov","SMTP","Contact"
"Anar.Gurbanov@karasuopco.com","Anar Gurbanov","SMTP","Contact"
"Anar.Hasanov@karasuopco.com","Anar Hasanov","SMTP","Contact"
"AHeydarov@AOC.az","Anar Heydarov","SMTP","Contact"
"Anar.Musayev@binagadioil.com","Anar Musayev","SMTP","Contact"
"AShushaly@karasuopco.com","Anar Shushaly","SMTP","Contact"
"anar.yusifov@binagadioil.com","Anar Yusifov","SMTP","Contact"
"Anastasiya.Bolshakova@shirvanoil.com","Anastasiya Bolshakova","SMTP","Contact"
"AKonopelkin@AOC.az","Andrey Konopelkin","SMTP","Contact"
"Andrey.Kozlov@SHIRVANOIL.COM","Andrey Kozlov","SMTP","Contact"
"Antiga.Jafarova@SHIRVANOIL.COM","Antiga Jafarova","SMTP","Contact"
"AOCKuratori@AOC.az","AOC Kuratori","SMTP","Contact"
"Araz.Azizov@karasuopco.com","Araz Azizov","SMTP","Contact"
"AAkhundlu@AOC.az","Arif Akhundlu","SMTP","Contact"
"Arif.Alishov@karasuopco.com","Arif Alishov","SMTP","Contact"
"Arif.Heydarov@pashabank.az","Arif Heydarov","SMTP","Contact"
"amammadov@binagadioil.com","Arif Mammadov","SMTP","Contact"
"arif.zeynalov@noc.az","Arif Zeynalov","SMTP","Contact"
"ArtificialLift@karasuopco.com","Artificial Lift","SMTP","Contact"
"Aruze.Esedova@noc.az","Aruze Esedova","SMTP","Contact"
"ABadalova@AOC.az","Arzu Badalova","SMTP","Contact"
"Arzu.Gezalova@karasuopco.com","Arzu Gezalova","SMTP","Contact"
"AIsmailova@karasuopco.com","Arzu Ismailova","SMTP","Contact"
"Arzu.Omarov@karasuopco.com","Arzu Omarov","SMTP","Contact"
"ASamedov@AOC.az","Asadulla Samedov","SMTP","Contact"
"AMirzoyev@karasuopco.com","Asif Mirzoyev","SMTP","Contact"
"Akerimov@AOC.az","Asker Kerimov","SMTP","Contact"
"AMukhametzyanov@noc.az","Askhat Mukhametzyanov","SMTP","Contact"
"ABaxishli@karasuopco.com","Asli Baxishli","SMTP","Contact"
"abilalova@binagadioil.com","Asya Bilalova","SMTP","Contact"
"AShukurov@noc.az","Atamaly Shukurov","SMTP","Contact"
"Ateshin.Ahmedova@binagadioil.com","Ateshin Ahmedova","SMTP","Contact"
"Ayaz.Hajiyev@SHIRVANOIL.COM","Ayaz Hajiyev","SMTP","Contact"
"Ababayeva@karasuopco.com","Aybeniz Babayeva","SMTP","Contact"
"Aybeniz.Orudjeva@karasuopco.com","Aybeniz Orudjeva","SMTP","Contact"
"aosmanova@binagadioil.com","Aybeniz Osmanova","SMTP","Contact"
"Aynur.Alikhanova@SHIRVANOIL.COM","Aynur Alikhanova","SMTP","Contact"
"Aynura.Rahimova@binagadioil.com","Aynura Rahimova","SMTP","Contact"
"aysel.hasanova@binagadioil.com","Aysel Hasanova","SMTP","Contact"
"AAllakhverdiyeva@AOC.az","Ayten Allakhverdiyeva","SMTP","Contact"
"aqedirova@gpcgroup.co","Ayten Qedirova","SMTP","Contact"
"AFarmanov@karasuopco.com","Azad Farmanov","SMTP","Contact"
"aismayilov@binagadioil.com","Azer Ismayilov","SMTP","Contact"
"akhalilov@binagadioil.com","Azer Khalilov","SMTP","Contact"
"Azer.Shirinov@SHIRVANOIL.COM","Azer Shirinov","SMTP","Contact"
"ayusifov@binagadioil.com","Azer Yusifov","SMTP","Contact"
"Azer.Zeynalov@karasuopco.com","Azer Zeynalov","SMTP","Contact"
"AzerinAliyeva@gea.az","Azerin Aliyeva","SMTP","Mailbox"
"AYagubov@AOC.az","Aziz Yagubov","SMTP","Contact"
"BHuseynova@binagadioil.com","Bahar Huseynova","SMTP","Contact"
"Bahman.Abdullayev@SHIRVANOIL.COM","Bahman Abdullayev","SMTP","Contact"
"Bahruz.Anverli@SHIRVANOIL.COM","Bahruz Anverli","SMTP","Contact"
"Banovsha.Gorchiyeva@noc.az","Banovsha Gorchiyeva","SMTP","Contact"
"Baqiyat.Nadjafova@binagadioil.com","Baqiyat Nadjafova","SMTP","Contact"
"Basti.Hadjiyeva@karasuopco.com","Basti Hadjiyeva","SMTP","Contact"
"Baxtiyar.Alekperov@SHIRVANOIL.COM","Baxtiyar Alekperov","SMTP","Contact"
"btatliyev@aoc.az","Bayram Tatliyev","SMTP","Contact"
"BBekirov@binagadioil.com","Bekir Bekirov","SMTP","Contact"
"Bella.Minayetova@SHIRVANOIL.COM","Bella Minayetova","SMTP","Contact"
"Beyrek.Abuzerli@noc.az","Beyrek Abuzerli","SMTP","Contact"
"DHasanova@binagadioil.com","Bibixanum Hasanova","SMTP","Contact"
"BOCIT@binagadioil.com","BOCIT","SMTP","Contact"
"Boyukaga.Mamedov@noc.az","Boyukaga Mamedov","SMTP","Contact"
"CCahangirov@karasuopco.com","Casarat Cahangirov","SMTP","Contact"
"cdng@AOC.az","CDNG","SMTP","Contact"
"CDSuser@binagadioil.com","CDSuser","SMTP","Contact"
"cets@karasuopco.com","CETS","SMTP","Contact"
"CETSShiftSV@karasuopco.com","CETS Shift Supervisor","SMTP","Contact"
"Chingiz.Gambarov@binagadioil.com","Chingiz.Gambarov","SMTP","Contact"
"DIbrahimov@AOC.az","Damir Ibrahimov","SMTP","Contact"
"dashqin.azimov@binagadioil.com","Dashqin Azimov","SMTP","Contact"
"Dayanat.Hasanov@karasuopco.com","Dayanat Hasanov","SMTP","Contact"
"DHuseynov@binagadioil.com","Daybala Huseynov","SMTP","Contact"
"digitalsender@AOC.az","Digital Sender","SMTP","Contact"
"Dilara.Aliyeva@binagadioil.com","Dilara Aliyeva","SMTP","Contact"
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/20220509052603_default_94.20.74.71_ad.exchange.mail_215089.txt
EmailAddress,Name,RoutingType,MailboxType
"aismayilov@bakucc.az","Asif Ismayilov","SMTP","Mailbox"
"anuriyev@bakucc.az","Aslan Nuriyev","SMTP","Mailbox"
"Equinox@bakucc.az","Avaya Equinox","SMTP","Mailbox"
"azeynalova@bakucc.az","Ayan Zeynalova","SMTP","Mailbox"
"aisayeva@bakucc.az","Aysel Isayeva","SMTP","Mailbox"
"B1ConferenceHall@bakucc.az","B1 Conference Hall","SMTP","Mailbox"
"office@bakucc.az","Baku Convention Center","SMTP","Mailbox"
"info@bakucc.az","Baku Convention Center","SMTP","Mailbox"
"event@bakucc.az","Baku Convention Center Event","SMTP","Mailbox"
"eventgroup@bakucc.az","BCC Event Department","SMTP","PublicDL"
"hrgroup@bakucc.az","BCC HR Department","SMTP","PublicDL"
"itevent@bakucc.az","BCC IT Event","SMTP","PublicDL"
"manager@bakucc.az","BCC Manager","SMTP","PublicDL"
"partnership@bakucc.az","Business Partnership","SMTP","Mailbox"
"Supervisorgroup@bakucc.az","CCB Admin and Maintenance Department","SMTP","PublicDL"
"bccgroup@bakucc.az","CCB All Group","SMTP","PublicDL"
"financegroup@bakucc.az","CCB Finance Department","SMTP","PublicDL"
"hssegroup@bakucc.az","CCB HSE Department","SMTP","PublicDL"
"itgroup@bakucc.az","CCB IT Department","SMTP","PublicDL"
"lawyergroup@bakucc.az","CCB Lawyer Department","SMTP","PublicDL"
"mepgroup@bakucc.az","CCB Mep Department","SMTP","PublicDL"
"prgroup@bakucc.az","CCB PR Department","SMTP","PublicDL"
"salesgroup@bakucc.az","CCB Sales Department","SMTP","PublicDL"
"egasimov@bakucc.az","Elchin Gasimov","SMTP","Mailbox"
"eabdullayev@bakucc.az","Elshad Abdullayev","SMTP","Mailbox"
"erustamov@bakucc.az","Emin Rustamov","SMTP","Mailbox"
"falibayli@bakucc.az","Fidan Alibayli","SMTP","Mailbox"
"fasdanli@bakucc.az","Fidan Asdanli","SMTP","Mailbox"
"fbalayeva@bakuta.az","Fidan Balayeva","SMTP","Mailbox"
"gismayilov@bakucc.az","Gunduz Ismayilov","SMTP","Mailbox"
"HR@bakucc.az","HR Department","SMTP","Mailbox"
"ieminov@bakucc.az","Iqrar Eminov","SMTP","Mailbox"
"ibabayev@bakucc.az","Ismayil Babayev","SMTP","Mailbox"
"itteam@bakucc.az","IT Share","SMTP","Mailbox"
"itsupport@bakucc.az","IT Support","SMTP","Mailbox"
"jsuleymanov@bakucc.az","Javid Suleymanov","SMTP","Mailbox"
"jmammadov@bakucc.az","Jeyhun Mammadov","SMTP","Mailbox"
"ladigozalova@bakucc.az","Lala Adigozalova","SMTP","Mailbox"
"lgurbanova@bakucc.az","Lala Gurbanova","SMTP","Mailbox"
"mhuseynov@bakucc.az","Majid Huseynov","SMTP","Mailbox"
"meetingroom@bakucc.az","Meeting Room","SMTP","Mailbox"
"mmammadova@bakucc.az","Mehin Mammadova","SMTP","Mailbox"
"mmusayeva@bakucc.az","Mehin Musayeva","SMTP","Mailbox"
"MAIL-SA@bakucc.az","Microsoft System Attendant","SMTP","Mailbox"
"magayev@bakucc.az","Mirish Agayev","SMTP","Mailbox"
"mnifteliyev@bakucc.az","Movlud Nifteliyev","SMTP","Mailbox"
"nbayramov@bakucc.az","Namaz Bayramov","SMTP","Mailbox"
"ndadashov@bakucc.az","Namiq Dadashov","SMTP","Mailbox"
"ngasimli@bakucc.az","Narmin Gasimli","SMTP","Mailbox"
"naliyev@bakucc.az","Nazim Aliyev","SMTP","Mailbox"
"nshamkhalova@bakucc.az","Nazrin Shamkhalova","SMTP","Mailbox"
"njalilova@bakucc.az","Nigar Jalilova","SMTP","Mailbox"
"office1@bakuta.az","Office","SMTP","Mailbox"
"otalibova@bakucc.az","Oksana Talibova","SMTP","Mailbox"
"oahmadli@bakucc.az","Orkhan Ahmadli","SMTP","Mailbox"
"postmaster@bakucc.az","Post Master","SMTP","Mailbox"
"pr@bakucc.az","PR Department","SMTP","Mailbox"
"qqadirov@bakucc.az","Qadir Qadirov","SMTP","Mailbox"
"RKazizade@bakucc.az","Ramin Kazizade","SMTP","Mailbox"
"rmammadov@bakucc.az","Ramin Mammadov","SMTP","Mailbox"
"rmirzeliyev@bakucc.az","Rauf Mirzeliyev","SMTP","Mailbox"
"rdadashov@bakucc.az","Riad Dadashov","SMTP","Mailbox"
"rabdullayev@bakucc.az","Rovshan Abdullayev","SMTP","Mailbox"
"ribrahimov@bakucc.az","Rovshen Ibrahimov","SMTP","Mailbox"
"RAhmadov@bakucc.az","Rustam Ahmadov","SMTP","Mailbox"
"saslanova@bakucc.az","Sadagat Aslanova","SMTP","Mailbox"
"sales@bakucc.az","Sales Department","SMTP","Mailbox"
"Projects@bakuta.az","Sales Department","SMTP","Mailbox"
"sabbasova@bakucc.az","Sevda Abbasova","SMTP","Mailbox"
"sevda.abbasova@bakugroup.az","Sevda Abbasova","SMTP","Contact"
"sisayev@bakucc.az","Shamil Isayev","SMTP","Mailbox"
"smisirzade@bakucc.az","Shamo Misirzade","SMTP","Mailbox"
"saliverdi@bakucc.az","Subhan Aliverdi","SMTP","Mailbox"
"ssuleymanov@bakucc.az","Suleyman Suleymanov","SMTP","Mailbox"
"thuseynov@bakucc.az","Taleh Huseynov","SMTP","Mailbox"
"tibrahimli@bakucc.az","Toghrul Ibrahimli","SMTP","Mailbox"
"trainingroom@bakucc.az","Training Room","SMTP","Mailbox"
"tabdullazada@bakucc.az","Tural Abdullazada","SMTP","Mailbox"
"vmammadli@bakucc.az","Vafa Mammadli","SMTP","Mailbox"
"vaghayev@bakucc.az","Vahid Aghayev","SMTP","Mailbox"
"zhuseynov@bakucc.az","Zaur Huseynov","SMTP","Mailbox"
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/20220509052840_default_85.132.79.220_ad.exchange.mail_098345.txt
EmailAddress,Name,RoutingType,MailboxType
"Adil.Ramazanov@giltex.az","Adil Ramazanov","SMTP","Mailbox"
"boya.anbar@giltex.az","Adil Salimov","SMTP","Mailbox"
"Adil.Shirinov@giltex.az","Adil Shirinov","SMTP","Mailbox"
"Admins@giltex.az","Admins","SMTP","PublicDL"
"agahuseyn.ahmadov@giltex.az","Agahuseyn Ahmadov","SMTP","Mailbox"
"Agil.Maharramov@giltex.az","Agil Maharramov","SMTP","Mailbox"
"Ahmadkhan.Hasanov@giltex.az","Ahmadkhan Hasanov","SMTP","Mailbox"
"Aida.Sadixova@giltex.az","Aida Sadixova","SMTP","Mailbox"
"Akhmad.Irgashev@giltex.az","Akhmad Irgashev","SMTP","Mailbox"
"Alekber.Bagirov@giltex.az","Alekber Bagirov","SMTP","Mailbox"
"Aleksey.Karsakov@giltex.az","Aleksey Karsakov","SMTP","Mailbox"
"Ali.Pashayev@giltex.az","Ali Pashayev","SMTP","Mailbox"
"Amil.Nazarov@giltex.az","Amil Nazarov","SMTP","Mailbox"
"Amira.Guluzada@giltex.az","Amira Guluzada","SMTP","Mailbox"
"Amiraslan.Yusifov@giltex.az","Amiraslan Yusifov","SMTP","Mailbox"
"Anar.Agayev@giltex.az","Anar Agayev","SMTP","Mailbox"
"Anar.Behbudov@giltex.az","Anar Behbudov","SMTP","Mailbox"
"Anar.Gaibov@giltex.az","Anar Gaibov","SMTP","Mailbox"
"Anar.Khalilov@giltex.az","Anar Khalilov","SMTP","Mailbox"
"Aqil.Salimov@giltex.az","Aqil Salimov","SMTP","Mailbox"
"Araz.Gasimov@giltex.az","Araz Gasimov","SMTP","Mailbox"
"Arzu.Huseynova@giltex.az","Arzu Huseynova","SMTP","Mailbox"
"Asger.Mahmudov@giltex.az","Asger Mahmudov","SMTP","Mailbox"
"Aslan.Valiyev@giltex.az","Aslan Valiyev","SMTP","Mailbox"
"Aygul.Guliyeva@giltex.az","Aygul Guliyeva","SMTP","Mailbox"
"Aygun.Mestiyeva@giltex.az","Aygun Mestiyeva","SMTP","Mailbox"
"Aynur.Mammadli@giltex.az","Aynur Mammadli","SMTP","Mailbox"
"Aytaj.Osmanova@giltex.az","Aytaj Osmanova","SMTP","Mailbox"
"Aytan.Guliyeva@giltex.az","Aytan Guliyeva","SMTP","Mailbox"
"Azad.Rzayev@giltex.az","Azad Rzayev","SMTP","Mailbox"
"Azad.Zabidov@giltex.az","Azad Zabidov","SMTP","Mailbox"
"Azer.Haciyev@giltex.az","Azer Haciyev","SMTP","Mailbox"
"Azer.Hesenov@giltex.az","Azer Hesenov","SMTP","Mailbox"
"Azeri.Nasirli@giltex.az","Azeri Nasirli","SMTP","Mailbox"
"Barat.Agayev@giltex.az","Barat Agayev","SMTP","Mailbox"
"Bibixanim.Abdullayeva@giltex.az","Bibixanim Abdullayeva","SMTP","Mailbox"
"Bitrix@giltex.az","Bitrix","SMTP","Mailbox"
"big.showroom@giltex.az","Böyük Showroom","SMTP","Mailbox"
"Calal.Suleymanov@giltex.az","Calal Suleymanov","SMTP","Mailbox"
"Cavid.Abbasov@giltex.az","Cavid Abbasov","SMTP","Mailbox"
"Cavidan.Yariyev@giltex.az","Cavidan Yariyev","SMTP","Mailbox"
"Chinara.Shahbazova@giltex.az","Chinara Shahbazova","SMTP","Mailbox"
"Commercial@giltex.az","Commercial","SMTP","PublicDL"
"Dashgin.Khanzada@giltex.az","Dashgin Khanzada","SMTP","Mailbox"
"Depot@giltex.az","Depot","SMTP","PublicDL"
"Dmitriy.Avramenko@giltex.az","Dmitriy Avramenko","SMTP","Mailbox"
"Document@giltex.az","Document Giltex","SMTP","Mailbox"
"Elchin.Ahmadov@giltex.az","Elchin Ahmadov","SMTP","Mailbox"
"Elchin.Babayev@giltex.az","Elchin Babayev","SMTP","Mailbox"
"Eldar.Yusibov@giltex.az","Eldar Yusibov","SMTP","Mailbox"
"Eldeniz.Abdulov@giltex.az","Eldeniz Abdulov","SMTP","Mailbox"
"Elmar.Ahmadov@giltex.az","Elmar Ahmadov","SMTP","Mailbox"
"Elmar.Jafarov@giltex.az","Elmar Jafarov","SMTP","Mailbox"
"Elminaz.Gahramanova@giltex.az","Elminaz Gahramanova","SMTP","Mailbox"
"Elmira.Rustamova@giltex.az","Elmira Rustamova","SMTP","Mailbox"
"Elnur.Abdullayev@giltex.az","Elnur Abdullayev","SMTP","Mailbox"
"Elshad.Bakhishov@giltex.az","Elshad Bakhishov","SMTP","Mailbox"
"Elshan.Jabbarov@giltex.az","Elshan Jabbarov","SMTP","Mailbox"
"Elshan.Musayev@giltex.az","Elshan Musayev","SMTP","Mailbox"
"Elvin.Samadov@giltex.az","Elvin Samadov","SMTP","Mailbox"
"Emil.Abdullayev@giltex.az","Emil Abdullayev","SMTP","Mailbox"
"Emin.Bayramov@giltex.az","Emin Bayramov","SMTP","Mailbox"
"ERP-.Reguest@giltex.az","ERP Reguest","SMTP","Mailbox"
"export@giltex.az","export","SMTP","Mailbox"
"Fakhri.Bagirov@giltex.az","Fakhri Bagirov","SMTP","Mailbox"
"Farida.Mahmudova@giltex.az","Farida Mahmudova","SMTP","Mailbox"
"Fazail.Allahyarov@giltex.az","Fazail Allahyarov","SMTP","Mailbox"
"Ferman.Agayev@giltex.az","Ferman Agayev","SMTP","Mailbox"
"Finance@giltex.az","Finance","SMTP","PublicDL"
"Fizuli.Rahimov@giltex.az","Fizuli Rahimov","SMTP","Mailbox"
"Fuad.Ismayilov@giltex.az","Fuad Ismayilov","SMTP","Mailbox"
"Fuad.Mammadov@giltex.az","Fuad Mammadov","SMTP","Mailbox"
"Fuad.Seyidli@giltex.az","Fuad Seyidli","SMTP","Mailbox"
"Fuad.Suleymanov@giltex.az","Fuad Suleymanov","SMTP","Mailbox"
"Gahir.Muslumov@giltex.az","Gahir Muslumov","SMTP","Mailbox"
"Reporters@giltex.az","Giltex Reporter","SMTP","PublicDL"
"Giltex1@giltex.az","Giltex1","SMTP","Mailbox"
"GTPOffice@giltex.az","GTP Office","SMTP","PublicDL"
"GTPRooms@giltex.az","GTP Rooms","SMTP","PublicDL"
"Gudrat.Talibov@giltex.az","Gudrat Talibov","SMTP","Mailbox"
"Gunay.Cabbarova@giltex.az","Gunay Cabbarova","SMTP","Mailbox"
"Gunay.Dadashova@giltex.az","Gunay Dadashova","SMTP","Mailbox"
"Gunay.Guliyeva@giltex.az","Gunay Guliyeva","SMTP","Mailbox"
"Gunay.Mustafayeva@giltex.az","Gunay Mustafayeva","SMTP","Mailbox"
"Gunel.Safarova@giltex.az","Gunel Safarova","SMTP","Mailbox"
"HSE@giltex.az","Health, Safety and Environment","SMTP","PublicDL"
"HealthMailboxWKZE218@giltex.az","HealthMailboxWKZE218","SMTP","Mailbox"
"HelpDesk@giltex.az","HelpDesk","SMTP","PublicDL"
"Heybat.Tapdiqov@giltex.az","Heybat Tapdiqov","SMTP","Mailbox"
"HR@giltex.az","HR","SMTP","Mailbox"
"Human.Resources@giltex.az","Human Resources","SMTP","PublicDL"
"Humay.Mikayilli@giltex.az","Humay Mikayilli","SMTP","Mailbox"
"Humay.Pashazada@giltex.az","Humay Pashazada","SMTP","Mailbox"
"Humel.Huseynova@giltex.az","Humel Huseynova","SMTP","Mailbox"
"Humeyra.Huseynova@giltex.az","Humeyra Huseynova","SMTP","Mailbox"
"Huru.Babayeva@giltex.az","Huru Babayeva","SMTP","Mailbox"
"Ilaha.Ibrahimova@giltex.az","Ilaha Ibrahimova","SMTP","Mailbox"
"Ilgar.Asadov@giltex.az","Ilgar Asadov","SMTP","Mailbox"
"Ilgar.Mammadov@giltex.az","Ilgar Mammadov","SMTP","Mailbox"
"Ilgar.Salimov@giltex.az","Ilgar Salimov","SMTP","Mailbox"
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/20220509053645_default_185.118.50.123_ad.exchange.mail_872835.txt
EmailAddress,Name,RoutingType,MailboxType
"a.m.ibrahimli@socar-stp.az","Abbas M. Ibrahimli","SMTP","Mailbox"
"a.m.mammadov@socar-stp.az","Adil M. Mammadov","SMTP","Mailbox"
"ssadmin@socar-stp.az","Admin SS Domain","SMTP","Mailbox"
"Administrator@socar-stp.az","Administrator","SMTP","Mailbox"
"a.o.aliyev@socar-stp.az","Agshin O. Aliyev","SMTP","Mailbox"
"a.i.ibrahimov@socar-stp.az","Akif I. Ibrahimov","SMTP","Mailbox"
"a.i.mamiyev@socar-stp.az","Alakbar I. Mamiyev","SMTP","Mailbox"
"a.j.trew@socar-stp.az","Alasdair J. Trew","SMTP","Mailbox"
"a.h.hasanov@socar-stp.az","Alasgar H. Hasanov","SMTP","Mailbox"
"a.b.babayev@socar-stp.az","Ali B. Babayev","SMTP","Mailbox"
"a.r.gasimov@socar-stp.az","Ali R. Gasimov","SMTP","Mailbox"
"a.m.rzayev@socar-stp.az","Alimammad M. Rzayev","SMTP","Mailbox"
"a.a.nikiforova@socar-stp.az","Aliya A. Nikiforova","SMTP","Mailbox"
"allstaff@socar-stp.az","All Staff","SMTP","PublicDL"
"a.mammadov@socar-stp.az","Amin Z. Mammadov","SMTP","Mailbox"
"a.m.daanov@socar-stp.az","Anar M. Daanov","SMTP","Mailbox"
"a.r.aliyev@socar-stp.az","Anvar R. Aliyev","SMTP","Mailbox"
"a.sh.karimov@socar-stp.az","Arzu Sh. Karimov","SMTP","Mailbox"
"a.h.axundov@socar-stp.az","Asad H. Axundov","SMTP","Mailbox"
"a.a.abdullayev@socar-stp.az","Ayaz A. Abdullayev","SMTP","Mailbox"
"a.a.imamaliyev@socar-stp.az","Aydin A. Imamaliyev","SMTP","Mailbox"
"a.y.valiyeva@socar-stp.az","Ayna Y. Valiyeva","SMTP","Mailbox"
"a.a.najafova@socar-stp.az","Aysel A. Najafova","SMTP","Mailbox"
"a.c.allahverdiyev@socar-stp.az","Azar C. Allahverdiyev","SMTP","Mailbox"
"a.b.aliyev@socar-stp.az","Azer B. Aliyev","SMTP","Mailbox"
"b.i.gurbanov@socar-stp.az","Bahruz I. Gurbanov","SMTP","Mailbox"
"b.i.akhmadov@socar-stp.az","Bakhtiyar I. Akhmadov","SMTP","Mailbox"
"c.y.narimanov@socar-stp.az","Ceyhun Y. Narimanov","SMTP","Mailbox"
"commercial@socar-stp.az","Commercial Team","SMTP","PublicDL"
"d.r.amirova@socar-stp.az","Diana R. Amirova","SMTP","Mailbox"
"directreports@socar-stp.az","Direct Reports","SMTP","PublicDL"
"d.g.asgarov@socar-stp.az","Djavid G. Asgarov","SMTP","Mailbox"
"d.s.galabiev@socar-stp.az","Dmitriy S. Galabiev","SMTP","Mailbox"
"d.m.alizada@socar-stp.az","Donmaz M. Alizada","SMTP","Mailbox"
"e.e.allahverdiyev@socar-stp.az","Elbrus E. Allahverdiyev","SMTP","Mailbox"
"e.a.imanov@socar-stp.az","Elchin A. Imanov","SMTP","Mailbox"
"e.e.abbasov@socar-stp.az","Elmir E. Abbasov","SMTP","Mailbox"
"elnur.deloitte@socar-stp.az","Elnur Deloitte","SMTP","Mailbox"
"e.g.balayev@socar-stp.az","Elshan G. Balayev","SMTP","Mailbox"
"e.e.mirzoyev@socar-stp.az","Elvin E. Mirzoyev","SMTP","Mailbox"
"e.a.rzayev@socar-stp.az","Emil A. Rzayev","SMTP","Mailbox"
"e.n.bodurov@socar-stp.az","Emil N. Bodurov","SMTP","Mailbox"
"e.n.tahirzada@socar-stp.az","Emil N. Tahirzada","SMTP","Mailbox"
"e.s.huseynov@socar-stp.az","Emil S. Huseynov","SMTP","Mailbox"
"e.a.aliyev@socar-stp.az","Emin A. Aliyev","SMTP","Mailbox"
"engineering@socar-stp.az","Engineering Team","SMTP","PublicDL"
"erp@socar-stp.az","ERP Approve","SMTP","Mailbox"
"e.g.gasimov@socar-stp.az","Eyyub G. Gasimov","SMTP","Mailbox"
"facilitiesdirectors@socar-stp.az","Facilities Directors","SMTP","PublicDL"
"f.s.asadulov@socar-stp.az","Farhad S. Asadulov","SMTP","Mailbox"
"f.aghayev@socar-stp.az","Farid F. Agayev","SMTP","Mailbox"
"f.n.abdullayev@socar-stp.az","Farid N. Abdullayev","SMTP","Mailbox"
"f.n.seyidaliyev@socar-stp.az","Farkhad N. Seyidaliyev","SMTP","Mailbox"
"f.m.suleymanova@socar-stp.az","Farkhunda M. Suleymanova","SMTP","Mailbox"
"f.v.babayev@socar-stp.az","Farxad V. Babayev","SMTP","Mailbox"
"f.b.sunulu@socar-stp.az","Fatma B. Sunulu","SMTP","Mailbox"
"f.a.aliyev@socar-stp.az","Fazil A. Aliyev","SMTP","Mailbox"
"f.e.najafova@socar-stp.az","Fidan E. Najafova","SMTP","Mailbox"
"finance@socar-stp.az","Finance Team","SMTP","PublicDL"
"f.s.babirov@socar-stp.az","Firudin S. Babirov","SMTP","Mailbox"
"f.a.nazaraliyev@socar-stp.az","Fuad A. Nazaraliyev","SMTP","Mailbox"
"f.a.rzayev@socar-stp.az","Fuad A. Rzayev","SMTP","Mailbox"
"f.f.aghayev@stpmetalstructures.az","Fuad F. Aghayev","SMTP","Mailbox"
"f.n.balabeyov@socar-stp.az","Fuad N. Balabeyov","SMTP","Mailbox"
"g.f.akhmadov@socar-stp.az","Gazanfar F. Akhmadov","SMTP","Mailbox"
"g.i.mammadova@socar-stp.az","Gulnaz I. Mammadova","SMTP","Mailbox"
"g.b.teymurova@socar-stp.az","Gunay B. Teymurova","SMTP","Mailbox"
"h.s.abbaszada@socar-stp.az","Hajiakbar S. Abbaszada","SMTP","Mailbox"
"helpdesk@socar-stp.az","Helpdesk Team","SMTP","PublicDL"
"h.s.hasanov@socar-stp.az","Hikmat S. Hasanov","SMTP","Mailbox"
"hr@socar-stp.az","HR","SMTP","Mailbox"
"hrteam@socar-stp.az","HR Team","SMTP","PublicDL"
"hse@socar-stp.az","HSE Team","SMTP","PublicDL"
"h.i.chelebiyev@socar-stp.az","Humbat I. Chelebiyev","SMTP","Mailbox"
"i.a.ibrahimov@socar-stp.az","Ibrahim A. Ibrahimov","SMTP","Mailbox"
"i.a.cafarov@socar-stp.az","Idris A. Cafarov","SMTP","Mailbox"
