Desperate for help...Microsoft Advanced Thread Protection started to block the links from our domain

%3CLINGO-SUB%20id%3D%22lingo-sub-1662594%22%20slang%3D%22en-US%22%3EDesperate%20for%20help...Microsoft%20Advanced%20Thread%20Protection%20started%20to%20block%20the%20links%20from%20our%20domain%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1662594%22%20slang%3D%22en-US%22%3E%3CDIV%20class%3D%22%22%3ESince%20Saturday%2C%20every%20time%20anyone%20using%20Microsoft%20365%20clicks%20on%20a%20link%20from%20our%20domain%2C%20safe%20links%20blocks%20it%20and%20tells%20them%20that%20our%20site%20is%20malicious%20(which%20it's%20not).%3C%2FDIV%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%3EOur%20domain%20is%20marked%20as%20safe%20on%20all%20the%20other%20security%20providers%20we've%20found.%20Only%20Microsoft%20Advance%20Thread%20Protection%20is%20blocking%20it.%3C%2FDIV%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%3EWe%20talked%20to%20Office%20365%20support%2C%20but%20they%20said%20they%20can't%20fix%20it.%3C%2FDIV%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%20class%3D%22x-hidden-focus%22%3EThere%20has%20to%20be%20a%20way%20for%20Microsoft%20to%20fix%20the%20issue%20on%20their%20block%20domain%20list%20inside%20ATP%20(safelinks).%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3EThis%20situation%20is%20really%20hurting%20our%20business.%3C%2FDIV%3E%3CDIV%3ECan%20anyone%20help%20please%3F%26nbsp%3B%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1666097%22%20slang%3D%22en-US%22%3ERe%3A%20Desperate%20for%20help...Microsoft%20Advanced%20Thread%20Protection%20started%20to%20block%20the%20links%20from%20our%20do%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1666097%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F791464%22%20target%3D%22_blank%22%3E%40jmadriz%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EFirst%2C%20I%20recommend%20you%20to%20open%20a%20case%20with%20premier%20support%26nbsp%3Bto%20get%20help%20with%20this.%20Otherwise%20you%20can%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3Buse%20the%20Submissions%20portal%20in%20the%20Security%20%26amp%3B%20Compliance%20Center%20to%20submit%20email%20messages%2C%20URLs%2C%20and%20attachments%20to%20Microsoft%20for%20scanning.%20Use%20the%20%22Send%20a%20suspect%20URL%20to%20Microsoft%22%20function%20with%20reason%20for%20submission%20%22Should%20not%20have%20been%20blocked%22.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22newsubmission.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F218218i6C494DD65685B0D3%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22newsubmission.png%22%20alt%3D%22newsubmission.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%E2%80%83%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1666850%22%20slang%3D%22en-US%22%3ERe%3A%20Desperate%20for%20help...Microsoft%20Advanced%20Thread%20Protection%20started%20to%20block%20the%20links%20from%20our%20do%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1666850%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F396611%22%20target%3D%22_blank%22%3E%40alexandertuvstrom%3C%2FA%3E%26nbsp%3Bthank%20you%20for%20your%20help.%20I%20really%20appreciate%20it.%20I%20believe%20we%20can't%20open%20a%20case%20with%20premium%20support%20because%20we're%20not%20Microsoft%20partners.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20already%20tried%26nbsp%3B%3CSPAN%3Ethe%20Submissions%20portal%20in%20the%20Security%20%26amp%3B%20Compliance%20Center%20to%20send%20a%20submission%204%20days%20ago%20but%20only%20got%20this%20message%3A%3C%2FSPAN%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Screen%20Shot%202020-09-14%20at%208.02.29%20PM.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F218280i5FCAFCB939F85BB9%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Screen%20Shot%202020-09-14%20at%208.02.29%20PM.png%22%20alt%3D%22Screen%20Shot%202020-09-14%20at%208.02.29%20PM.png%22%20%2F%3E%3C%2FSPAN%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EIs%20there%20any%20other%20channel%20to%20communicate%20with%20the%20related%20Microsoft%20team%20that%20might%20work%3F%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%2C%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EJC%20Madriz%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor
Since Saturday, every time anyone using Microsoft 365 clicks on a link from our domain, safe links blocks it and tells them that our site is malicious (which it's not).

 

Our domain is marked as safe on all the other security providers we've found. Only Microsoft Advance Thread Protection is blocking it.

 

We talked to Office 365 support, but they said they can't fix it.

 

There has to be a way for Microsoft to fix the issue on their block domain list inside ATP (safelinks).
 
This situation is really hurting our business.
Can anyone help please? 
3 Replies

@jmadriz 

First, I recommend you to open a case with premier support to get help with this. Otherwise you can use the Submissions portal in the Security & Compliance Center to submit email messages, URLs, and attachments to Microsoft for scanning. Use the "Send a suspect URL to Microsoft" function with reason for submission "Should not have been blocked". 

 

newsubmission.png

@alexandertuvstrom thank you for your help. I really appreciate it. I believe we can't open a case with premium support because we're not Microsoft partners.

 

We already tried the Submissions portal in the Security & Compliance Center to send a submission 4 days ago but only got this message:

Screen Shot 2020-09-14 at 8.02.29 PM.png

 

Is there any other channel to communicate with the related Microsoft team that might work?

Thanks,

 

JC Madriz

@jmadriz 

If you don't av access to premier support through a partner you can open a support ticket in https://admin.microsoft.com/ -> Support -> New service request -> New Microsoft Service request. 

 

From my experience, the phone alternative is the fastest response time from Microsoft.