Forum Discussion

oliverbettsrichards's avatar
oliverbettsrichards
Copper Contributor
Aug 27, 2020

Is there a way to allow URLs that have been detonated and determined as malicious?

Hi folks,

 

I'm attempting to run a phishing simulation using a non-Microsoft vendor (i.e. I'm not using the out-of-the-box Threat Simulator) and, during my test campaign, the phishing emails were being delivered to my chosen recipients' junk mail folders.

 

Is there a way to put URLs on an allow list to prevent M365 from junking my phishing simulation emails? Otherwise, I fear my test will only show that M365 will junk the emails rather than help me provide education to customers and strengthen our email security posture.

 

I'd be immensely grateful for any feedback you can provide.

 

I've attached screenshot from Threat Explorer below:

 

Resources