"i.k.baghirov@socar-stp.az","Iftikhan K. Baghirov","SMTP","Mailbox"
"i.s.shamchiyeva@socar-stp.az","Ilaha S. Shamchiyeva","SMTP","Mailbox"
"i.v.abbasov@socar-stp.az","Ilgar V. Abbasov","SMTP","Mailbox"
"i.b.zohrabov@socar-stp.az","Ilham B. Zohrabov","SMTP","Mailbox"
"i.r.abasov@socar-stp.az","Ilham R. Abasov","SMTP","Mailbox"
"i.p.hakimov@socar-stp.az","Ilkin P. Hakimov","SMTP","Mailbox"
"i.o.karim@socar-stp.az","Ilyana O. Karim","SMTP","Mailbox"
"i.a.talibov@socar-stp.az","Intigam A. Talibov","SMTP","Mailbox"
"i.s.anas@socar-stp.az","Irina S. Anas","SMTP","Mailbox"
"i.i.ismayilov@socar-stp.az","Ismayil I. Ismayilov","SMTP","Mailbox"
"j.x.allahverdiyev@socar-stp.az","Jalil X. Allahverdiyev","SMTP","Mailbox"
"j.t.maharramov@socar-stp.az","Javad T. Maharramov","SMTP","Mailbox"
"j.a.alizamanli@socar-stp.az","Javid A. Alizamanli","SMTP","Mailbox"
"j.h.abdullayev@socar-stp.az","Javid H. Abdullayev","SMTP","Mailbox"
"j.r.malikzada@socar-stp.az","Javidan R. Malikzada","SMTP","Mailbox"
"JV.audit@socar-stp.az","Joint Venture Audit","SMTP","PublicDL"
"k.m.seyidov@socar-stp.az","Kamil M. Seyidov","SMTP","Mailbox"
"k.f.sadiqzada@socar-stp.az","Kanan F. Sadiqzada","SMTP","Mailbox"
"k.r.mammadov@socar-stp.az","Kanan R. Mammadov","SMTP","Mailbox"
"k.t.tahirov@socar-stp.az","Kazbek T. Tahirov","SMTP","Mailbox"
"k.s.aslanli@socar-stp.az","Khayyam S. Aslanli","SMTP","Mailbox"
"k.m.mirzayeva@stpmetalstructures.az","Khuraman M. Mirzayeva","SMTP","Mailbox"
"k.e.mirzayeva@socar-stp.az","Konul E. Mirzayeva","SMTP","Mailbox"
"legal@socar-stp.az","Legal Team","SMTP","PublicDL"
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/AZ_proxy_shell_target.txt
webmail.binagadioil.com shell https://webmail.binagadioil.com/owa/auth/Vw8q1tdLy.aspx {404 shell}
s-gfi.fm.frem.az
mx.zeytunpharma.az
mail.winterparkhotel.net
mail.unitech.com.az
mail.synergygroup.az
mail.sta.az
mail.sde.az
mail.qsz.az
mail.max-print.biz
mail.karasuopco.com shell https://mail.karasuopco.com/owa/auth/fUMBz0mwHC.aspx {404 shell}
mail.industrialbusiness.az
mail.gea.az
mail.bakucc.az
mail.aic.az
exmail.giltex.az
185.118.50.123
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/OWA_site.csv
```csv path="/Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/AZ/OWA_site.csv"
https://mail.gmg.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.gmg.az%2fowa%2f&reason=0,AZ
https://185.18.245.72/owa/auth/logon.aspx?url=https%3a%2f%2f185.18.245.72%2fowa%2f&reason=0,AZ
https://mail.qubapalace.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.qubapalace.com%2fowa%2f&reason=0,AZ
https://smtp01.safelife.az/owa/auth/logon.aspx?url=https%3a%2f%2fsmtp01.safelife.az%2fowa%2f&reason=0,AZ
https://mail.qsz.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.qsz.az%2fowa%2f&reason=0,AZ
https://mail.avrora.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.avrora.az%2fowa%2f&reason=0,AZ
https://mail.customs.gov.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.customs.gov.az%2fowa%2f&reason=0,AZ
https://mx1.memorialklinik.az/owa/auth/logon.aspx?url=https%3a%2f%2fmx1.memorialklinik.az%2fowa%2f&reason=0,AZ
https://mail.bakuits.gov.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bakuits.gov.az%2fowa%2f&reason=0,AZ
https://webmail.affa.az/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.affa.az%2fowa%2f&reason=0,AZ
https://94.20.74.213/owa/auth/logon.aspx?url=https%3a%2f%2f94.20.74.213%2fowa%2f&reason=0,AZ
https://mail.workplace.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.workplace.az%2fowa%2f&reason=0,AZ
https://85.132.26.22/owa/auth/logon.aspx?url=https%3a%2f%2f85.132.26.22%2fowa%2f&reason=0,AZ
https://mail.pashaconstruction.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pashaconstruction.com%2fowa%2f&reason=0,AZ
https://mail.optimal.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.optimal.az%2fowa%2f&reason=0,AZ
https://mail.stp.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.stp.az%2fowa%2f&reason=0,AZ
https://91.132.193.23/owa/auth/logon.aspx?url=https%3a%2f%2f91.132.193.23%2fowa%2f&reason=0,AZ
https://mail.cres.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cres.az%2fowa%2f&reason=0,AZ
https://mail.isrholdingltd.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.isrholdingltd.com%2fowa%2f&reason=0,AZ
https://mail.fiu.az/owa/auth/logon.aspx?url=https://mail.fiu.az/owa/&reason=0,AZ
https://62.212.226.83/owa/auth/logon.aspx?url=https%3a%2f%2f62.212.226.83%2fowa%2f&reason=0,AZ
https://mail.ady.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ady.az%2fowa%2f&reason=0,AZ
https://mail.caspel.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.caspel.com%2fowa%2f&reason=0,AZ
https://37.32.75.12/owa/auth/logon.aspx?url=https%3a%2f%2f37.32.75.12%2fowa%2f&reason=0,AZ
https://185.118.50.123/owa/auth/logon.aspx?url=https%3a%2f%2f185.118.50.123%2fowa%2f&reason=0,AZ
https://mail.etopaz.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.etopaz.az%2fowa%2f&reason=0,AZ
https://mail3.rabitabank.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail3.rabitabank.com%2fowa%2f&reason=0,AZ
https://mail.affa.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.affa.az%2fowa%2f&reason=0,AZ
https://mail.sde.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.sde.az%2fowa%2f&reason=0,AZ
https://mail.avromak.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.avromak.az%2fowa%2f&reason=0,AZ
https://mail.abc-telecom.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.abc-telecom.az%2fowa%2f&reason=0,AZ
https://mx.zeytunpharma.az/owa/auth/logon.aspx?url=https%3a%2f%2fmx.zeytunpharma.az%2fowa%2f&reason=0,AZ
https://mail.uboc.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.uboc.az%2fowa%2f&reason=0,AZ
https://mail.kibrit.tech/owa/auth/logon.aspx?url=https%3a%2f%2fmail.kibrit.tech%2fowa%2f&reason=0,AZ
https://mail.science.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.science.az%2fowa%2f&reason=0,AZ
https://mail.atasigorta.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.atasigorta.az%2fowa%2f&reason=0,AZ
https://mail.aztelekom.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.aztelekom.az%2fowa%2f&reason=0,AZ
https://mail.btb.az/owa/auth/logon.aspx?url=https://mail.btb.az/owa/&reason=0,AZ
https://mail.bestcomp.net/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bestcomp.net%2fowa%2f&reason=0,AZ
https://post.atb.az/owa/auth/logon.aspx?url=https%3a%2f%2fpost.atb.az%2fowa&reason=0,AZ
https://77.244.112.155/owa/auth/logon.aspx?url=https%3a%2f%2f77.244.112.155%2fowa%2f&reason=0,AZ
https://mail.atatexnologiya.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.atatexnologiya.az%2fowa%2f&reason=0,AZ
https://mail.embawood.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.embawood.com%2fowa%2f&reason=0,AZ
https://mail.ktib.ae/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ktib.ae%2fowa%2f&reason=0,AZ
https://webmail.binagadioil.com/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.binagadioil.com%2fowa%2f&reason=0,AZ
https://mail.yenihayat.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.yenihayat.az%2fowa%2f&reason=0,AZ
https://mail.embawood.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.embawood.com%2fowa%2f&reason=0,AZ
https://mail.adyexpress.az/owa/,AZ
https://mx01.azertexnolayn.com/owa/auth/logon.aspx?url=https%3a%2f%2fmx01.azertexnolayn.com%2fowa%2f&reason=0,AZ
https://mail.bridgegroup.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bridgegroup.az%2fowa%2f&reason=0,AZ
https://edge.lab.risk.az/owa/auth/logon.aspx?url=https%3a%2f%2fedge.lab.risk.az%2fowa%2f&reason=0,AZ
https://mail.bakucc.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bakucc.az%2fowa%2f&reason=0,AZ
https://mail.activegroup.az/owa/,AZ
https://mail2.sip.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail2.sip.az%2fowa%2f&reason=0,AZ
https://mail.shirinsu.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.shirinsu.az%2fowa%2f&reason=0,AZ
https://mail.aic.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.aic.az%2fowa%2f&reason=0,AZ
https://mail.azetel.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.azetel.com%2fowa%2f&reason=0,AZ
https://37.32.75.11/owa/auth/logon.aspx?url=https%3a%2f%2f37.32.75.11%2fowa%2f&reason=0,AZ
https://ns1.afb.az/owa/auth/logon.aspx?url=https%3a%2f%2fns1.afb.az%2fowa%2f&reason=0,AZ
https://217.64.22.254/owa/auth/logon.aspx?url=https%3a%2f%2f217.64.22.254%2fowa%2f&reason=0,AZ
https://85.132.41.32/owa/,AZ
https://mail.bakertilly.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bakertilly.az%2fowa%2f&reason=0,AZ
https://mail.sta.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.sta.az%2fowa%2f&reason=0,AZ
https://exchange.aplusco.az/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.aplusco.az%2fowa%2f&reason=0,AZ
https://mx1.ionline.az/owa/auth/logon.aspx?url=https%3a%2f%2fmx1.ionline.az%2fowa%2f&reason=0,AZ
https://mail.caa.gov.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.caa.gov.az%2fowa%2f&reason=0,AZ
https://mail.lamborghini-baku.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.lamborghini-baku.com%2fowa%2f&reason=0,AZ
https://mail.accessbank.az/owa/,AZ
https://mx.zeytunpharma.az/owa/auth/logon.aspx?url=https%3a%2f%2fmx.zeytunpharma.az%2fowa%2f&reason=0,AZ
https://mail.adec.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.adec.az%2fowa%2f&reason=0,AZ
https://mail.activegroup.az/owa/,AZ
https://mta2.xalqsigorta.az/owa/auth/logon.aspx?url=https%3a%2f%2fmta2.xalqsigorta.az%2fowa%2f&reason=0,AZ
https://mail.aztexnika.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.aztexnika.az%2fowa%2f&reason=0,AZ
https://mail.norm.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.norm.az%2fowa%2f&reason=0,AZ
https://mail.referansclc.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.referansclc.com%2fowa%2f&reason=0,AZ
https://mail.pasha-insurance.az/owa/,AZ
https://mail.stdc.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.stdc.az%2fowa%2f&reason=0,AZ
https://mail.noc.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.noc.az%2fowa%2f&reason=0,AZ
https://mail.peachline.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.peachline.az%2fowa%2f&reason=0,AZ
https://mail.caspiandrilling.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.caspiandrilling.com%2fowa%2f&reason=0,AZ
https://mail.winterparkhotel.net/owa/auth/logon.aspx?url=https%3a%2f%2fmail.winterparkhotel.net%2fowa%2f&reason=0,AZ
https://mail.max-print.biz/owa/auth/logon.aspx?url=https%3a%2f%2fmail.max-print.biz%2fowa%2f&reason=0,AZ
https://mail.stp.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.stp.az%2fowa%2f&reason=0,AZ
https://62.212.231.62/owa/auth/logon.aspx?url=https%3a%2f%2f62.212.231.62%2fowa%2f&reason=0,AZ
https://mail.gilanholding.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.gilanholding.com%2fowa%2f&reason=0,AZ
https://82.194.0.193/owa/auth/logon.aspx?url=https%3a%2f%2f82.194.0.193%2fowa%2f&reason=0,AZ
https://91.132.193.21/owa/auth/logon.aspx?url=https%3a%2f%2f91.132.193.21%2fowa%2f&reason=0,AZ
https://mail.industrialbusiness.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.industrialbusiness.az%2fowa%2f&reason=0,AZ
https://mail.gea.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.gea.az%2fowa%2f&reason=0,AZ
https://85.132.89.249/owa/auth/logon.aspx?url=https%3a%2f%2f85.132.89.249%2fowa%2f&reason=0,AZ
https://mx01.azeronline.net/owa/auth/logon.aspx?url=https%3a%2f%2fmx01.azeronline.net%2fowa%2f&reason=0,AZ
https://mail.socar-aqs.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.socar-aqs.com%2fowa%2f&reason=0&s=F4F452FFC899CC578D02ADAD8C083CD018E4FD80,AZ
https://mail.cpb.az/owa/auth/logon.aspx?url=https://mail.cpb.az/owa/&reason=0,AZ
https://mail.optimal.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.optimal.az%2fowa%2f&reason=0,AZ
https://bst.socar.az/owa/auth/logon.aspx?url=https%3a%2f%2fbst.socar.az%2fowa%2f&reason=0,AZ
https://mail.sirab.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.sirab.az%2fowa%2f&reason=0,AZ
https://autodiscover.bos.az/owa/auth/logon.aspx?url=https://autodiscover.bos.az/owa/&reason=0,AZ
https://85.132.72.132/owa/auth/logon.aspx?url=https%3a%2f%2f85.132.72.132%2fowa%2f&reason=0,AZ
https://exmail.giltex.az/owa/auth/logon.aspx?url=https%3a%2f%2fexmail.giltex.az%2fowa%2f&reason=0,AZ
https://37.32.75.14/owa/auth/logon.aspx?url=https%3a%2f%2f37.32.75.14%2fowa%2f&reason=0,AZ
https://mail.collezioneitalia.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.collezioneitalia.az%2fowa%2f&reason=0,AZ
https://mail.premiumbank.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.premiumbank.az%2fowa%2f&reason=0,AZ
https://mail01.sgofc.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail01.sgofc.com%2fowa%2f&reason=0,AZ
https://mail.at-geotech.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.at-geotech.com%2fowa%2f&reason=0,AZ
https://mail.xezertv.az/owa/auth/logon.aspx?url=https://mail.xezertv.az/owa/&reason=0,AZ
https://85.132.48.178/owa/auth/logon.aspx?url=https%3a%2f%2f85.132.48.178%2fowa%2f&reason=0,AZ
https://mail.embafinans.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.embafinans.az%2fowa%2f&reason=0,AZ
https://mail.muganbank.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.muganbank.az%2fowa%2f&reason=0,AZ
https://mail.unitech.com.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.unitech.com.az%2fowa%2f&reason=0,AZ
https://37.32.75.13/owa/auth/logon.aspx?url=https%3a%2f%2f37.32.75.13%2fowa%2f&reason=0,AZ
https://hybridmail.sgofc.com/owa/auth/logon.aspx?url=https%3a%2f%2fhybridmail.sgofc.com%2fowa%2f&reason=0,AZ
https://mail.azerimi.az/owa/,AZ
https://mail.synergygroup.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.synergygroup.az%2fowa%2f&reason=0,AZ
https://mail.pashacapital.az/owa/,AZ
https://mail.karasuopco.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.karasuopco.com%2fowa%2f&reason=0,AZ
https://mail.azeravtoyol.gov.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.azeravtoyol.gov.az%2fowa%2f&reason=0,AZ
https://85.132.39.135/owa/auth/logon.aspx?url=https%3a%2f%2f85.132.39.135%2fowa%2f&reason=0,AZ
https://217.64.22.116/owa/auth/logon.aspx?url=https%3a%2f%2f217.64.22.116%2fowa%2f&reason=0,AZ
https://mail2.caspiandrilling.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail2.caspiandrilling.com%2fowa%2f&reason=0,AZ
https://85.132.76.177/owa/auth/logon.aspx?url=https%3a%2f%2f85.132.76.177%2fowa%2f&reason=0,AZ
https://mail.azenco.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.azenco.az%2fowa%2f&reason=0,AZ
https://mail.socar-aqs.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.socar-aqs.com%2fowa%2f&reason=0&s=F4F452FFC899CC578D02ADAD8C083CD018E4FD80,AZ
https://s-gfi.fm.frem.az/owa/auth/logon.aspx?url=https%3a%2f%2fs-gfi.fm.frem.az%2fowa%2f&reason=0,AZ
https://mail.cbc.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cbc.az%2fowa%2f&reason=0,AZ
https://mail.bna.az/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bna.az%2fowa%2f&reason=0,AZ
```
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/BE_Proxy_Shell_target.txt
intranet.socogetra.com shell https://intranet.socogetra.com/owa/auth/webclient.aspx {404 shell}
mail.educam.be
mail.somersoptiek.be
mail.gvbh.be
mail.sogebo.be
4.245-78-194.adsl-static.isp.belgacom.be
85.233-136-217.adsl-static.isp.belgacom.be
email.cloudpos.be
212-123-11-204.ifiber.telenet-ops.be
217.22.48.99.static.hosted.by.easyhost.be
26.184-136-217.adsl-static.isp.belgacom.be
d5152d59a.static.telenet.be
mail.baert.com
mail.thehotel.be
webmail.sowaer.be
46.16.240.53 shell https://46.16.240.53/owa/auth/webclient.aspx ok
host-78-129-6-51.dynamic.voo.be
mail.verfaillie-leroy.be
mail.zwijsen.be
84-199-82-188.ifiber.telenet-ops.be
mail1.st-augustin.be
mail2.imperbel.be
124.122-180-91.adsl-dyn.isp.belgacom.be
212.35.112.218
ip-188-118-38-2.reverse.destiny.be
mail.apaqw.be
mail.igo.be
webmail.regionecampania.eu
110.245-200-80.adsl-static.isp.belgacom.be
mail.molsebouwmaatschappij.be
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/p1.csv
```csv path="/Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/p1.csv"
https://mail.huvepharma.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.huvepharma.be%2fowa%2f&reason=0,p1
https://xmail.spiridon.org/owa/auth/logon.aspx?url=https%3a%2f%2fxmail.spiridon.org%2fowa%2f&reason=0,p1
https://195.244.166.61/owa/auth/logon.aspx?url=https%3a%2f%2f195.244.166.61%2fowa%2f&reason=0,p1
https://mail2.amonis.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail2.amonis.be%2fowa%2f&reason=0,p1
https://mail.bumaser.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bumaser.com%2fowa%2f&reason=0,p1
https://d51531498.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd51531498.static.telenet.be%2fowa%2f&reason=0,p1
https://mail.wam.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.wam.be%2fowa%2f&reason=0,p1
https://remote.lishydraulics.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.lishydraulics.be%2fowa%2f&reason=0,p1
https://d54c72f7c.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd54c72f7c.static.telenet.be%2fowa%2f&reason=0,p1
https://mailman.otnsystems.com/owa/auth/logon.aspx?url=https%3a%2f%2fmailman.otnsystems.com%2fowa%2f&reason=0,p1
https://mail.cisanet.be/owa/,p1
https://da.eacb.coop/owa/auth/logon.aspx?url=https%3a%2f%2fda.eacb.coop%2fowa%2f&reason=0,p1
https://mailsrv.lacitejoyeuse.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailsrv.lacitejoyeuse.be%2fowa%2f&reason=0,p1
https://cas.cisacloud.be/owa/,p1
https://mail.vanheyghenstaal.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vanheyghenstaal.be%2fowa%2f&reason=0,p1
https://mail.kreafinity.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.kreafinity.be%2fowa%2f&reason=0,p1
https://ip-188-118-47-13.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-47-13.reverse.destiny.be%2fowa%2f&reason=0,p1
https://webmail.karrasgroup.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.karrasgroup.be%2fowa%2f&reason=0,p1
https://cpasstgillesmailserver.irisnet.be/owa/auth/logon.aspx?url=https%3a%2f%2fcpasstgillesmailserver.irisnet.be%2fowa%2f&reason=0,p1
https://mail.vidisquare.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vidisquare.be%2fowa%2f&reason=0,p1
https://mailfilter.cergroupe.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailfilter.cergroupe.be%2fowa%2f&reason=0,p1
https://mail.optimat.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.optimat.be%2fowa%2f&reason=0,p1
https://mail.gilbertdeclercq.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.gilbertdeclercq.com%2fowa%2f&reason=0,p1
https://sbs.vergalle.be/owa/auth/logon.aspx?url=https%3a%2f%2fsbs.vergalle.be%2fowa%2f&reason=0,p1
https://office.e-crane.com/owa/auth/logon.aspx?url=https%3a%2f%2foffice.e-crane.com%2fowa%2f&reason=0,p1
https://mail.cpha.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cpha.be%2fowa%2f&reason=0,p1
https://mail.tcl.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.tcl.be%2fowa%2f&reason=0,p1
https://ip-188-118-23-34.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-23-34.reverse.destiny.be%2fowa%2f&reason=0,p1
https://mxl.lhub.be/owa/auth/logon.aspx?url=https%3a%2f%2fmxl.lhub.be%2fowa%2f&reason=0,p1
https://195.244.184.62/owa/auth/logon.aspx?url=https%3a%2f%2f195.244.184.62%2fowa%2f&reason=0,p1
https://77.40-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f77.40-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://mail.alken.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.alken.be%2fowa%2f&reason=0,p1
https://217.205-78-194.adsl-fix.skynet.be/owa/auth/logon.aspx?url=https%3a%2f%2f217.205-78-194.adsl-fix.skynet.be%2fowa%2f&reason=0,p1
https://mail.jean-goldschmidt.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.jean-goldschmidt.be%2fowa%2f&reason=0,p1
https://mail.fbf.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.fbf.be%2fowa%2f&reason=0,p1
https://exchange.felies.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.felies.be%2fowa%2f&reason=0,p1
https://mail.clayton.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.clayton.be%2fowa%2f&reason=0,p1
https://mail.educam.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.educam.be%2fowa%2f&reason=0,p1
https://mail.behub.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.behub.be%2fowa%2f&reason=0,p1
https://84-198-4-232.access.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-198-4-232.access.telenet.be%2fowa%2f&reason=0,p1
https://mail.4m-europe.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.4m-europe.com%2fowa%2f&reason=0,p1
https://mail.stockvermeersch.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.stockvermeersch.com%2fowa%2f&reason=0,p1
