Forum Discussion

Copper Contributor

Feb 10, 2017

Solved

Requesting a review of a blocked link - Safe Links Advanced Threat Protection

We receive several emails from companies that use a particular click counting service that appears to have been flagged as malicious by Advanced Threat Protection. Is there a way for me to request th...

exchange online

VasilMichev
Feb 10, 2017
Yes, read the last item in the FAQ here: https://technet.microsoft.com/en-us/library/mt789012(v=exchg.150).aspx

Well, read the whole FAQ, it's great! :)

VasilMichev

MVP

Feb 10, 2017

Yes, read the last item in the FAQ here: https://technet.microsoft.com/en-us/library/mt789012(v=exchg.150).aspx

Well, read the whole FAQ, it's great! :)

Brent Ellis

Silver Contributor

Apr 18, 2017

Dusting this off, I've got the same question, i'd like to confirm that you are referring to the "Malware Protection Center" (https://www.microsoft.com/security/portal/submission/submit.aspx) -- it seems maybe that is specifically for ATP Safe Attachments, rather than safe links (though maybe I am reading it wrong).

There is also a place for reporting missed URLs, but I dont see the one specifically for URLs that are for false positives for Safe Links.

VasilMichev
MVP
Apr 18, 2017
I dont think there's a special place for Safe Links, but I can at least ask :)
- Jonathan Hammer
  Copper Contributor
  Feb 27, 2018
  Sorry to resurrect a dead thread, but we are having the same problem as Jimmy with ATP "Safe Links" reporting a legit website as dangerous/malware/phishing. I have searched but have not found a place to report and resolve this false positive? Any ideas?
  
  The site is not flagged by SmartScreen in Edge, so I'm unable to file a report there. The warning only appears in Outlook.com and Office 365 when a link to our site is clicked.
  
  Thanks for any pointers!
  
  Jonathan
  - Matt Leathes
    Copper Contributor
    Feb 28, 2018
    Same question from me please - got a link that no other phishing/malware-check is reporting as being a problem and we're pretty sure the email's provenance is good... but no way we can see of reporting/checking with Microsoft to find out why it's being flagged.