Edge SmartScreen URL unblocking / whitelisting

Question

We have a huge problem. Our domain got automatically blocked by SmartScreen.

All requests to unblock the domain/urls are ignored.

Opened up tickets but getting no feedback.

Is there any other way to unblock or whitelist my domain?

Thank you!

Answer 1

Hi there,

You can whitelist specific IPs and URLS via the Windows Defender Security Center (Defender ATP Portal). This should unblock these, even if they are blacklisted at Microsoft.

Create indicators for IPs and URLs/domains

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/indicator-ip-domain?view=o365-worldwide

Configure and validate Microsoft Defender Antivirus network connections

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-network-connections-microsoft-defender-antivirus?view=o365-worldwide

-------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer–

Answer 2

The best way to unblock it is to fill up the form (when you see it has been blocked) and Microsoft team will review the form.
Meanwhile, you may check with your domain provider and ask them to check your website for potential security issues.

Answer 3

Hi @Tobias

Except reporting to Microsoft that the site does not contain threats, you can also do the following best practices to help minimize the chance of your site being flagged as suspicious:

• If you ask users for personal information, use HTTPS with a valid, unexpired server certificate issued by a trusted certification authority.
• Make sure that your webpage doesn't expose any cross-site scripting (XSS) vulnerabilities. Protect your site by using anti-cross-site scripting functions such as those provided by the Microsoft Anti-Cross Site Scripting library.
• Use the fully-qualified domain name rather than an IP-literal address. (This means a URL should look like "microsoft.com" and not "207.46.19.30.")
• Don't encode or tunnel your URLs unnecessarily. If you don't know what this means, you probably aren't doing it.
• If you post external or third-party hosted content, make sure that the content is secure and from a known and trusted source.

For more information, you can refer to Microsoft Defender SmartScreen Frequently Asked Questions.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Regards,
Yu Zhou