https://mail.vercaigne.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vercaigne.be%2fowa%2f&reason=0,p1
https://211.22-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f211.22-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://mail.rcgg.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.rcgg.be%2fowa%2f&reason=0,p1
https://mail.tcps.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.tcps.be%2fowa%2f&reason=0,p1
https://ex.quant.be/owa/auth/logon.aspx?url=https%3a%2f%2fex.quant.be%2fowa%2f&reason=0,p1
https://e2013.dekeyzer-ossaer.be/owa/auth/logon.aspx?url=https%3a%2f%2fe2013.dekeyzer-ossaer.be%2fowa%2f&reason=0,p1
https://webmail.itec.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.itec.be%2fowa%2f&reason=0,p1
https://212-166-27-124.win.be/owa/auth/logon.aspx?url=https%3a%2f%2f212-166-27-124.win.be%2fowa%2f&reason=0,p1
https://mail.asvedec.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.asvedec.be%2fowa%2f&reason=0,p1
https://209.206-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f209.206-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://mail.eme.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.eme.be%2fowa%2f&reason=0,p1
https://remote.reva-beveren.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.reva-beveren.be%2fowa%2f&reason=0,p1
https://152.183-66-87.adsl-dyn.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f152.183-66-87.adsl-dyn.isp.belgacom.be%2fowa%2f&reason=0,p1
https://116.35-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f116.35-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://d51531920.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd51531920.static.telenet.be%2fowa%2f&reason=0,p1
https://smtp.toitetmoi.be/owa/auth/logon.aspx?url=https%3a%2f%2fsmtp.toitetmoi.be%2fowa%2f&reason=0,p1
https://mail.iscalsugar.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.iscalsugar.com%2fowa%2f&reason=0,p1
https://intranet.socogetra.com/owa/auth/logon.aspx?url=https%3a%2f%2fintranet.socogetra.com%2fowa%2f&reason=0,p1
https://212.117-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f212.117-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://mail.indigo-group.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.indigo-group.be%2fowa%2f&reason=0,p1
https://mail.thermoclean.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.thermoclean.com%2fowa%2f&reason=0,p1
https://webmail.aforeconsulting.eu/owa/auth/logon.aspx?url=https%3a%2f%2fappsrv01afc%2fowa%2f&reason=0,p1
https://mail.klim-vzw.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.klim-vzw.be%2fowa%2f&reason=0,p1
https://mail.avocats-mp2.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.avocats-mp2.be%2fowa%2f&reason=0,p1
https://servboll.bollandistes.be/owa/auth/logon.aspx?url=https%3a%2f%2fservboll.bollandistes.be%2fowa%2f&reason=0,p1
https://mail.molcy.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.molcy.com%2fowa%2f&reason=0,p1
https://10.63-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f10.63-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://193.190.199.60/owa/auth/logon.aspx?url=https%3a%2f%2f193.190.199.60%2fowa%2f&reason=0,p1
https://mail.matrix.be/owa/auth/logon.aspx?url=https%3a%2f%2f192.168.1.7%2fowa%2f&reason=0,p1
https://owa.carnoy.be/,p1
https://mail.anderlues.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.anderlues.be%2fowa%2f&reason=0,p1
https://mail.gemac.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.gemac.com%2fowa%2f&reason=0,p1
https://mail.lrm.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.lrm.be%2fowa%2f&reason=0,p1
https://mail.datacap.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.datacap.be%2fowa%2f&reason=0,p1
https://mail.certam.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.certam.be%2fowa%2f&reason=0,p1
https://mail.gercolex.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.gercolex.be%2fowa%2f&reason=0,p1
https://mailhost.lerou.com/owa/auth/logon.aspx?url=https%3a%2f%2fmailhost.lerou.com%2fowa%2f&reason=0,p1
https://ip-94-140-188-230.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-94-140-188-230.reverse.destiny.be%2fowa%2f&reason=0,p1
https://mail.bivit.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bivit.com%2fowa%2f&reason=0,p1
https://193.108.17.251/owa/auth/logon.aspx?url=https%3a%2f%2f193.108.17.251%2fowa%2f&reason=0,p1
https://d5152c0e3.static.telenet.be:443/owa/auth/logon.aspx?url=https%3a%2f%2fd5152c0e3.static.telenet.be%2f&reason=0,p1
https://204.38-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f204.38-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://mail.bafa.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bafa.be%2fowa%2f&reason=0,p1
https://mail.vandievel.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vandievel.eu%2fowa%2f&reason=0,p1
https://mail.zge.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.zge.be%2fowa%2f&reason=0,p1
https://mail.synergiejobs.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.synergiejobs.be%2fowa%2f&reason=0,p1
https://mail.vitrocisetbelgium.com/lm_auth_proxy?DoLMLogin?curl=L2fowa&curlid=2108303720-2601160468&curlmode=0,p1
https://mx3.wijckmans-nv.be/owa/auth/logon.aspx?url=https%3a%2f%2fmx3.wijckmans-nv.be%2fowa%2f&reason=0,p1
https://34.141-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https://34.141-78-194.adsl-static.isp.belgacom.be/owa/&reason=0,p1
https://exch-02.infra.coreinfra.be/owa/auth/logon.aspx?url=https%3a%2f%2fexch-02.infra.coreinfra.be%2fowa%2f&reason=0,p1
https://remote.vesalepharma.com/owa/auth/logon.aspx?url=https%3a%2f%2fremote.vesalepharma.com%2fowa%2f&reason=0,p1
https://185.154.165.19/owa/auth/logon.aspx?url=https%3a%2f%2f185.154.165.19%2fowa%2f&reason=0,p1
https://2.180-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f2.180-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://d54c72e4a.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd54c72e4a.static.telenet.be%2fowa%2f&reason=0,p1
https://remote.down2earth.net/owa/auth/logon.aspx?url=https%3a%2f%2fremote.down2earth.net%2fowa%2f&reason=0,p1
https://remote.deblauwevogel.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.deblauwevogel.be%2fowa%2f&reason=0,p1
https://mail.eurassur.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.eurassur.be%2fowa%2f&reason=0,p1
https://78.24.172.38/owa/auth/logon.aspx?url=https%3a%2f%2f78.24.172.38%2fowa%2f&reason=0,p1
https://mail.pasfrost.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pasfrost.be%2fowa%2f&reason=0,p1
https://mail.frigro.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.frigro.be%2fowa%2f&reason=0,p1
https://mail.water-link.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.water-link.be%2fowa&reason=0,p1
https://mail.vestingfinance.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vestingfinance.be%2fowa%2f&reason=0,p1
https://mail.destroomlijn.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.destroomlijn.be%2fowa%2f&reason=0,p1
https://86.39.203.6.static.hosted.by.easyhost.be/owa/auth/logon.aspx?url=https%3a%2f%2f86.39.203.6.static.hosted.by.easyhost.be%2fowa%2f&reason=0,p1
https://81.82.247.68/owa/auth/logon.aspx?url=https%3a%2f%2f81.82.247.68%2fowa%2f&reason=0,p1
https://mail.cndp-erpent.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cndp-erpent.be%2fowa%2f&reason=0,p1
https://204.2-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f204.2-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://235.253-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f235.253-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://host-109-88-185-188.dynamic.voo.be/owa/auth/logon.aspx?url=https%3a%2f%2fhost-109-88-185-188.dynamic.voo.be%2fowa%2f&reason=0,p1
https://dd458ebab.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd458ebab.static.telenet.be%2fowa%2f&reason=0,p1
https://mail.arcadialab.ru/owa/auth/logon.aspx?url=https%3a%2f%2fmail.arcadialab.ru%2fowa%2f&reason=0,p1
https://ip-94-140-170-195.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-94-140-170-195.reverse.destiny.be%2fowa%2f&reason=0,p1
https://mx02.neondesign.be/owa/auth/logon.aspx?url=https%3a%2f%2fmx02.neondesign.be%2fowa%2f&reason=0,p1
https://mail.cobelplast.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cobelplast.be%2fowa%2f&reason=0,p1
https://mail.vincentiusavelgem.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vincentiusavelgem.be%2fowa%2f&reason=0,p1
https://mail1.cowalca.be/,p1
https://d51530912.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd51530912.static.telenet.be%2fowa%2f&reason=0,p1
https://mail.rentacar.be/owa/,p1
https://mail.almeco.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.almeco.be%2fowa%2f&reason=0,p1
https://193.245.76.131/owa/,p1
https://233.123-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f233.123-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://mail.jms-finance.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.jms-finance.com%2fowa%2f&reason=0,p1
https://mx1.legio-invest.be/owa/auth/logon.aspx?url=https%3a%2f%2fmx1.legio-invest.be%2fowa%2f&reason=0,p1
https://mail.startwestvlaanderen.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.startwestvlaanderen.be%2fowa%2f&reason=0,p1
https://212.113.66.130/owa/auth/logon.aspx?url=https%3a%2f%2f212.113.66.130%2fowa%2f&reason=0,p1
https://mail.evechetournai.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.evechetournai.be%2fowa%2f&reason=0,p1
https://mail.ledc.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ledc.be%2fowa%2f&reason=0,p1
https://mail.foodpartners.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.foodpartners.be%2fowa%2f&reason=0,p1
https://mail.vastgoednaessens.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vastgoednaessens.be%2fowa%2f&reason=0,p1
https://94.107.224.139/owa/auth/logon.aspx?url=https%3a%2f%2f94.107.224.139%2fowa%2f&reason=0,p1
https://mail.damail.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.damail.eu%2fowa%2f&reason=0,p1
https://mail.pzgavers.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pzgavers.be%2fowa%2f&reason=0,p1
https://84-199-98-140.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-199-98-140.ifiber.telenet-ops.be%2fowa%2f&reason=0,p1
https://mail.arch-teco.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.arch-teco.com%2fowa%2f&reason=0,p1
https://89.22-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f89.22-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://mail.elsen.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.elsen.be%2fowa%2f&reason=0,p1
https://mail.woutersfruit.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.woutersfruit.be%2fowa%2f&reason=0,p1
https://19.84-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f19.84-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://webmail.omnia-cars.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.omnia-cars.be%2fowa%2f&reason=0,p1
https://mail.stevens-april.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.stevens-april.be%2fowa%2f&reason=0,p1
https://webmail.vbjk.be/owa/auth/logon.aspx?url=https://webmail.vbjk.be/owa/&reason=0,p1
https://mail.synctel.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.synctel.be%2fowa%2f&reason=0,p1
https://mail.modave.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.modave.be%2fowa%2f&reason=0,p1
https://mx01.opwijk.be/owa/auth/logon.aspx?url=https%3a%2f%2fmx01.opwijk.be%2fowa%2f&reason=0,p1
https://mail.jmrigo.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.jmrigo.be%2fowa%2f&reason=0,p1
https://host-212-68-197-111.dynamic.voo.be/owa/auth/logon.aspx?url=https%3a%2f%2fhost-212-68-197-111.dynamic.voo.be%2fowa%2f&reason=0,p1
https://mail.vanto.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vanto.be%2fowa%2f&reason=0,p1
https://owa.schrauwen.be/owa/auth/logon.aspx?url=https://owa.schrauwen.be/owa/&reason=0,p1
https://mail.vancleven.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vancleven.be%2fowa%2f&reason=0,p1
https://mail.inforius.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.inforius.be%2fowa%2f&reason=0,p1
https://mail.pro-wash.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pro-wash.be%2fowa%2f&reason=0,p1
https://cas.cesi.be/owa,p1
https://mail.aqualityprotect.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.aqualityprotect.be%2fowa%2f&reason=0,p1
https://mail2.sodimed.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail2.sodimed.be%2fowa%2f&reason=0,p1
https://213.246.197.6/owa/auth/logon.aspx?url=https%3a%2f%2f213.246.197.6%2fowa%2f&reason=0,p1
https://mail.wilsenscleeren.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.wilsenscleeren.be%2fowa%2f&reason=0,p1
https://86.238-179-91.adsl-dyn.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f86.238-179-91.adsl-dyn.isp.belgacom.be%2fowa%2f&reason=0,p1
https://d51531aaf.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd51531aaf.static.telenet.be%2fowa%2f&reason=0,p1
https://webmail.parlementfrancophone.brussels/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.parlementfrancophone.brussels%2fowa%2f&reason=0,p1
https://178-117-81-50.access.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2f178-117-81-50.access.telenet.be%2fowa%2f&reason=0,p1
https://mail.cnc-cbn.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cnc-cbn.be%2fowa%2f&reason=0,p1
https://mail.bekomail.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bekomail.be%2fowa%2f&reason=0,p1
https://mail.foederer.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.foederer.be%2fowa%2f&reason=0,p1
https://mail4.euroshoe.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail4.euroshoe.com%2fowa%2f&reason=0,p1
https://mail.tuytelaers.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.tuytelaers.be%2fowa%2f&reason=0,p1
https://mail.bapobood.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bapobood.be%2fowa%2f&reason=0,p1
https://mail.valcosoft.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.valcosoft.be%2fowa%2f&reason=0,p1
https://d5152d709.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152d709.static.telenet.be%2fowa%2f&reason=0,p1
https://mail2.decospan.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail2.decospan.com%2fowa%2f&reason=0,p1
https://mail-10.malu.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail-10.malu.eu%2fowa%2f&reason=0,p1
https://mail-out.claerboutfilip.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail-out.claerboutfilip.be%2fowa%2f&reason=0,p1
https://193.191.240.50/owa/auth/logon.aspx?url=https%3a%2f%2f193.191.240.50%2fowa%2f&reason=0,p1
https://212.71.21.218.res.static.edpnet.net/owa/auth/logon.aspx?url=https%3a%2f%2f212.71.21.218.res.static.edpnet.net%2fowa%2f&reason=0,p1
https://exchange.windo.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.windo.be%2fowa%2f&reason=0,p1
https://mail.savings-banks.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.savings-banks.com%2fowa%2f&reason=0,p1
https://mail.vanloockmotoren.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vanloockmotoren.com%2fowa%2f&reason=0,p1
https://d5153075b.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5153075b.static.telenet.be%2fowa%2f&reason=0,p1
https://14.233-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f14.233-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://mail.culot.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.culot.be%2fowa%2f&reason=0,p1
https://d5153124e.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5153124e.static.telenet.be%2fowa%2f&reason=0,p1
https://mailsrv.telservice.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailsrv.telservice.be%2fowa%2f&reason=0,p1
https://mail.stordeur-grandjean.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.stordeur-grandjean.be%2fowa%2f&reason=0,p1
https://mails.jeunesautravail.be/owa/auth/logon.aspx?url=https%3a%2f%2fmails.jeunesautravail.be%2fowa%2f&reason=0,p1
https://mail.solid.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.solid.eu%2fowa%2f&reason=0,p1
https://85.234-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f85.234-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://242.27-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f242.27-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://mail.amcautomationsa.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.amcautomationsa.com%2fowa%2f&reason=0,p1
https://dd5fb4eac.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd5fb4eac.static.telenet.be%2fowa%2f&reason=0,p1
https://213.219.170.76.adsl.static.edpnet.net/owa/auth/logon.aspx?url=https%3a%2f%2f213.219.170.76.adsl.static.edpnet.net%2fowa%2f&reason=0,p1
https://mailserver.tritontravel.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailserver.tritontravel.be%2fowa%2f&reason=0,p1
https://remote.kegels-co.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.kegels-co.be%2fowa%2f&reason=0,p1
https://138.64-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f138.64-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p1
https://mail.chc.be/owa/auth/logon.aspx?url=https://mail.chc.be/owa/&reason=0,p1
https://mail.barreaudeliege.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.barreaudeliege.be%2fowa%2f&reason=0,p1
https://mail.aalterpaint.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.aalterpaint.be%2fowa%2f&reason=0,p1
https://mail.ostara-bio.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ostara-bio.be%2fowa%2f&reason=0,p1
https://mail.lindelo.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.lindelo.be%2fowa%2f&reason=0,p1
https://sctdevmyhrw-rt.ngahr.com/owa/auth/logon.aspx?url=https%3a%2f%2fsctdevmyhrw-rt.ngahr.com%2fowa%2f&reason=0,p1
```
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/p10.csv
```csv path="/Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/p10.csv"
https://outlook.mymailbox.be/owa/auth/logon.aspx?url=https%3a%2f%2foutlook.mymailbox.be%2fowa%2f&reason=0,p10
https://mail.troisponts.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.troisponts.be%2fowa%2f&reason=0,p10
https://webmail.steunpuntadoptie.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.steunpuntadoptie.be%2fowa%2f&reason=0,p10
https://mail.varo.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.varo.com%2fowa%2f&reason=0,p10
https://d54c72f3a.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd54c72f3a.static.telenet.be%2fowa%2f&reason=0,p10
https://www.webmail.dison.be/owa/auth/logon.aspx?url=https://www.webmail.dison.be/owa/&reason=0&s=F6A054B0408826C82E86B098CD7322C5F871DEE9,p10
https://owa.isk.be/owa/auth/logon.aspx?url=https%3a%2f%2fowa.isk.be%2fowa%2f&reason=0,p10
https://212.113.78.89/owa/auth/logon.aspx?url=https%3a%2f%2f212.113.78.89%2fowa%2f&reason=0,p10
https://www.goowai.com/,p10
https://post.blockxgroup.com/owa/auth/logon.aspx?url=https%3a%2f%2fpost.blockxgroup.com%2fowa%2f&reason=0,p10
https://mail.amival.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.amival.be%2fowa%2f&reason=0,p10
https://owa.lachs.be/,p10
https://ip-188-118-38-173.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-38-173.reverse.destiny.be%2fowa%2f&reason=0,p10
https://webmail.sowaer.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.sowaer.be%2fowa%2f&reason=0,p10
https://mail1.heracles.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail1.heracles.be%2fowa%2f&reason=0,p10
https://193.190.220.2/owa/auth/logon.aspx?url=https%3a%2f%2f193.190.220.2%2fowa%2f&reason=0,p10
https://mail.etius.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.etius.be%2fowa%2f&reason=0,p10
https://webmail.intranet.maldegem.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.intranet.maldegem.be%2fowa%2f&reason=0,p10
https://84-199-92-9.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-199-92-9.ifiber.telenet-ops.be%2fowa%2f&reason=0,p10
https://178-118-184-132.access.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2f178-118-184-132.access.telenet.be%2fowa%2f&reason=0,p10
https://84-199-97-203.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-199-97-203.ifiber.telenet-ops.be%2fowa%2f&reason=0,p10
https://mail.trotec.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.trotec.be%2fowa%2f&reason=0,p10
https://mail.cerclindus.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cerclindus.be%2fowa%2f&reason=0,p10
https://d5152c9d5.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152c9d5.static.telenet.be%2fowa%2f&reason=0,p10
https://mail.prolinesystems.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.prolinesystems.be%2fowa%2f&reason=0,p10
