False positives (A potentially malicious URL click was detected)

Hi

For some reason this started happening yesterday, no issues before.

We have a email that is sent to user containg there blocked spam emails, the user can then select to delete or release those emails if they where blocked for the wrong reason.

Yesterday everytime a user clicks the delete or release button in that email it triggers a Alert for A potentially malicious URL click was detected.

Is there anyway to exclude this from triggering an Alert, example if the domain the email comes from is contoso.com can I whitelist this so no Alert is triggered.

This started happening yesterday, had it over 2 years no Alerts triggered.