https://213.139-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f213.139-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://mail2.gdwrobert.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail2.gdwrobert.be%2fowa%2f&reason=0,p10
https://195.71.144.195.ipv4.evonet.be/owa/auth/logon.aspx?url=https%3a%2f%2f195.71.144.195.ipv4.evonet.be%2fowa%2f&reason=0,p10
https://webmail.trustteam.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.trustteam.be%2fowa%2f&reason=0,p10
https://exchange.hyphost.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.hyphost.be%2fowa%2f&reason=0,p10
https://mail.blomfashion.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.blomfashion.com%2fowa%2f&reason=0,p10
https://138.242-136-217.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f138.242-136-217.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://mail.autoconfig.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.autoconfig.be%2fowa%2f&reason=0,p10
https://webmail.armstronginternational.eu/owa/auth/logon.aspx?url=https://webmail.armstronginternational.eu/owa/&reason=0,p10
https://mail.verbruggen-group.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.verbruggen-group.eu%2fowa%2f&reason=0,p10
https://84-198-139-38.access.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-198-139-38.access.telenet.be%2fowa%2f&reason=0,p10
https://d5152f320.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152f320.static.telenet.be%2fowa%2f&reason=0,p10
https://212.8.173.71/owa/auth/logon.aspx?url=https%3a%2f%2f212.8.173.71%2fowa%2f&reason=0,p10
https://mail.stadtongeren.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.stadtongeren.be%2fowa%2f&reason=0,p10
https://d528f470a.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd528f470a.static.telenet.be%2fowa%2f&reason=0,p10
https://mail.alcyonbelux.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.alcyonbelux.be%2fowa%2f&reason=0,p10
https://remote.wcloud.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.wcloud.be%2fowa%2f&reason=0,p10
https://remote.eurogym.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.eurogym.be%2fowa%2f&reason=0,p10
https://mail.wijckmans.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.wijckmans.be%2fowa%2f&reason=0,p10
https://mail.mr-bricolage.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.mr-bricolage.be%2fowa%2f&reason=0,p10
https://mail.csmstghislain.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.csmstghislain.be%2fowa%2f&reason=0,p10
https://40.19-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f40.19-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://217.112.191.82/owa/auth/logon.aspx?url=https%3a%2f%2f217.112.191.82%2fowa%2f&reason=0,p10
https://mail.dcase.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.dcase.be%2fowa%2f&reason=0,p10
https://212-166-14-130.win.be/owa/auth/logon.aspx?url=https%3a%2f%2f212-166-14-130.win.be%2fowa%2f&reason=0,p10
https://outlook.veos.be/owa/auth/logon.aspx?url=https%3a%2f%2foutlook.veos.be%2fowa%2f&reason=0,p10
https://mail.dedoncker.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.dedoncker.be%2fowa%2f&reason=0,p10
https://212.123.31.37/owa/auth/logon.aspx?url=https%3a%2f%2f212.123.31.37%2fowa%2f&reason=0,p10
https://webmail.vzwdebolster.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.vzwdebolster.be%2fowa%2f&reason=0,p10
https://exchange.cbd.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.cbd.be%2fowa%2f&reason=0,p10
https://webmail.i-eng.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.i-eng.be%2fowa%2f&reason=0,p10
https://da.cnue.be/owa/auth/logon.aspx?url=https%3a%2f%2fda.cnue.be%2fowa%2f&reason=0,p10
https://mail.totalconcept.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.totalconcept.be%2fowa%2f&reason=0,p10
https://28.24-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f28.24-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://mail.securiteautomobile.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.securiteautomobile.be%2fowa%2f&reason=0,p10
https://mail.cloudbizz.net/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cloudbizz.net%2fowa&reason=0,p10
https://ucloud.uvion.be/owa/auth/logon.aspx?url=https%3a%2f%2fucloud.uvion.be%2fowa%2f&reason=0,p10
https://mail.vts.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vts.be%2fowa%2f&reason=0,p10
https://exchange.bamelis-kindt.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.bamelis-kindt.be%2fowa%2f&reason=0,p10
https://mail.debaillie.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.debaillie.com%2fowa%2f&reason=0,p10
https://213.211.179.77.static.edpnet.net/owa/auth/logon.aspx?url=https%3a%2f%2f213.211.179.77.static.edpnet.net%2fowa%2f&reason=0,p10
https://d515302ca.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd515302ca.static.telenet.be%2fowa%2f&reason=0,p10
https://extranet.botha.be/owa/auth/logon.aspx?url=https%3a%2f%2fextranet.botha.be%2fowa%2f&reason=0,p10
https://d5152e4d2.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152e4d2.static.telenet.be%2fowa%2f&reason=0,p10
https://mail.carrieresduhainaut.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.carrieresduhainaut.com%2fowa%2f&reason=0,p10
https://mailhost.bajart.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailhost.bajart.be%2fowa%2f&reason=0,p10
https://remote.bbcs.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.bbcs.be%2fowa%2f&reason=0,p10
https://mail.ventilairgroup.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ventilairgroup.com%2fowa%2f&reason=0,p10
https://199.166-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f199.166-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://mail.breydel.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.breydel.be%2fowa%2f&reason=0,p10
https://87.51-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f87.51-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://mail.calis.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.calis.be%2fowa%2f&reason=0,p10
https://mail.turbel.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.turbel.be%2fowa%2f&reason=0,p10
https://mail.willems.be/owa/,p10
https://mail.carimar.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.carimar.be%2fowa%2f&reason=0,p10
https://d5152df65.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152df65.static.telenet.be%2fowa%2f&reason=0,p10
https://mail.bouts.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bouts.com%2fowa%2f&reason=0,p10
https://mail.eigenwoonst.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.eigenwoonst.be%2fowa%2f&reason=0,p10
https://24-193-183-91.vdc.becloudready.be/owa/auth/logon.aspx?url=https%3a%2f%2f24-193-183-91.vdc.becloudready.be%2fowa%2f&reason=0,p10
https://mail.vclbdewisselantwerpen.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vclbdewisselantwerpen.be%2fowa%2f&reason=0,p10
https://mail.azjanportaels.be/CookieAuth.dll?GetLogon?curl=Z2Fowa&reason=0&formdir=1,p10
https://178.248.166.9/owa/auth/logon.aspx?url=https%3a%2f%2f178.248.166.9%2fowa%2f&reason=0,p10
https://81.82.247.148/owa/auth/logon.aspx?url=https%3a%2f%2f81.82.247.148%2fowa%2f&reason=0,p10
https://mail.ripa.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ripa.be%2fowa%2f&reason=0,p10
https://exch.landi.be/owa/auth/logon.aspx?url=https%3a%2f%2fexch.landi.be%2fowa%2f&reason=0,p10
https://remote.barre.eu/owa/auth/logon.aspx?url=https%3a%2f%2fremote.barre.eu%2fowa%2f&reason=0,p10
https://mail.oil-nv.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.oil-nv.be%2fowa%2f&reason=0,p10
https://mx1.voo.barre.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmx1.voo.barre.eu%2fowa%2f&reason=0,p10
https://remote.belwood.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.belwood.be%2fowa%2f&reason=0,p10
https://mail.thehotel.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.thehotel.be%2fowa%2f&reason=0,p10
https://remote.ivens-cb.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.ivens-cb.be%2fowa%2f&reason=0,p10
https://mail.gdwkochuyt.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.gdwkochuyt.be%2fowa%2f&reason=0,p10
https://248.231-136-217.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f248.231-136-217.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://mail.hlvnv.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.hlvnv.be%2fowa%2f&reason=0,p10
https://mail.tpasrel.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.tpasrel.be%2fowa%2f&reason=0,p10
https://mail.avelgem.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.avelgem.be%2fowa%2f&reason=0,p10
https://mail.zit-idee.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.zit-idee.be%2fowa%2f&reason=0,p10
https://exchange.nowitec.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.nowitec.be%2fowa%2f&reason=0,p10
https://185.47.68.54/owa/auth/logon.aspx?url=https%3a%2f%2f185.47.68.54%2fowa%2f&reason=0,p10
https://webmail.anl-plastics.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.anl-plastics.be%2fowa%2f&reason=0,p10
https://remote.ocular.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.ocular.be%2fowa%2f&reason=0,p10
https://mail.ipc.be/owa/,p10
https://mail.toscon.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.toscon.com%2fowa%2f&reason=0,p10
https://mail.theo.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.theo.be%2fowa%2f&reason=0,p10
https://mail.cbe-antw.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cbe-antw.be%2fowa%2f&reason=0,p10
https://212.113.78.21/owa/,p10
https://73.187-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f73.187-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://d51531ab4.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd51531ab4.static.telenet.be%2fowa%2f&reason=0,p10
https://mail.vanopstal.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vanopstal.be%2fowa%2f&reason=0,p10
https://exchange.vergalle.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.vergalle.be%2fowa%2f&reason=0,p10
https://mail.diagnosecentrum-lommel.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.diagnosecentrum-lommel.be%2fowa%2f&reason=0,p10
https://mail1.soleras.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail1.soleras.com%2fowa%2f&reason=0,p10
https://193.190.73.203/owa/auth/logon.aspx?url=https%3a%2f%2f193.190.73.203%2fowa%2f&reason=0,p10
https://exchange.bretagne-europe.eu/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.bretagne-europe.eu%2fowa%2f&reason=0,p10
https://mail.eecke.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.eecke.be%2fowa%2f&reason=0,p10
https://84-199-90-179.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-199-90-179.ifiber.telenet-ops.be%2fowa%2f&reason=0,p10
https://d51530258.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd51530258.static.telenet.be%2fowa%2f&reason=0,p10
https://kowari.greenshift.eu/,p10
https://remote.vhv.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.vhv.be%2fowa%2f&reason=0,p10
https://mail.curando.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.curando.be%2fowa%2f&reason=0,p10
https://185.109-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f185.109-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://d51530b18.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd51530b18.static.telenet.be%2fowa%2f&reason=0,p10
https://d5152c853.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152c853.static.telenet.be%2fowa%2f&reason=0,p10
https://remote.leidgens.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.leidgens.be%2fowa%2f&reason=0,p10
https://mail.dvdbconsult.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.dvdbconsult.be%2fowa%2f&reason=0,p10
https://193.149.246.172/owa/,p10
https://zaventem.jeol.be/owa/auth/logon.aspx?url=https%3a%2f%2fzaventem.jeol.be%2fowa%2f&reason=0,p10
https://213.211.172.26.static.edpnet.net/owa/auth/logon.aspx?url=https%3a%2f%2f213.211.172.26.static.edpnet.net%2fowa%2f&reason=0,p10
https://88.140-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f88.140-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://d54c72db3.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd54c72db3.static.telenet.be%2fowa%2f&reason=0,p10
https://ip-94-140-185-20.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-94-140-185-20.reverse.destiny.be%2fowa%2f&reason=0,p10
https://ip-188-118-20-134.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-20-134.reverse.destiny.be%2fowa%2f&reason=0,p10
https://mail.e-ndc.org/owa/auth/logon.aspx?url=https%3a%2f%2fmail.e-ndc.org%2fowa%2f&reason=0,p10
https://mail.calldesk.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.calldesk.be%2fowa%2f&reason=0,p10
https://webmail.spandex.com/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.spandex.com%2fowa%2f&reason=0,p10
https://ip-94-140-185-129.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-94-140-185-129.reverse.destiny.be%2fowa%2f&reason=0,p10
https://d5152e06e.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152e06e.static.telenet.be%2fowa%2f&reason=0,p10
https://193.191.120.2/owa/auth/logon.aspx?url=https%3a%2f%2f193.191.120.2%2fowa%2f&reason=0,p10
https://mail.meiko-europe.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.meiko-europe.eu%2fowa%2f&reason=0,p10
https://185.151.112.65/owa/auth/logon.aspx?url=https%3a%2f%2f185.151.112.65%2fowa%2f&reason=0,p10
https://d5152c80f.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152c80f.static.telenet.be%2fowa%2f&reason=0,p10
https://150.1-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f150.1-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://84-199-66-74.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-199-66-74.ifiber.telenet-ops.be%2fowa%2f&reason=0,p10
https://malle.ask-romein.com/owa/auth/logon.aspx?url=https%3a%2f%2fmalle.ask-romein.com%2fowa%2f&reason=0,p10
https://gateway.vanpelt-nv.be/owa/auth/logon.aspx?url=https%3a%2f%2fgateway.vanpelt-nv.be%2fowa%2f&reason=0,p10
https://126.44-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f126.44-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://d5152ea5f.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152ea5f.static.telenet.be%2fowa%2f&reason=0,p10
https://mail.nibotechnics.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.nibotechnics.com%2fowa%2f&reason=0,p10
https://mail.empire.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.empire.be%2fowa%2f&reason=0,p10
https://mail.kdcpartners.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.kdcpartners.com%2fowa%2f&reason=0,p10
https://d5152ed58.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152ed58.static.telenet.be%2fowa%2f&reason=0,p10
https://mail.devalier.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.devalier.be%2fowa%2f&reason=0,p10
https://mail2.foederer.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail2.foederer.be%2fowa%2f&reason=0,p10
https://remote.depotdesarts.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.depotdesarts.be%2fowa%2f&reason=0,p10
https://mail.pmvlaanderen.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pmvlaanderen.be%2fowa%2f&reason=0,p10
https://38.113-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f38.113-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://pophost.ppp.be/owa/auth/logon.aspx?url=https%3a%2f%2fpophost.ppp.be%2fowa%2f&reason=0,p10
https://mail.kortenberg.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.kortenberg.be%2fowa%2f&reason=0,p10
https://mail.compaan.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.compaan.be%2fowa%2f&reason=0,p10
https://182.39-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f182.39-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://mail.lambert-chemicals.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.lambert-chemicals.com%2fowa%2f&reason=0,p10
https://112.228-136-217.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f112.228-136-217.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://mail.westflower.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.westflower.be%2fowa%2f&reason=0,p10
https://194.78.47.67/owa/auth/logon.aspx?url=https%3a%2f%2f194.78.47.67%2fowa%2f&reason=0,p10
https://mail.technocampus.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.technocampus.be%2fowa%2f&reason=0,p10
https://mail.menken.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.menken.be%2fowa%2f&reason=0,p10
https://exchange.dlo.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.dlo.be%2fowa%2f&reason=0,p10
https://mail.hssn.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.hssn.be%2fowa%2f&reason=0,p10
https://mail.woodtex.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.woodtex.be%2fowa%2f&reason=0,p10
https://mail.notairebovy.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.notairebovy.be%2fowa%2f&reason=0,p10
https://ip-188-118-18-118.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-18-118.reverse.destiny.be%2fowa%2f&reason=0,p10
https://154.42.1.4/owa/auth/logon.aspx?url=https%3a%2f%2f154.42.1.4%2fowa%2f&reason=0,p10
https://remote.beal.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.beal.be%2fowa%2f&reason=0,p10
https://mailhost.flag2000.com/owa/auth/logon.aspx?url=https%3a%2f%2fmailhost.flag2000.com%2fowa%2f&reason=0,p10
https://213.246.229.64/owa/auth/logon.aspx?url=https%3a%2f%2f213.246.229.64%2fowa%2f&reason=0,p10
https://mail.zensoft.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.zensoft.be%2fowa%2f&reason=0,p10
https://mail.mext.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.mext.be%2fowa%2f&reason=0,p10
https://d5152c0e9.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152c0e9.static.telenet.be%2fowa%2f&reason=0,p10
https://165.55-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f165.55-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://mail.bdb.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bdb.be%2fowa%2f&reason=0,p10
https://owa.eu.ngahr.com/owa/auth/logon.aspx?url=https%3a%2f%2fowa.eu.ngahr.com%2fowa%2f&reason=0,p10
https://mail.gregoir.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.gregoir.be%2fowa%2f&reason=0,p10
https://mail.mourik.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.mourik.be%2fowa%2f&reason=0,p10
https://mail.avocat-lourtie.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.avocat-lourtie.be%2fowa%2f&reason=0,p10
https://dd5fb4535.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd5fb4535.static.telenet.be%2fowa%2f&reason=0,p10
https://ip-188-118-13-67.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-13-67.reverse.destiny.be%2fowa%2f&reason=0,p10
https://mail.moderna.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.moderna.be%2fowa%2f&reason=0,p10
https://16.115-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f16.115-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://212-123-15-98.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f212-123-15-98.ifiber.telenet-ops.be%2fowa%2f&reason=0,p10
https://remote.afschrift.com/owa/auth/logon.aspx?url=https%3a%2f%2fremote.afschrift.com%2fowa%2f&reason=0,p10
https://243.222-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f243.222-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p10
https://remote.sickmeteringsystems.com/owa/auth/logon.aspx?url=https%3a%2f%2fremote.sickmeteringsystems.com%2fowa%2f&reason=0,p10
https://mail.uniek.org/owa/auth/logon.aspx?url=https%3a%2f%2fmail.uniek.org%2fowa%2f&reason=0,p10
https://d51530610.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd51530610.static.telenet.be%2fowa%2f&reason=0,p10
https://86.250-200-80.adsl-static.isp.belgacom.be/owa/,p10
```
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/p11.csv
```csv path="/Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/p11.csv"
https://mailing.swabe.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailing.swabe.be%2fowa%2f&reason=0,p11
https://mail.vanrobaeys.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vanrobaeys.com%2fowa%2f&reason=0,p11
https://mail.xdga.be/owa/auth/logon.aspx?url=https%3a%2f%2fw2k12r2exch%2fowa%2f&reason=0,p11
https://mail.omniplex.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.omniplex.be%2fowa%2f&reason=0,p11
https://mail.mazoutexpres.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.mazoutexpres.be%2fowa%2f&reason=0,p11
https://ras.dcase.be/owa/auth/logon.aspx?url=https%3a%2f%2fras.dcase.be%2fowa%2f&reason=0,p11
https://ip-188-118-54-157.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-54-157.reverse.destiny.be%2fowa%2f&reason=0,p11
https://mail.informatech.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.informatech.be%2fowa%2f&reason=0,p11
https://server.filotax.be/owa/auth/logon.aspx?url=https%3a%2f%2fserver.filotax.be%2fowa%2f&reason=0,p11
https://mail.martin.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.martin.be%2fowa%2f&reason=0,p11
https://mail.aqua-service.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.aqua-service.be%2fowa%2f&reason=0,p11
https://mail.vanca.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vanca.be%2fowa%2f&reason=0,p11
https://remote.sa-grandjean.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.sa-grandjean.be%2fowa%2f&reason=0,p11
https://mail.deproost.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.deproost.be%2fowa%2f&reason=0,p11
https://mail-20.malu.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail-20.malu.eu%2fowa%2f&reason=0,p11
https://65.76-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f65.76-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p11
https://outlook.notstiers.be/owa/auth/logon.aspx?url=https%3a%2f%2foutlook.notstiers.be%2fowa%2f&reason=0,p11
https://pigeon.office.net7.be/owa/auth/logon.aspx?url=https%3a%2f%2fpigeon.office.net7.be%2fowa%2f&reason=0,p11
https://194.8.52.59/owa/auth/logon.aspx?url=https%3a%2f%2f194.8.52.59%2fowa%2f&reason=0,p11
https://mail.cec-kek.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cec-kek.be%2fowa%2f&reason=0,p11
https://mail.radio-iro.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.radio-iro.be%2fowa%2f&reason=0,p11
https://42.110-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f42.110-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p11
https://remote.imaginetravel.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.imaginetravel.be%2fowa%2f&reason=0,p11
https://86.39.203.16.static.hosted.by.easyhost.be/owa/auth/logon.aspx?url=https%3a%2f%2f86.39.203.16.static.hosted.by.easyhost.be%2fowa%2f&reason=0,p11
https://193.221.14.5/owa/auth/logon.aspx?url=https%3a%2f%2f193.221.14.5%2fowa%2f&reason=0,p11
https://mail.delvaux-co.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.delvaux-co.be%2fowa%2f&reason=0,p11
https://mail.pierrecollignon.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pierrecollignon.be%2fowa%2f&reason=0,p11
https://mail01.isv.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail01.isv.be%2fowa%2f&reason=0,p11
https://166.2-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f166.2-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p11
https://227.21-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f227.21-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p11
https://host-78-129-6-51.dynamic.voo.be/owa/auth/logon.aspx?url=https%3a%2f%2fhost-78-129-6-51.dynamic.voo.be%2fowa%2f&reason=0,p11
https://dd5fb4b5f.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd5fb4b5f.static.telenet.be%2fowa%2f&reason=0,p11
https://d54c53793.access.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd54c53793.access.telenet.be%2fowa%2f&reason=0,p11
https://213.211.179.78.static.edpnet.net/owa/auth/logon.aspx?url=https%3a%2f%2f213.211.179.78.static.edpnet.net%2fowa%2f&reason=0,p11
https://42.34-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f42.34-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p11
https://32.140-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f32.140-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p11
https://212.35.104.52/owa/auth/logon.aspx?url=https%3a%2f%2f212.35.104.52%2fowa%2f&reason=0,p11
https://mail.polyalboats.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.polyalboats.be%2fowa%2f&reason=0,p11
https://dd5fb4533.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd5fb4533.static.telenet.be%2fowa%2f&reason=0,p11
https://mail.equal-partners.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.equal-partners.eu%2fowa%2f&reason=0,p11
https://mail.myadmin.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.myadmin.be%2fowa%2f&reason=0,p11
https://11.7-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f11.7-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p11
https://mail.natpat.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.natpat.be%2fowa%2f&reason=0,p11
https://mail.afschrift-nv.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.afschrift-nv.be%2fowa%2f&reason=0,p11
https://jason.sybia.be/owa/auth/logon.aspx?url=https://jason.sybia.be/owa/&reason=0,p11
https://46.16.240.53/owa/auth/logon.aspx?url=https%3a%2f%2f46.16.240.53%2fowa%2f&reason=0,p11
https://99.19-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f99.19-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p11
https://exchange.stephensongarden.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.stephensongarden.be%2fowa%2f&reason=0,p11
https://mail.bats.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bats.be%2fowa%2f&reason=0,p11
https://uu194-7-131-72.unknown.uunet.be/owa/auth/logon.aspx?url=https%3a%2f%2fuu194-7-131-72.unknown.uunet.be%2fowa%2f&reason=0,p11
https://remote.lexer.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.lexer.be%2fowa%2f&reason=0,p11
https://d54c76e6d.static.telenet.be/owa/,p11
https://owa.desknet.be/owa/auth/logon.aspx?url=https%3a%2f%2fowa.desknet.be%2fowa%2f&reason=0,p11
https://mailrelay2.brabo.com/owa/auth/logon.aspx?url=https%3a%2f%2fmailrelay2.brabo.com%2fowa%2f&reason=0,p11
https://webmail.pharmaforce.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.pharmaforce.be%2fowa%2f&reason=0,p11
https://webmail.covida.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.covida.be%2fowa%2f&reason=0,p11
https://mail.01multi.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.01multi.com%2fowa%2f&reason=0,p11
https://mail.lareco.net/owa/auth/logon.aspx?url=https://mail.lareco.net/owa/&reason=0,p11
https://mail.resilux.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.resilux.com%2fowa%2f&reason=0,p11
https://35.49-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f35.49-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p11
https://owapps.ugent.be/op/generate.aspx,p11
https://staf.speelplein.net/owa/auth/logon.aspx?url=https://staf.speelplein.net/owa/&reason=0,p11
https://mail.paesen.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.paesen.be%2fowa%2f&reason=0,p11
https://mail.klinger.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.klinger.be%2fowa%2f&reason=0,p11
https://mail.stavelot.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.stavelot.be%2fowa%2f&reason=0,p11
https://mail.vandezande.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vandezande.com%2fowa%2f&reason=0,p11
https://mail.abeco.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.abeco.be%2fowa%2f&reason=0,p11
https://www.sowalfin.be/creation/,p11
https://mailserver1.casteleinsealants.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailserver1.casteleinsealants.be%2fowa%2f&reason=0,p11
https://mail-smtp.ferranti.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail-smtp.ferranti.be%2fowa%2f&reason=0,p11
https://mail.vjn-legal.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vjn-legal.be%2fowa%2f&reason=0,p11
https://84-199-72-157.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-199-72-157.ifiber.telenet-ops.be%2fowa%2f&reason=0,p11
https://mail.bernard-cordeel.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bernard-cordeel.eu%2fowa%2f&reason=0,p11
https://smtp.inmac.be/owa/auth/logon.aspx?url=https%3a%2f%2fsmtp.inmac.be%2fowa%2f&reason=0,p11
https://exchange.saftam.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.saftam.be%2fowa%2f&reason=0,p11
https://ip-188-118-59-233.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-59-233.reverse.destiny.be%2fowa%2f&reason=0,p11
https://mail.noordnatie.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.noordnatie.be%2fowa%2f&reason=0,p11
https://mail.gocavlaanderen.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.gocavlaanderen.be%2fowa%2f&reason=0,p11
https://mail.zwijsen.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.zwijsen.be%2fowa%2f&reason=0,p11
https://spamtitan.verviers.be/owa/auth/logon.aspx?url=https%3a%2f%2fspamtitan.verviers.be%2fowa%2f&reason=0,p11
https://mail.levensvreugde.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.levensvreugde.be%2fowa%2f&reason=0,p11
https://mail.flagey.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.flagey.be%2fowa%2f&reason=0,p11
https://netsc-3.province.luxembourg.be/owa/auth/logon.aspx?url=https%3a%2f%2fnetsc-3.province.luxembourg.be%2fowa&reason=0,p11
https://remote.scholzen.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.scholzen.be%2fowa%2f&reason=0,p11
https://remote.ecogest.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.ecogest.be%2fowa%2f&reason=0,p11
https://mail.deliva.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.deliva.be%2fowa%2f&reason=0,p11
https://mail.plpcoatings.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.plpcoatings.com%2fowa%2f&reason=0,p11
https://mail.liftinc.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.liftinc.be%2fowa%2f&reason=0,p11
https://d54c71eba.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd54c71eba.static.telenet.be%2fowa%2f&reason=0,p11
https://mail.pacapime.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pacapime.be%2fowa%2f&reason=0,p11
https://d5152ff65.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152ff65.static.telenet.be%2fowa%2f&reason=0,p11
https://ip-188-118-34-116.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-34-116.reverse.destiny.be%2fowa%2f&reason=0,p11
https://d54c72f7b.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd54c72f7b.static.telenet.be%2fowa%2f&reason=0,p11
https://mailhost.catronics.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailhost.catronics.be%2fowa%2f&reason=0,p11
https://po.intoithost.be/owa/auth/logon.aspx?url=https%3a%2f%2fpo.intoithost.be%2fowa%2f&reason=0,p11
https://d5152d946.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152d946.static.telenet.be%2fowa%2f&reason=0,p11
https://remote.mopan-alken.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.mopan-alken.be%2fowa%2f&reason=0,p11
https://wdc.fasd.be/owa/auth/logon.aspx?url=https%3a%2f%2fwdc.fasd.be%2fowa%2f&reason=0,p11
https://remote.lecopaindignace.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.lecopaindignace.be%2fowa%2f&reason=0,p11
https://mail.establis.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.establis.eu%2fowa%2f&reason=0,p11
https://mail.goossaert.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.goossaert.be%2fowa%2f&reason=0,p11
https://mail.glascentrabavikhove.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.glascentrabavikhove.be%2fowa%2f&reason=0,p11
https://webmail.triangle-trading.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.triangle-trading.be%2fowa%2f&reason=0,p11
https://164.212-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f164.212-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p11
https://remote.ackmo.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.ackmo.be%2fowa%2f&reason=0,p11
https://exch.jodoigne.be/owa/auth/logon.aspx?url=https%3a%2f%2fexch.jodoigne.be%2fowa%2f&reason=0,p11
https://mail.decoene.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.decoene.eu%2fowa%2f&reason=0,p11
https://84-199-74-73.ifiber.telenet-ops.be/owa/,p11
https://mail.le.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.le.be%2fowa%2f&reason=0,p11
https://84-199-82-202.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-199-82-202.ifiber.telenet-ops.be%2fowa%2f&reason=0,p11
https://d5152e66a.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152e66a.static.telenet.be%2fowa%2f&reason=0,p11
https://mail.verfaillie-leroy.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.verfaillie-leroy.be%2fowa%2f&reason=0,p11
https://webmail.brussels/lm_auth_proxy?DoLMLogin?curl=L2fowa&curlid=3249872640-2523951256,p11
https://mail.rus-tony.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.rus-tony.be%2fowa%2f&reason=0,p11
https://da.challenge-partners.com/owa/auth/logon.aspx?url=https%3a%2f%2fda.challenge-partners.com%2fowa%2f&reason=0,p11
https://84-199-79-124.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-199-79-124.ifiber.telenet-ops.be%2fowa%2f&reason=0,p11
https://owa.reliancelaw.be/adfs/ls?wa=wsignin1.0&wtrealm=https%3a%2f%2fmail.reliancelaw.be%2fowa%2f&wctx=rm%3d0%26id%3dpassive%26ru%3d%252fowa%252f&wct=2022-05-16T13%3a38%3a20Z,p11
https://mailhost.immoexp.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailhost.immoexp.be%2fowa%2f&reason=0,p11
https://remote.ecopack.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.ecopack.be%2fowa%2f&reason=0,p11
https://mail.it-anywhere.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.it-anywhere.com%2fowa%2f&reason=0,p11
https://mail.droeshaut.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.droeshaut.be%2fowa%2f&reason=0,p11
https://1.59-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f1.59-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p11
https://mail.de-langhe.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.de-langhe.be%2fowa%2f&reason=0,p11
https://mail.creee.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.creee.be%2fowa%2f&reason=0,p11
https://mail.gaa.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.gaa.be%2fowa%2f&reason=0,p11
https://94.107.195.188/owa/auth/logon.aspx?url=https%3a%2f%2f94.107.195.188%2fowa%2f&reason=0,p11
https://remote.facto.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.facto.be%2fowa%2f&reason=0,p11
https://mail2.alpeuregio.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail2.alpeuregio.eu%2fowa%2f&reason=0,p11
https://webmail.chrhautesenne.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.chrhautesenne.be%2fowa%2f&reason=0,p11
https://exchange.woonproject.biz/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.woonproject.biz%2fowa%2f&reason=0,p11
https://mail.ocmw-oudenburg.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ocmw-oudenburg.be%2fowa%2f&reason=0,p11
https://mail.pomax.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pomax.com%2fowa%2f&reason=0,p11
https://mail.clbgroup.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.clbgroup.be%2fowa%2f&reason=0,p11
https://mail.cpl-industrie.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cpl-industrie.be%2fowa%2f&reason=0,p11
```
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/p1_xlsx/p1-Sheet1.csv
Binary file available at https://raw.githubusercontent.com/KittenBusters/CharmingKitten/refs/heads/main/Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/p1_xlsx/p1-Sheet1.csv
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/p2.csv
```csv path="/Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/p2.csv"
https://d5152e8a6.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152e8a6.static.telenet.be%2fowa%2f&reason=0,p2
https://d5152f12e.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152f12e.static.telenet.be%2fowa%2f&reason=0,p2
https://da.associatiffinancier.be/owa/auth/logon.aspx?url=https%3a%2f%2fda.associatiffinancier.be%2fowa%2f&reason=0,p2
https://webmail.adpo.com/owa/auth/logon.aspx?url=https://webmail.adpo.com/OWA/&reason=0,p2
https://mail.idp-shipyard.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.idp-shipyard.be%2fowa%2f&reason=0,p2
https://mail.cawzuidwestvlaanderen.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cawzuidwestvlaanderen.be%2fowa%2f&reason=0,p2
https://mail.molconinterwheels.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.molconinterwheels.com%2fowa%2f&reason=0,p2
https://mail.procotex.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.procotex.com%2fowa%2f&reason=0,p2
https://94.22-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f94.22-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://courriel.province.luxembourg.be/owa/auth/logon.aspx?url=https%3a%2f%2fcourriel.province.luxembourg.be%2fowa&reason=0,p2
https://mail.abm-accountants.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.abm-accountants.com%2fowa%2f&reason=0,p2
https://host-85-26-75-80.dynamic.voo.be/owa/auth/logon.aspx?url=https%3a%2f%2fhost-85-26-75-80.dynamic.voo.be%2fowa%2f&reason=0,p2
https://uu212-190-146-60.unknown.uunet.be/owa/auth/logon.aspx?url=https%3a%2f%2fuu212-190-146-60.unknown.uunet.be%2fowa%2f&reason=0,p2
https://exchange.tradecom-acpeu.org/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.tradecom-acpeu.org%2fowa%2f&reason=0,p2
https://remote.borginsole.com/owa/auth/logon.aspx?url=https%3a%2f%2fremote.borginsole.com%2fowa%2f&reason=0,p2
https://mail.ham.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ham.be%2fowa%2f&reason=0,p2
https://mail.biofresh.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.biofresh.be%2fowa%2f&reason=0,p2
https://mail.artilat.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.artilat.be%2fowa%2f&reason=0,p2
https://220.25-247-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f220.25-247-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://mail.myunderwear24.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.myunderwear24.be%2fowa%2f&reason=0,p2
https://mail.damman.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.damman.be%2fowa%2f&reason=0,p2
https://247.214-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f247.214-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://kuurne.bouttens.be/owa/auth/logon.aspx?url=https%3a%2f%2fkuurne.bouttens.be%2fowa%2f&reason=0,p2
https://mail.wybo.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.wybo.be%2fowa%2f&reason=0,p2
https://remote.pbservice.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.pbservice.be%2fowa&reason=0,p2
https://mail.universalpharma.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.universalpharma.be%2fowa%2f&reason=0,p2
https://10.238-241-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f10.238-241-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://mail-out.santaks.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail-out.santaks.be%2fowa%2f&reason=0,p2
https://mail.fibrocit.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.fibrocit.com%2fowa%2f&reason=0,p2
https://remote.bhabelgium.com/owa/auth/logon.aspx?url=https%3a%2f%2fremote.bhabelgium.com%2fowa%2f&reason=0,p2
https://mail.acerta.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.acerta.be%2fowa%2f&reason=0,p2
https://32.223-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f32.223-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://mail.fieuw.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.fieuw.be%2fowa%2f&reason=0,p2
https://d51530bfc.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd51530bfc.static.telenet.be%2fowa%2f&reason=0,p2
https://mail.carlier.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.carlier.be%2fowa%2f&reason=0,p2
https://mail.tekni-plex.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.tekni-plex.be%2fowa%2f&reason=0,p2
https://ip-94-140-166-175.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-94-140-166-175.reverse.destiny.be%2fowa%2f&reason=0,p2
https://212-123-18-146.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f212-123-18-146.ifiber.telenet-ops.be%2fowa%2f&reason=0,p2
https://212-166-55-147.win.be/owa/auth/logon.aspx?url=https%3a%2f%2f212-166-55-147.win.be%2fowa%2f&reason=0,p2
https://mail.bemefa.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bemefa.be%2fowa%2f&reason=0,p2
https://mail.imprepack.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.imprepack.be%2fowa%2f&reason=0,p2
https://mail.elsenag.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.elsenag.com%2fowa%2f&reason=0,p2
https://dd5fb4972.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd5fb4972.static.telenet.be%2fowa%2f&reason=0,p2
https://3.9-66-87.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f3.9-66-87.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://mail.quincalux.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.quincalux.com%2fowa%2f&reason=0,p2
https://mx01.gbc.be/owa/auth/logon.aspx?url=https%3a%2f%2fmx01.gbc.be%2fowa%2f&reason=0,p2
https://mail.meubar.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.meubar.be%2fowa%2f&reason=0,p2
https://mail.drtpartners.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.drtpartners.com%2fowa%2f&reason=0,p2
https://mail.ovb.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ovb.be%2fowa%2f&reason=0,p2
https://outlook.floordam.be/owa/auth/logon.aspx?url=https%3a%2f%2foutlook.floordam.be%2fowa%2f&reason=0,p2
https://91.183.193.156/owa/auth/logon.aspx?url=https%3a%2f%2f91.183.193.156%2fowa%2f&reason=0,p2
https://mail.stbernardus.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.stbernardus.be%2fowa%2f&reason=0,p2
https://mail.callens.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.callens.be%2fowa%2f&reason=0,p2
https://ip-94-140-180-241.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-94-140-180-241.reverse.destiny.be%2fowa%2f&reason=0,p2
https://mail.vegromix.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vegromix.be%2fowa%2f&reason=0,p2
https://mail.polymar.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.polymar.com%2fowa%2f&reason=0,p2
https://relay.mediprof.be/owa/auth/logon.aspx?url=https%3a%2f%2frelay.mediprof.be%2fowa%2f&reason=0,p2
https://212.3.240.194/owa/auth/logon.aspx?url=https%3a%2f%2f212.3.240.194%2fowa%2f&reason=0,p2
https://mail.maisonsbaijot.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.maisonsbaijot.com%2fowa%2f&reason=0,p2
https://owa.schollier.be/owa/auth/logon.aspx?url=https://owa.schollier.be/owa/&reason=0,p2
https://120.58-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f120.58-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://mail.theatredeliege.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.theatredeliege.be%2fowa%2f&reason=0,p2
https://pineapp.derco.be/owa/auth/logon.aspx?url=https%3a%2f%2fpineapp.derco.be%2fowa%2f&reason=0,p2
https://mail.e-f-e.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.e-f-e.be%2fowa%2f&reason=0,p2
https://mail.ceteor.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ceteor.com%2fowa%2f&reason=0,p2
https://mail.somersoptiek.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.somersoptiek.be%2fowa%2f&reason=0,p2
https://mail.cpasframeries.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cpasframeries.be%2fowa%2f&reason=0,p2
https://mail.profondeville.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.profondeville.be%2fowa%2f&reason=0,p2
https://mail.vkgroup.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vkgroup.be%2fowa%2f&reason=0,p2
https://smtp.lalemant.com/owa/auth/logon.aspx?url=https%3a%2f%2fsmtp.lalemant.com%2fowa%2f&reason=0,p2
https://mail.cmg-glesner.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cmg-glesner.com%2fowa%2f&reason=0,p2
https://mail.jg-consulting.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.jg-consulting.be%2fowa%2f&reason=0,p2
https://d54c72f94.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd54c72f94.static.telenet.be%2fowa%2f&reason=0,p2
https://mail.wealtheon.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.wealtheon.eu%2fowa%2f&reason=0,p2
https://78.24.172.40/owa/auth/logon.aspx?url=https%3a%2f%2f78.24.172.40%2fowa%2f&reason=0,p2
https://ip-188-118-29-45.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-29-45.reverse.destiny.be%2fowa%2f&reason=0,p2
https://84-198-226-90.access.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-198-226-90.access.telenet.be%2fowa%2f&reason=0,p2
https://mail.medimarien.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.medimarien.be%2fowa%2f&reason=0,p2
https://dd5fb464b.static.telenet.be/owa/,p2
https://mail.leplaza.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.leplaza.be%2fowa%2f&reason=0,p2
https://mail.steveny.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.steveny.be%2fowa%2f&reason=0,p2
https://mail.tranebelgium.com/owa/auth/logon.aspx?url=https%3a%2f%2f192.168.254.183%2fowa%2f&reason=0,p2
https://mailhost.deskflex.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailhost.deskflex.be%2fowa%2f&reason=0,p2
https://d54c7135c.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd54c7135c.static.telenet.be%2fowa%2f&reason=0,p2
https://mail.stantonius.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.stantonius.be%2fowa%2f&reason=0,p2
https://10.121-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f10.121-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://app.ziwo.io/login?account=floward,p2
https://mail.ctib-tchn.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ctib-tchn.be%2fowa%2f&reason=0,p2
https://smtp.oudsbergen.be/owa/auth/logon.aspx?url=https%3a%2f%2fsmtp.oudsbergen.be%2fowa%2f&reason=0,p2
https://mail.vandyckfreres.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vandyckfreres.be%2fowa%2f&reason=0,p2
https://243.54-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f243.54-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://mail.pastadellamamma.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pastadellamamma.be%2fowa%2f&reason=0,p2
https://185.174.186.186/owa/auth/logon.aspx?url=https%3a%2f%2f185.174.186.186%2fowa%2f&reason=0,p2
https://mail.lionshulp.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.lionshulp.be%2fowa%2f&reason=0,p2
https://219.186-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f219.186-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://remote.portanova.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.portanova.be%2fowa%2f&reason=0,p2
https://mail.oafl.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.oafl.be%2fowa%2f&reason=0,p2
https://da.vea-antwerpen.be/owa/auth/logon.aspx?url=https%3a%2f%2fda.vea-antwerpen.be%2fowa%2f&reason=0,p2
https://235.24-247-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f235.24-247-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://mx.intra.chjt.be/owa/auth/logon.aspx?url=https%3a%2f%2fmx.intra.chjt.be%2fowa%2f&reason=0,p2
https://mail.olvlourdes.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.olvlourdes.be%2fowa%2f&reason=0,p2
https://200.97-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f200.97-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://mailhost.douceur-coteaux-mosans.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailhost.douceur-coteaux-mosans.be%2fowa%2f&reason=0,p2
https://mail3.bridgestone-bae.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail3.bridgestone-bae.com%2fowa%2f&reason=0,p2
https://mail.nelissen.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.nelissen.be%2fowa%2f&reason=0,p2
https://mail.axentarchitects.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.axentarchitects.com%2fowa%2f&reason=0,p2
https://194.78.226.18/owa/auth/logon.aspx?url=https%3a%2f%2f194.78.226.18%2fowa%2f&reason=0,p2
https://d5152e2be.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152e2be.static.telenet.be%2fowa%2f&reason=0,p2
https://d54c70676.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd54c70676.static.telenet.be%2fowa%2f&reason=0,p2
https://ip-188-118-28-66.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-28-66.reverse.destiny.be%2fowa%2f&reason=0,p2
https://mail.plouvier.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.plouvier.be%2fowa%2f&reason=0,p2
https://dd458ebaa.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd458ebaa.static.telenet.be%2fowa%2f&reason=0,p2
https://adfs.fluxys.com/adfs/ls/?wa=wsignin1.0&wtrealm=https%3a%2f%2fwebmail.fluxys.com%2fowa%2f&wctx=rm%3d0%26id%3dpassive%26ru%3d%252fowa%252f&wct=2022-05-16T10%3a27%3a45Z,p2
https://mail.facil.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.facil.be%2fowa%2f&reason=0,p2
https://78.24.172.39/owa/auth/logon.aspx?url=https%3a%2f%2f78.24.172.39%2fowa%2f&reason=0,p2
https://77.246.241.178/owa/auth/logon.aspx?url=https%3a%2f%2f77.246.241.178%2fowa%2f&reason=0,p2
https://d5152cd44.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152cd44.static.telenet.be%2fowa%2f&reason=0,p2
https://mail.tr-hendrickx.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.tr-hendrickx.be%2fowa%2f&reason=0,p2
https://mail.climatech.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.climatech.be%2fowa%2f&reason=0,p2
https://mail.commune-jurbise.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.commune-jurbise.be%2fowa%2f&reason=0,p2
https://84-199-123-196.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-199-123-196.ifiber.telenet-ops.be%2fowa%2f&reason=0,p2
https://mail.driesvannoten.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.driesvannoten.be%2fowa%2f&reason=0,p2
https://remote.eamonnbates.com/owa/auth/logon.aspx?url=https%3a%2f%2fremote.eamonnbates.com%2fowa%2f&reason=0,p2
https://dd5fb4ead.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd5fb4ead.static.telenet.be%2fowa%2f&reason=0,p2
https://46.16.244.1/owa/auth/logon.aspx?url=https%3a%2f%2f46.16.244.1%2fowa%2f&reason=0,p2
https://mail-lln.thg.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail-lln.thg.be%2fowa%2f&reason=0,p2
https://host-109-89-143-173.dynamic.voo.be/owa/auth/logon.aspx?url=https%3a%2f%2fhost-109-89-143-173.dynamic.voo.be%2fowa%2f&reason=0,p2
https://121.23-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f121.23-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://245.74-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f245.74-246-81.adsl-static.isp.belgacom.be%2fowa&reason=0,p2
https://193.190.96.199/owa/auth/logon.aspx?url=https%3a%2f%2f193.190.96.199%2fowa%2f&reason=0,p2
https://webmail.shurgard.eu/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.shurgard.eu%2fowa%2f&reason=0,p2
https://mail.intersig.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.intersig.be%2fowa%2f&reason=0,p2
https://mail.eurojura.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.eurojura.be%2fowa%2f&reason=0,p2
https://mail.chram.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.chram.be%2fowa%2f&reason=0,p2
https://mail.steedandbarneys.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.steedandbarneys.com%2fowa%2f&reason=0,p2
https://mail.acbgroup.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.acbgroup.be%2fowa%2f&reason=0,p2
https://hermes.liebaert.com/owa/auth/logon.aspx?url=https://hermes.liebaert.com/owa/&reason=0,p2
https://mail.stappenvzw.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.stappenvzw.be%2fowa%2f&reason=0,p2
https://d54c72f7d.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd54c72f7d.static.telenet.be%2fowa%2f&reason=0,p2
https://mail.cawboommechelenlier.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cawboommechelenlier.be%2fowa%2f&reason=0,p2
https://mail.bestraters.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bestraters.be%2fowa%2f&reason=0,p2
https://185.95.73.82.static.edpnet.net/owa/auth/logon.aspx?url=https%3a%2f%2f185.95.73.82.static.edpnet.net%2fowa%2f&reason=0,p2
https://mail.bemagraphics.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bemagraphics.com%2fowa%2f&reason=0,p2
https://dd5773453.access.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd5773453.access.telenet.be%2fowa%2f&reason=0,p2
https://webmail.monica.be/owa/,p2
https://169.238-136-217.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f169.238-136-217.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://213.211.178.194.static.edpnet.net/owa/auth/logon.aspx?url=https%3a%2f%2f213.211.178.194.static.edpnet.net%2fowa%2f&reason=0,p2
https://host-95-182-209-109.dynamic.voo.be/owa/auth/logon.aspx?url=https%3a%2f%2fhost-95-182-209-109.dynamic.voo.be%2fowa%2f&reason=0,p2
https://38.89-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f38.89-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://mail.acelectronics.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.acelectronics.be%2fowa%2f&reason=0,p2
https://mail.seniorencentrum-olv.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.seniorencentrum-olv.be%2fowa%2f&reason=0,p2
https://trustseg.ccr.be/owa/auth/logon.aspx?url=https%3a%2f%2ftrustseg.ccr.be%2fowa%2f&reason=0,p2
https://ip-188-118-45-141.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-45-141.reverse.destiny.be%2fowa%2f&reason=0,p2
https://d5152d2f7.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152d2f7.static.telenet.be%2fowa%2f&reason=0,p2
https://212-123-24-185.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f212-123-24-185.ifiber.telenet-ops.be%2fowa%2f&reason=0,p2
https://210.141-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f210.141-78-194.adsl-static.isp.belgacom.be%2fOWA&reason=0,p2
https://webmail.sbat.be/owa/auth/logon.aspx?url=https://webmail.sbat.be/owa/&reason=0,p2
https://mail.thematravel.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.thematravel.be%2fowa%2f&reason=0,p2
https://mail.cwape.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cwape.be%2fowa%2f&reason=0,p2
https://mail.deblaytax.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.deblaytax.be%2fowa%2f&reason=0,p2
https://mail.bosal.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bosal.com%2fowa%2f&reason=0,p2
https://exchange.eagleair.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.eagleair.be%2fowa%2f&reason=0,p2
https://mail.tasco.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.tasco.be%2fowa%2f&reason=0,p2
https://mail.veldemangroup.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.veldemangroup.be%2fowa%2f&reason=0,p2
https://193.190.187.201/owa/auth/logon.aspx?url=https%3a%2f%2f193.190.187.201%2fowa&reason=0,p2
https://mail.baliebrussel.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.baliebrussel.be%2fowa%2f&reason=0,p2
https://uu194-7-31-34.unknown.uunet.be/owa/auth/logon.aspx?url=https%3a%2f%2fuu194-7-31-34.unknown.uunet.be%2fowa%2f&reason=0,p2
https://dd5e00412.access.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd5e00412.access.telenet.be%2fowa%2f&reason=0,p2
https://26.68-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f26.68-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://webmail.senate.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.senate.be%2fowa%2f&reason=0,p2
https://mail.gaverland.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.gaverland.com%2fowa%2f&reason=0,p2
https://31.193.40.18/owa/auth/logon.aspx?url=https%3a%2f%2f31.193.40.18%2fowa%2f&reason=0,p2
https://216.109-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f216.109-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://mail.aenachocolaterie.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.aenachocolaterie.be%2fowa%2f&reason=0,p2
https://220.184-136-217.adsl-static.isp.belgacom.be:443/owa/auth/logon.aspx?url=https%3a%2f%2f220.184-136-217.adsl-static.isp.belgacom.be%2f&reason=0,p2
https://mail.claerhoutaluminium.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.claerhoutaluminium.be%2fowa%2f&reason=0,p2
https://mail.fci.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.fci.be%2fowa%2f&reason=0,p2
https://146.33-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f146.33-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://mail.railtraxx.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.railtraxx.be%2fowa%2f&reason=0,p2
https://mail.pittmanseafoods.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pittmanseafoods.com%2fowa%2f&reason=0,p2
https://mail.policeliege.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.policeliege.be%2fowa%2f&reason=0,p2
https://mail.mevoydeviaje.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.mevoydeviaje.com%2fowa%2f&reason=0,p2
https://mx.livingonthebeach.com/owa/auth/logon.aspx?url=https%3a%2f%2fmx.livingonthebeach.com%2fowa%2f&reason=0,p2
https://mail.adrem.be/owa/,p2
https://mail.mc-st-jozef.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.mc-st-jozef.be%2fowa%2f&reason=0,p2
https://212-123-30-88.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f212-123-30-88.ifiber.telenet-ops.be%2fowa%2f&reason=0,p2
https://mail.pluritech.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pluritech.com%2fowa%2f&reason=0,p2
https://mail.pelikan.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pelikan.be%2fowa%2f&reason=0,p2
https://mail.polypreen.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.polypreen.com%2fowa%2f&reason=0,p2
https://213.120-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f213.120-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p2
https://mail.peer.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.peer.be%2fowa%2f&reason=0,p2
https://owa.partena.be/my.policy,p2
https://mail.dmdr.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.dmdr.be%2fowa%2f&reason=0,p2
https://mail2.technometal.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail2.technometal.be%2fowa%2f&reason=0,p2
https://outlook.etics-partners.be/owa/auth/logon.aspx?url=https%3a%2f%2foutlook.etics-partners.be%2fowa%2f&reason=0,p2
https://owa.charleroi-airport.com/owa/auth/logon.aspx?url=https://bscasrv31.crlairport.dom/owa/&reason=0,p2
https://212.113.70.77/owa/auth/logon.aspx?url=https%3a%2f%2f212.113.70.77%2fowa%2f&reason=0,p2
https://remote.atsrauw.com/owa/auth/logon.aspx?url=https%3a%2f%2fremote.atsrauw.com%2fowa%2f&reason=0,p2
https://uni-box.bfv.be/owa/auth/logon.aspx?url=https%3a%2f%2funi-box.bfv.be%2fowa%2f&reason=0,p2
https://mail.jvm-solutions.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.jvm-solutions.be%2fowa%2f&reason=0,p2
```
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/p3.csv
```csv path="/Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/p3.csv"
https://messages.acpgroup.be/owa/auth/logon.aspx?url=https%3a%2f%2fmessages.acpgroup.be%2fowa%2f&reason=0,p3
https://cluster1.adfs.ovh.net/adfs/ls/?wa=wsignin1.0&wtrealm=https%3a%2f%2fmail.darco.be%2fowa%2f&wctx=rm%3d0%26id%3dpassive%26ru%3d%252fowa%252f&wct=2022-05-16T10%3a38%3a27Z,p3
https://mail.pierreglas.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pierreglas.be%2fowa%2f&reason=0,p3
https://mail.lapicor.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.lapicor.com%2fowa%2f&reason=0,p3
https://mail.mado.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.mado.be%2fowa%2f&reason=0,p3
https://mail.fitopia.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.fitopia.be%2fowa%2f&reason=0,p3
https://212.113.64.252/owa/auth/logon.aspx?url=https%3a%2f%2f212.113.64.252%2fowa%2f&reason=0,p3
https://mail.klaratex.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.klaratex.be%2fowa%2f&reason=0,p3
https://host-212-68-214-38.dynamic.voo.be/owa/auth/logon.aspx?url=https%3a%2f%2fhost-212-68-214-38.dynamic.voo.be%2fowa%2f&reason=0,p3
https://mail.nekto.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.nekto.be%2fowa%2f&reason=0,p3
https://mail.sogebo.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.sogebo.be%2fowa%2f&reason=0,p3
https://dd458e67a.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd458e67a.static.telenet.be%2fowa%2f&reason=0,p3
https://mail.s-clinica.com/owa/auth/logon.aspx?url=https://mail.s-clinica.com/owa/&reason=0,p3
https://mail.kanaalz.be/owa/auth/logon.aspx?url=https://mail.kanaalz.be/owa/&reason=0,p3
https://mail.luyckx.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.luyckx.be%2fowa%2f&reason=0,p3
https://d54c7052a.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd54c7052a.static.telenet.be%2fowa%2f&reason=0,p3
https://mail.splen.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.splen.be%2fowa%2f&reason=0,p3
https://84-199-103-226.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-199-103-226.ifiber.telenet-ops.be%2fowa%2f&reason=0,p3
https://d5152dee2.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152dee2.static.telenet.be%2fowa%2f&reason=0,p3
https://webmail.q-food.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.q-food.be%2fowa%2f&reason=0,p3
https://mail.kei.be/owa/,p3
https://225.65-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f225.65-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p3
https://mail.derigran.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.derigran.be%2fowa%2f&reason=0,p3
https://d51530703.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd51530703.static.telenet.be%2fowa%2f&reason=0,p3
https://mail.homeinbrussels.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.homeinbrussels.be%2fowa%2f&reason=0,p3
https://webmail.smb-belgique.com/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.smb-belgique.com%2fowa%2f&reason=0,p3
https://mail.fujitron.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.fujitron.be%2fowa%2f&reason=0,p3
https://email.amptec.be/owa/auth/logon.aspx?url=https%3a%2f%2femail.amptec.be%2fowa%2f&reason=0,p3
https://mail.nexyan.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.nexyan.be%2fowa%2f&reason=0,p3
https://195.244.180.20/owa/auth/logon.aspx?url=https%3a%2f%2f195.244.180.20%2fowa%2f&reason=0,p3
https://mail2.embassy-freight.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail2.embassy-freight.be%2fowa%2f&reason=0,p3
https://d5152f401.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152f401.static.telenet.be%2fowa%2f&reason=0,p3
https://mail.nanocyl.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.nanocyl.com%2fowa%2f&reason=0,p3
https://exchange.jfk.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.jfk.be%2fowa%2f&reason=0,p3
https://mail.dekleinekasteeltjes.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.dekleinekasteeltjes.be%2fowa%2f&reason=0,p3
https://mail.degrooff.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.degrooff.be%2fowa%2f&reason=0,p3
https://mail.wara.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.wara.be%2fowa%2f&reason=0,p3
https://36.113-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f36.113-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p3
https://180.234-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f180.234-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p3
https://sbs.wzcdelinde.be/owa/auth/logon.aspx?url=https%3a%2f%2fsbs.wzcdelinde.be%2fowa%2f&reason=0,p3
https://remote.lauraham.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.lauraham.be%2fowa%2f&reason=0,p3
https://mail.connectandwork.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.connectandwork.be%2fowa%2f&reason=0,p3
https://exchange.lilon.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.lilon.be%2fowa%2f&reason=0,p3
https://mx1.pc2day.net/owa/auth/logon.aspx?url=https%3a%2f%2fmx1.pc2day.net%2fowa%2f&reason=0,p3
https://mail.studiebureaujonckheere.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.studiebureaujonckheere.be%2fowa%2f&reason=0,p3
https://mail.tradas.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.tradas.com%2fowa%2f&reason=0,p3
https://remote.fideuro.lu/owa/auth/logon.aspx?url=https%3a%2f%2fremote.fideuro.lu%2fowa%2f&reason=0,p3
https://mail.hhmi.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.hhmi.be%2fowa%2f&reason=0,p3
https://remote.becetel.be/owa/auth/logon.aspx?url=https://remote.becetel.be/owa/&reason=0,p3
https://144-178-244-53.static.ef-service.nl/owa/auth/logon.aspx?url=https%3a%2f%2f144-178-244-53.static.ef-service.nl%2fowa%2f&reason=0,p3
https://dd5e00426.access.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd5e00426.access.telenet.be%2fowa%2f&reason=0,p3
https://webmail.couleur-nature.com/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.couleur-nature.com%2fowa%2f&reason=0,p3
https://mail.armos.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.armos.be%2fowa%2f&reason=0,p3
https://mail.csm.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.csm.be%2fowa%2f&reason=0,p3
https://134.58.179.98/owa/auth/logon.aspx?url=https%3a%2f%2f134.58.179.98%2fowa%2f&reason=0,p3
https://mail.belignum.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.belignum.be%2fowa%2f&reason=0,p3
https://226.240-136-217.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f226.240-136-217.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p3
https://250.107-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f250.107-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p3
https://mailbdk.distrilog.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailbdk.distrilog.be%2fowa%2f&reason=0,p3
https://mail.sint-truiden.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.sint-truiden.be%2fowa%2f&reason=0,p3
https://mail.rsw.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.rsw.be%2fowa%2f&reason=0,p3
https://d5152d783.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152d783.static.telenet.be%2fowa%2f&reason=0,p3
https://mail.albintra.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.albintra.be%2fowa%2f&reason=0,p3
https://mail.cophana.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cophana.be%2fowa%2f&reason=0,p3
https://webmail.chnwl.be/owa/,p3
https://d5152d343.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152d343.static.telenet.be%2fowa%2f&reason=0,p3
https://remote.beauty-energy.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.beauty-energy.be%2fowa%2f&reason=0,p3
https://mx.fme-nv.com/owa/auth/logon.aspx?url=https%3a%2f%2fmx.fme-nv.com%2fowa%2f&reason=0,p3
https://mail.lcl.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.lcl.be%2fowa%2f&reason=0,p3
https://mail.joriside.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.joriside.be%2fowa%2f&reason=0,p3
https://mail.raytech.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.raytech.be%2fowa%2f&reason=0,p3
https://mail.trafiroad.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.trafiroad.be%2fowa%2f&reason=0,p3
https://mail.hotelostend.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.hotelostend.be%2fowa%2f&reason=0,p3
https://webmail.vanhonsebrouck.be/owa/auth/logon.aspx?url=https://webmail.vanhonsebrouck.be/owa/&reason=0,p3
https://mail.ardenneetgaume.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ardenneetgaume.be%2fowa%2f&reason=0,p3
https://228.238-241-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f228.238-241-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p3
https://exchange.combellgroup.com/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.combellgroup.com%2fowa%2f&reason=0,p3
https://94.104.253.170/owa/auth/logon.aspx?url=https%3a%2f%2f94.104.253.170%2fowa%2f&reason=0,p3
https://mail2.dekorenbloem.net/owa/auth/logon.aspx?url=https%3a%2f%2fmail2.dekorenbloem.net%2fowa%2f&reason=0,p3
https://mail.anm.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.anm.be%2fowa%2f&reason=0,p3
https://mail.cami-nv.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cami-nv.com%2fowa%2f&reason=0,p3
https://telework.denotekraker.be/owa/auth/logon.aspx?url=https%3a%2f%2ftelework.denotekraker.be%2fowa%2f&reason=0,p3
https://mail.deramaix-allard.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.deramaix-allard.be%2fowa%2f&reason=0,p3
https://100.19-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f100.19-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p3
https://217.111.201.186/owa/auth/logon.aspx?url=https%3a%2f%2f217.111.201.186%2fowa&reason=0,p3
https://mail.sipwell.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.sipwell.com%2fowa%2f&reason=0,p3
https://230.46-133-109.adsl-dyn.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f230.46-133-109.adsl-dyn.isp.belgacom.be%2fowa%2f&reason=0,p3
https://mail.gvbh.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.gvbh.be%2fowa&reason=0,p3
https://193.190.79.4/owa/auth/logon.aspx?url=https%3a%2f%2f193.190.79.4%2fowa%2f&reason=0,p3
https://mail.dataworld.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.dataworld.be%2fowa%2f&reason=0,p3
https://mail.mariemero.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.mariemero.eu%2fowa%2f&reason=0,p3
https://d5152f25d.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152f25d.static.telenet.be%2fowa%2f&reason=0,p3
https://mail.vanbever-perleau.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vanbever-perleau.be%2fowa%2f&reason=0,p3
https://mail.dekock.info/owa/auth/logon.aspx?url=https%3a%2f%2fmail.dekock.info%2fowa%2f&reason=0,p3
https://exchange.bgns.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.bgns.be%2fowa%2f&reason=0,p3
https://mail.st-paul.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.st-paul.be%2fowa%2f&reason=0,p3
https://owa.civadis.be/owa/auth/logon.aspx?url=https%3a%2f%2fowa.civadis.be%2fowa%2f&reason=0,p3
https://mail.avocatsdelfosse.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.avocatsdelfosse.be%2fowa%2f&reason=0,p3
https://d5152c279.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152c279.static.telenet.be%2fowa%2f&reason=0,p3
https://avas.purna.be/owa/auth/logon.aspx?url=https%3a%2f%2favas.purna.be%2fowa%2f&reason=0,p3
https://130.46-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f130.46-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p3
https://mail.offimex.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.offimex.be%2fowa%2f&reason=0,p3
https://d5152f94b.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152f94b.static.telenet.be%2fowa%2f&reason=0,p3
https://212.123.25.194/owa/auth/logon.aspx?url=https%3a%2f%2f212.123.25.194%2fowa%2f&reason=0,p3
https://webmail.teleweb.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.teleweb.be%2fowa%2f&reason=0,p3
https://mail.antwerpgasterminal.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.antwerpgasterminal.com%2fowa%2f&reason=0,p3
https://mail.mediatopper.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.mediatopper.be%2fowa%2f&reason=0,p3
https://mx1.chubxl.be/owa/auth/logon.aspx?url=https%3a%2f%2fmx1.chubxl.be%2fowa%2f&reason=0,p3
https://exchange2016.exxoss.com/owa/auth/logon.aspx?url=https%3a%2f%2fexchange2016.exxoss.com%2fowa%2f&reason=0,p3
https://mail.bdcint.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bdcint.be%2fowa%2f&reason=0,p3
https://84-199-101-246.ifiber.telenet-ops.be/owa/,p3
https://212-123-19-251.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f212-123-19-251.ifiber.telenet-ops.be%2fowa%2f&reason=0,p3
https://mail.dumay-mior.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.dumay-mior.be%2fowa%2f&reason=0,p3
https://mail.saint-ghislain.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.saint-ghislain.be%2fowa%2f&reason=0,p3
https://mail.dynamit.be/owa/auth/logon.aspx?url=https://mail.dynamit.be/owa/&reason=0,p3
https://mail.pzgrimbergen.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pzgrimbergen.be%2fowa%2f&reason=0,p3
https://77.246.241.185/owa/auth/logon.aspx?url=https%3a%2f%2f77.246.241.185%2fowa%2f&reason=0,p3
https://mail.shakehand-lerou.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.shakehand-lerou.com%2fowa%2f&reason=0,p3
https://mailhost.maes-nv.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailhost.maes-nv.be%2fowa%2f&reason=0,p3
https://analytics.thewebsitewarehouse.com/index.php?owa_do=base.loginForm&owa_go=https%3A%2F%2F242.120.148.146.bc.googleusercontent.com%2F&,p3
https://mail.ata-fiduciaire.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ata-fiduciaire.eu%2fowa%2f&reason=0,p3
https://remote.glfb-vglb.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.glfb-vglb.be%2fowa%2f&reason=0,p3
https://mail.forwrd.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.forwrd.be%2fowa%2f&reason=0,p3
https://bel-exc-02.belgabroed.be/owa/auth/logon.aspx?url=https%3a%2f%2fbel-exc-02.belgabroed.be%2fowa%2f&reason=0,p3
https://mail.belnet.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.belnet.be%2fowa%2f&reason=0,p3
https://151.248.55.13/owa/auth/logon.aspx?url=https%3a%2f%2f151.248.55.13%2fowa%2f&reason=0,p3
https://mail.embassy-freight.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.embassy-freight.be%2fowa%2f&reason=0,p3
https://217.111.230.34/owa/auth/logon.aspx?url=https%3a%2f%2f217.111.230.34%2fowa%2f&reason=0,p3
https://webmail.balteau-ndt.com/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.balteau-ndt.com%2fowa%2f&reason=0,p3
https://mail.coeman.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.coeman.be%2fowa%2f&reason=0,p3
https://mail.vandeweghe.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vandeweghe.be%2fowa%2f&reason=0,p3
https://mail.garageborremans.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.garageborremans.be%2fowa%2f&reason=0,p3
https://mail.bouwcenter-vanhulle.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bouwcenter-vanhulle.be%2fowa%2f&reason=0,p3
https://mail.hp-partners.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.hp-partners.be%2fowa%2f&reason=0,p3
https://152.10-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f152.10-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p3
https://mail.materiaux-foret.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.materiaux-foret.be%2fowa%2f&reason=0,p3
https://mail.rp-grece.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.rp-grece.be%2fowa%2f&reason=0,p3
https://barracuda.lucdetrez.be/owa/auth/logon.aspx?url=https%3a%2f%2fbarracuda.lucdetrez.be%2fowa%2f&reason=0,p3
https://mail.eliet.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.eliet.be%2fowa%2f&reason=0,p3
https://mailhost.transmeat.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailhost.transmeat.be%2fowa%2f&reason=0,p3
https://www.cowater.com/en/home/,p3
https://dd5fb4534.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd5fb4534.static.telenet.be%2fowa%2f&reason=0,p3
https://mail.energys-belux.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.energys-belux.eu%2fowa%2f&reason=0,p3
https://mail.depinte.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.depinte.be%2fowa%2f&reason=0,p3
https://195.0.32.85/owa/auth/logon.aspx?url=https%3a%2f%2f195.0.32.85%2fowa%2f&reason=0,p3
https://remote.buvetex.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.buvetex.be%2fowa%2f&reason=0,p3
https://mail.arcadevzw.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.arcadevzw.be%2fowa%2f&reason=0,p3
https://webmail.vanendeenroxy.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.vanendeenroxy.be%2fowa%2f&reason=0,p3
https://mail.anpi.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.anpi.be%2fowa%2f&reason=0,p3
https://mail.linearaffaelli.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.linearaffaelli.be%2fowa%2f&reason=0,p3
https://mail.artichem.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.artichem.com%2fowa%2f&reason=0,p3
https://100.96-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f100.96-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p3
https://d5152fba1.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152fba1.static.telenet.be%2fowa%2f&reason=0,p3
https://mail.start.partena.be/owa/auth/logon.aspx?url=https://mail.start.partena.be/owa/&reason=0,p3
https://mail.cpe-credit.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cpe-credit.com%2fowa%2f&reason=0,p3
https://mail.aliasconsult.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.aliasconsult.be%2fowa%2f&reason=0,p3
https://mail.cornelis-bvba.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cornelis-bvba.be%2fowa%2f&reason=0,p3
https://email.watergenius.eu/owa/auth/logon.aspx?url=https%3a%2f%2femail.watergenius.eu%2fowa%2f&reason=0,p3
https://d5152f58e.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152f58e.static.telenet.be%2fowa%2f&reason=0,p3
https://mail.ftpi.fr/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ftpi.fr%2fowa%2f&reason=0,p3
https://mail.helsenhasselt.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.helsenhasselt.be%2fowa%2f&reason=0,p3
https://remote.nonet.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.nonet.be%2fowa%2f&reason=0,p3
https://mail.hospitallogistics.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.hospitallogistics.be%2fowa%2f&reason=0,p3
https://178.90-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f178.90-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p3
https://mail.p-q.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.p-q.be%2fowa%2f&reason=0,p3
https://owa.sobelpac.be/owa/auth/logon.aspx?url=https%3a%2f%2fowa.sobelpac.be%2fowa%2f&reason=0,p3
https://108.53-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f108.53-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p3
https://mail.earthmovingworldwide.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.earthmovingworldwide.com%2fowa%2f&reason=0,p3
https://mail.transuniverse.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.transuniverse.be%2fowa%2f&reason=0,p3
https://mail.grafityp.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.grafityp.com%2fowa%2f&reason=0,p3
https://mailsrv.cemoasbl.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailsrv.cemoasbl.be%2fowa%2f&reason=0,p3
https://smtp.fcgb-bgwf.be/owa/auth/logon.aspx?url=https%3a%2f%2fsmtp.fcgb-bgwf.be%2fowa%2f&reason=0,p3
https://mail.hdjgdw-emmerechts.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.hdjgdw-emmerechts.be%2fowa%2f&reason=0,p3
https://mail.descheemaeker.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.descheemaeker.be%2fowa%2f&reason=0,p3
https://mail.eutronix.be/owa/auth/logon.aspx?url=https://mail.eutronix.be/owa/&reason=0,p3
https://ip-188-118-47-65.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-47-65.reverse.destiny.be%2fowa%2f&reason=0,p3
https://213.249.103.233/owa/auth/logon.aspx?url=https%3a%2f%2f213.249.103.233%2fowa%2f&reason=0,p3
https://mail.champagnatschool.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.champagnatschool.be%2fowa%2f&reason=0,p3
https://dd5fb4c8c.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd5fb4c8c.static.telenet.be%2fowa%2f&reason=0,p3
https://mailhost.groepvaneyck.be/owa/auth/logon.aspx?url=https%3a%2f%2fmailhost.groepvaneyck.be%2fowa%2f&reason=0,p3
https://d5152fe76.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152fe76.static.telenet.be%2fowa%2f&reason=0,p3
https://gate.sicoplan.be/owa/auth/logon.aspx?url=https%3a%2f%2fgate.sicoplan.be%2fowa%2f&reason=0,p3
https://mail.duco.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.duco.be%2fowa%2f&reason=0,p3
https://mail.lebercail-asbl.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.lebercail-asbl.be%2fowa%2f&reason=0,p3
https://mail.havart.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.havart.be%2fowa%2f&reason=0,p3
https://mail.procosgroup.com/owa/auth/logon.aspx?url=https://mail.procosgroup.com/owa/&reason=0,p3
https://mail.otnsystems.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.otnsystems.com%2fowa%2f&reason=0,p3
https://owa9.anscomputer.be/owa/auth/logon.aspx?url=https%3a%2f%2fowa9.anscomputer.be%2fowa%2f&reason=0,p3
https://autodiscover.spw.wallonie.be/owa/auth/logon.aspx?url=https%3a%2f%2fautodiscover.spw.wallonie.be%2fowa%2f&reason=0,p3
https://mail.tpt-derese.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.tpt-derese.be%2fowa%2f&reason=0,p3
https://mail.olympiadairy.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.olympiadairy.be%2fowa%2f&reason=0,p3
https://d5152e586.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152e586.static.telenet.be%2fowa%2f&reason=0,p3
https://mail.patroba.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.patroba.be%2fowa%2f&reason=0,p3
https://servexch.centredelagravure.be/owa/auth/logon.aspx?url=https%3a%2f%2fservexch.centredelagravure.be%2fowa%2f&reason=0,p3
https://mx.sobat.be/owa/auth/logon.aspx?url=https%3a%2f%2fmx.sobat.be%2fowa%2f&reason=0,p3
https://mail.boma.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.boma.be%2fowa%2f&reason=0,p3
https://owa.deinze.be/owa/auth/logon.aspx?url=https%3a%2f%2fowa.deinze.be%2fowa%2f&reason=0,p3
https://mail.packo.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.packo.com%2fowa%2f&reason=0,p3
https://mail.iuxta.legal/owa/auth/logon.aspx?url=https%3a%2f%2fmail.iuxta.legal%2fowa%2f&reason=0,p3
https://mail.curia.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.curia.be%2fowa%2f&reason=0,p3
```
## /Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/p9.csv
```csv path="/Episode 2/Malwares and Logs/All_Proxy_Shell_Targets/BE/p9.csv"
https://79.157-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f79.157-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://25.140-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f25.140-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://mail.notarisroels.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.notarisroels.be%2fowa%2f&reason=0,p9
https://remote.coolsverf.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.coolsverf.be%2fowa%2f&reason=0,p9
https://hermes.erim.be/owa/auth/logon.aspx?url=https%3a%2f%2fhermes.erim.be%2fowa%2f&reason=0,p9
https://owa10.anscomputer.be/owa/auth/logon.aspx?url=https%3a%2f%2fowa10.anscomputer.be%2fowa%2f&reason=0,p9
https://mail.brusselle.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.brusselle.eu%2fowa%2f&reason=0,p9
https://mail.komatsu.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.komatsu.eu%2fowa%2f&reason=0,p9
https://mail.asbl-saint-michel.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.asbl-saint-michel.be%2fowa%2f&reason=0,p9
https://mail.arcadia.spb.ru/owa/auth/logon.aspx?url=https%3a%2f%2fmail.arcadia.spb.ru%2fowa%2f&reason=0,p9
https://mail.essent.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.essent.be%2fowa%2f&reason=0,p9
https://217.22.48.98.static.hosted.by.easyhost.be/owa/auth/logon.aspx?url=https%3a%2f%2f217.22.48.98.static.hosted.by.easyhost.be%2fowa%2f&reason=0,p9
https://mail.vandock.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vandock.com%2fowa%2f&reason=0,p9
https://mail.codic.net/owa/auth/logon.aspx?url=https%3a%2f%2fmail.codic.net%2fowa%2f&reason=0,p9
https://mailupc.agenceurope.com/owa/auth/logon.aspx?url=https%3a%2f%2fmailupc.agenceurope.com%2fowa%2f&reason=0,p9
https://mail.dinopol.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.dinopol.be%2fowa%2f&reason=0,p9
https://d51531565.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd51531565.static.telenet.be%2fowa%2f&reason=0,p9
https://104.246-243-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f104.246-243-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://remote.vsdc.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.vsdc.be%2fowa%2f&reason=0,p9
https://mail.entrepotduvin.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.entrepotduvin.be%2fowa%2f&reason=0,p9
https://165.254-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f165.254-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://mail2.analis.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail2.analis.be%2fowa%2f&reason=0,p9
https://mail.fomeco.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.fomeco.be%2fowa%2f&reason=0,p9
https://mail.vancaloenexp.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vancaloenexp.be%2fowa%2f&reason=0,p9
https://remote.huppertzag.com/owa/auth/logon.aspx?url=https%3a%2f%2fremote.huppertzag.com%2fowa%2f&reason=0,p9
https://inforjeunes-srv.inforjeunes.eu/owa/auth/logon.aspx?url=https%3a%2f%2finforjeunes-srv.inforjeunes.eu%2fowa%2f&reason=0,p9
https://ip-188-118-23-130.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-23-130.reverse.destiny.be%2fowa%2f&reason=0,p9
https://mail.cluma.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cluma.com%2fowa%2f&reason=0,p9
https://57.2-66-87.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f57.2-66-87.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://mail.adflora.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.adflora.be%2fowa%2f&reason=0,p9
https://mail.dwl.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.dwl.be%2fowa%2f&reason=0,p9
https://host-95-182-209-126.dynamic.voo.be/owa/auth/logon.aspx?url=https%3a%2f%2fhost-95-182-209-126.dynamic.voo.be%2fowa%2f&reason=0,p9
https://mail.macao-eu.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.macao-eu.be%2fowa%2f&reason=0,p9
https://mailserver.abesim.com/owa/auth/logon.aspx?url=https%3a%2f%2fmailserver.abesim.com%2fowa%2f&reason=0,p9
https://mail2.meli.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail2.meli.be%2fowa%2f&reason=0,p9
https://mail.sissau.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.sissau.be%2fowa%2f&reason=0,p9
https://mail.screenbelgium.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.screenbelgium.be%2fowa%2f&reason=0,p9
https://mail.vanbiervliet.biz/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vanbiervliet.biz%2fowa%2f&reason=0,p9
https://81.246.56.85/owa/auth/logon.aspx?url=https%3a%2f%2f81.246.56.85%2fowa%2f&reason=0,p9
https://remote.nexyan.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.nexyan.be%2fowa%2f&reason=0,p9
https://barracuda.de-cock.be/owa/auth/logon.aspx?url=https%3a%2f%2fbarracuda.de-cock.be%2fowa%2f&reason=0,p9
https://mail.trba.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.trba.be%2fowa%2f&reason=0,p9
https://46.16.244.2/owa/auth/logon.aspx?url=https%3a%2f%2f46.16.244.2%2fowa%2f&reason=0,p9
https://remote.desiere.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.desiere.be%2fowa%2f&reason=0,p9
https://mail.ingridlesagecreations.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ingridlesagecreations.com%2fowa%2f&reason=0,p9
https://224.25-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f224.25-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://da.uems.net/owa/auth/logon.aspx?url=https%3a%2f%2fda.uems.net%2fowa%2f&reason=0,p9
https://251.30-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f251.30-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://mail.martens.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.martens.be%2fowa%2f&reason=0,p9
https://d54c7c11a.access.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd54c7c11a.access.telenet.be%2fowa%2f&reason=0,p9
https://mail.pauwels-sauces.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pauwels-sauces.com%2fowa%2f&reason=0,p9
https://host-212-68-197-38.dynamic.voo.be/owa/auth/logon.aspx?url=https%3a%2f%2fhost-212-68-197-38.dynamic.voo.be%2fowa%2f&reason=0,p9
https://137.95-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f137.95-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://webmailtest.uzgent.be/owa,p9
https://mail.brak.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.brak.eu%2fowa%2f&reason=0,p9
https://d528f47a3.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd528f47a3.static.telenet.be%2fowa%2f&reason=0,p9
https://d5152d81d.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152d81d.static.telenet.be%2fowa%2f&reason=0,p9
https://217.145.40.226/owa/auth/logon.aspx?url=https%3a%2f%2f217.145.40.226%2fowa%2f&reason=0,p9
https://mail.somarchitecten.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.somarchitecten.be%2fowa%2f&reason=0,p9
https://kryptowalutownia.pl/,p9
https://mail.ahb-avocats.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ahb-avocats.be%2fowa%2f&reason=0,p9
https://remote.gcm-a.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.gcm-a.be%2fowa%2f&reason=0,p9
https://mail.deleye.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.deleye.be%2fowa%2f&reason=0,p9
https://mail.holvoet.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.holvoet.be%2fowa%2f&reason=0,p9
https://mail.asdbxl.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.asdbxl.be%2fowa%2f&reason=0,p9
https://66.38-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f66.38-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://mail.vegobel.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vegobel.be%2fowa%2f&reason=0,p9
https://106.96-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f106.96-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://46.18.37.218/owa/auth/logon.aspx?url=https%3a%2f%2f46.18.37.218%2fowa%2f&reason=0,p9
https://mail.norbertprovoost.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.norbertprovoost.be%2fowa%2f&reason=0,p9
https://mail.detremmerie.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.detremmerie.be%2fowa%2f&reason=0,p9
https://112.83-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f112.83-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://webmail.eqla.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.eqla.be%2fowa%2f&reason=0,p9
https://118.68-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f118.68-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://185.223.226.66/owa/auth/logon.aspx?url=https%3a%2f%2f185.223.226.66%2fowa%2f&reason=0,p9
https://exchange.xss.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.xss.be%2fowa%2f&reason=0,p9
https://mail.dentergem.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.dentergem.be%2fowa%2f&reason=0,p9
https://mail.vds-food.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.vds-food.com%2fowa%2f&reason=0,p9
https://165.74-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f165.74-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://244.1-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f244.1-246-81.adsl-static.isp.belgacom.be%2fowa&reason=0,p9
https://mail.traitex.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.traitex.be%2fowa%2f&reason=0,p9
https://d515398c0.access.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd515398c0.access.telenet.be%2fowa%2f&reason=0,p9
https://webmail.brussels/lm_auth_proxy?DoLMLogin?curl=L2fowa&curlid=4280188918-2521057743,p9
https://212.113.64.83/owa/,p9
https://mail.machineryresale.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.machineryresale.be%2fowa%2f&reason=0,p9
https://remote.reizenpatteeuw.be/owa/,p9
https://mail.pm-eifel.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.pm-eifel.com%2fowa%2f&reason=0,p9
https://mail.isotopes.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.isotopes.be%2fowa%2f&reason=0,p9
https://mail.seru.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.seru.be%2fowa%2f&reason=0,p9
https://d54c724f3.static.telenet.be/owa/,p9
https://mail.zimmermann-law.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.zimmermann-law.be%2fowa%2f&reason=0,p9
https://mail2.anpi.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail2.anpi.be%2fowa%2f&reason=0,p9
https://d5152dd31.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152dd31.static.telenet.be%2fowa%2f&reason=0,p9
https://mail.marbor.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.marbor.be%2fowa%2f&reason=0,p9
https://46.16.244.3/owa/auth/logon.aspx?url=https%3a%2f%2f46.16.244.3%2fowa%2f&reason=0,p9
https://185.89.232.5/owa/auth/logon.aspx?url=https%3a%2f%2f185.89.232.5%2fowa%2f&reason=0,p9
https://mail.freshconcept.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.freshconcept.be%2fowa%2f&reason=0,p9
https://mail.diddenfood.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.diddenfood.com%2fowa%2f&reason=0,p9
https://ip-94-140-166-252.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-94-140-166-252.reverse.destiny.be%2fowa%2f&reason=0,p9
https://ip-188-118-14-179.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-14-179.reverse.destiny.be%2fowa%2f&reason=0,p9
https://d5152d4ff.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152d4ff.static.telenet.be%2fowa%2f&reason=0,p9
https://mail.advys.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.advys.be%2fowa%2f&reason=0,p9
https://42.76-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f42.76-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://dd5fb4332.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fdd5fb4332.static.telenet.be%2fowa%2f&reason=0,p9
https://webmail.igcgroup.com/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.igcgroup.com%2fowa%2f&reason=0,p9
https://mail.boerinneke-marino.be/owa/,p9
https://cdjserv.archebxl.org/owa/auth/logon.aspx?url=https%3a%2f%2fcdjserv.archebxl.org%2fowa%2f&reason=0,p9
https://212-166-55-184.win.be/owa/auth/logon.aspx?url=https%3a%2f%2f212-166-55-184.win.be%2fowa%2f&reason=0,p9
https://exchange.assekuranz-ag.com/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.assekuranz-ag.com%2fowa%2f&reason=0,p9
https://193.190.73.145/owa/auth/logon.aspx?url=https%3a%2f%2f193.190.73.145%2fowa%2f&reason=0,p9
https://mail.christeyns.com/owa/auth/logon.aspx?url=https://mail.christeyns.com/owa/&reason=0,p9
https://mail.eckelmans.net/owa/auth/logon.aspx?url=https%3a%2f%2fmail.eckelmans.net%2fowa%2f&reason=0,p9
https://ip-188-118-33-125.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-188-118-33-125.reverse.destiny.be%2fowa%2f&reason=0,p9
https://200.105-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f200.105-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://webmail.chiyoda.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.chiyoda.be%2fowa%2f&reason=0,p9
https://ip-94-140-185-43.reverse.destiny.be/owa/auth/logon.aspx?url=https%3a%2f%2fip-94-140-185-43.reverse.destiny.be%2fowa%2f&reason=0,p9
https://mail.itlb.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.itlb.be%2fowa%2f&reason=0,p9
https://mail.robberechts.be/owa/,p9
https://191.208-78-194.adsl-fix.skynet.be/owa/auth/logon.aspx?url=https%3a%2f%2f191.208-78-194.adsl-fix.skynet.be%2fowa%2f&reason=0,p9
https://mail.demey.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.demey.be%2fowa%2f&reason=0,p9
https://mail.ssrw.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ssrw.be%2fowa%2f&reason=0,p9
https://mail.aac.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.aac.be%2fowa%2f&reason=0,p9
https://mail.groepvereenooghe.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.groepvereenooghe.be%2fowa%2f&reason=0,p9
https://mail.fiscorum.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.fiscorum.be%2fowa%2f&reason=0,p9
https://94.107.197.75/owa/auth/logon.aspx?url=https%3a%2f%2f94.107.197.75%2fowa%2f&reason=0,p9
https://remote.gijsbrechts.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.gijsbrechts.be%2fowa%2f&reason=0,p9
https://110.245-200-80.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f110.245-200-80.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://mail.bocq.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bocq.be%2fowa%2f&reason=0,p9
https://209.206.1.66/owa/auth/logon.aspx?url=https%3a%2f%2f209.206.1.66%2fowa%2f&reason=0,p9
https://mail.dhoe.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.dhoe.eu%2fowa%2f&reason=0,p9
https://mail.bleijenberg.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.bleijenberg.be%2fowa%2f&reason=0,p9
https://mail.cafe-liegeois.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cafe-liegeois.com%2fowa%2f&reason=0,p9
https://remote.jehoul.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.jehoul.be%2fowa%2f&reason=0,p9
https://d5152ce54.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152ce54.static.telenet.be%2fowa%2f&reason=0,p9
https://mail.flandersroad.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.flandersroad.com%2fowa%2f&reason=0,p9
https://d5152db10.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152db10.static.telenet.be%2fowa%2f&reason=0,p9
https://owa.pro-duo.com/owa/,p9
https://mail.segal.be/owa/,p9
https://webmail.erasme.ulb.ac.be/owa/,p9
https://mail.renory.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.renory.be%2fowa%2f&reason=0,p9
https://213.219.184.155.wls.msr03bkc3.adsl.static.edpnet.net/owa/auth/logon.aspx?url=https%3a%2f%2f213.219.184.155.wls.msr03bkc3.adsl.static.edpnet.net%2fowa%2f&reason=0,p9
https://smtp.voyages-leonard.be/owa/auth/logon.aspx?url=https%3a%2f%2fsmtp.voyages-leonard.be%2fowa%2f&reason=0,p9
https://owa.hydrauliekmorreels.com/,p9
https://mail.creon.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.creon.be%2fowa%2f&reason=0,p9
https://213.219.133.195.adsl.static.edpnet.net/owa/auth/logon.aspx?url=https%3a%2f%2f213.219.133.195.adsl.static.edpnet.net%2fowa%2f&reason=0,p9
https://mail.limerkens.net/owa/auth/logon.aspx?url=https%3a%2f%2fmail.limerkens.net%2fowa&reason=0,p9
https://mail.quai10.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.quai10.be%2fowa%2f&reason=0,p9
https://mail.annelouagie.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.annelouagie.be%2fowa%2f&reason=0,p9
https://smtp.caroline-biss.com/owa/auth/logon.aspx?url=https%3a%2f%2fsmtp.caroline-biss.com%2fowa%2f&reason=0,p9
https://remote.conmetall.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.conmetall.be%2fowa%2f&reason=0,p9
https://webmail.lme.be/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.lme.be%2fowa%2f&reason=0,p9
https://mail.lantin.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.lantin.be%2fowa%2f&reason=0,p9
https://43.79-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f43.79-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://mail.incarmotor.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.incarmotor.be%2fowa%2f&reason=0,p9
https://smtp1.ceran.com/owa/auth/logon.aspx?url=https%3a%2f%2fsmtp1.ceran.com%2fowa%2f&reason=0,p9
https://mail.intbb.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.intbb.be%2fowa%2f&reason=0,p9
https://mail.wzckuurne.be/owa/,p9
https://d5152d994.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152d994.static.telenet.be%2fowa%2f&reason=0,p9
https://mail.sparweekend.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.sparweekend.be%2fowa%2f&reason=0,p9
https://94.107.215.57/owa/auth/logon.aspx?url=https%3a%2f%2f94.107.215.57%2fowa%2f&reason=0,p9
https://mail.molsebouwmaatschappij.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.molsebouwmaatschappij.be%2fowa%2f&reason=0,p9
https://mail.simtech.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.simtech.be%2fowa%2f&reason=0,p9
https://mail.rinaldi.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.rinaldi.be%2fowa%2f&reason=0,p9
https://mail.zune.mercedes-benz.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.zune.mercedes-benz.be%2fowa%2f&reason=0,p9
https://d54c7337a.access.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd54c7337a.access.telenet.be%2fowa%2f&reason=0,p9
https://193.53.188.65/owa/auth/logon.aspx?url=https%3a%2f%2f193.53.188.65%2fowa%2f&reason=0,p9
https://mail.leufgen.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.leufgen.com%2fowa%2f&reason=0,p9
https://vsrv-excas01.cloudblaster.be/owa/auth/logon.aspx?url=https%3a%2f%2fvsrv-excas01.cloudblaster.be%2fowa%2f&reason=0,p9
https://84-199-119-90.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-199-119-90.ifiber.telenet-ops.be%2fowa%2f&reason=0,p9
https://126.63-246-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f126.63-246-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://84-199-74-180.ifiber.telenet-ops.be/owa/auth/logon.aspx?url=https%3a%2f%2f84-199-74-180.ifiber.telenet-ops.be%2fowa%2f&reason=0,p9
https://mail.chairmanmentors.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.chairmanmentors.com%2fowa%2f&reason=0,p9
https://119.225-241-81.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f119.225-241-81.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://212.113.65.61/owa/auth/logon.aspx?url=https%3a%2f%2f212.113.65.61%2fowa%2f&reason=0,p9
https://webmail.pierret.net/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail.pierret.net%2fowa%2f&reason=0,p9
https://exchange.dc-partners.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.dc-partners.be%2fowa%2f&reason=0,p9
https://mgatew01.organi-orng.be/owa/auth/logon.aspx?url=https%3a%2f%2fmgatew01.organi-orng.be%2fowa%2f&reason=0,p9
https://10.223-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f10.223-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://212-166-6-167.win.be/owa/auth/logon.aspx?url=https%3a%2f%2f212-166-6-167.win.be%2fowa%2f&reason=0,p9
https://exch1.labroe.com/owa/auth/logon.aspx?url=https%3a%2f%2fexch1.labroe.com%2fowa%2f&reason=0,p9
https://212.113.78.244/owa/auth/logon.aspx?url=https%3a%2f%2f212.113.78.244%2fowa%2f&reason=0,p9
https://mail.electriciteitcampe.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.electriciteitcampe.be%2fowa%2f&reason=0,p9
https://mail.ecsa.eu/owa/auth/logon.aspx?url=https%3a%2f%2fmail.ecsa.eu%2fowa%2f&reason=0,p9
https://mail.adbe.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.adbe.be%2fowa%2f&reason=0,p9
https://sdj-srv.sdj.be/owa/auth/logon.aspx?url=https%3a%2f%2fsdj-srv.sdj.be%2fowa%2f&reason=0,p9
https://mail.cremabru.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.cremabru.be%2fowa%2f&reason=0,p9
https://mail.fiscaalconsult.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.fiscaalconsult.be%2fowa%2f&reason=0,p9
https://email.benvitec.be/owa/auth/logon.aspx?url=https%3a%2f%2femail.benvitec.be%2fowa%2f&reason=0,p9
https://mail.mcs-control.com/owa/auth/logon.aspx?url=https%3a%2f%2fmail.mcs-control.com%2fowa%2f&reason=0,p9
https://remote.vbap.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.vbap.be%2fowa%2f&reason=0,p9
https://d5152caf1.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152caf1.static.telenet.be%2fowa%2f&reason=0,p9
https://elasticmail.bergerseatbelt.com/owa/auth/logon.aspx?url=https://elasticmail.bergerseatbelt.com/owa/&reason=0,p9
https://mail.timmerman-ehs.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.timmerman-ehs.be%2fowa%2f&reason=0,p9
https://remote.ibs-bouw.be/owa/auth/logon.aspx?url=https%3a%2f%2fremote.ibs-bouw.be%2fowa%2f&reason=0,p9
https://mail.jemeppe-sur-sambre.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.jemeppe-sur-sambre.be%2fowa%2f&reason=0,p9
https://d51531823.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd51531823.static.telenet.be%2fowa%2f&reason=0,p9
https://exchange.de3advocaten.be/owa/auth/logon.aspx?url=https%3a%2f%2fexchange.de3advocaten.be%2fowa%2f&reason=0,p9
https://d5152d980.static.telenet.be/owa/auth/logon.aspx?url=https%3a%2f%2fd5152d980.static.telenet.be%2fowa%2f&reason=0,p9
https://221.139-78-194.adsl-static.isp.belgacom.be/owa/auth/logon.aspx?url=https%3a%2f%2f221.139-78-194.adsl-static.isp.belgacom.be%2fowa%2f&reason=0,p9
https://mail.himpe.be/owa/auth/logon.aspx?url=https%3a%2f%2fmail.himpe.be%2fowa%2f&reason=0,p9
```
## /Episode 3/BellaCiao/Variant1/Eposta/Backdoor/ShellDropper/Microsoft Exchange Services Health.txt
The content has been capped at 50000 tokens. The user could consider applying other filters to refine the result. The better and more specific the context, the better the LLM can follow instructions. If the context seems verbose, the user can refine the filter using uithub. Thank you for using https://uithub.com - Perfect LLM context for any GitHub repo.