Hi Glenn,
Try removing it:
Review and unblock forms or users detected and blocked for potential phishing
- Sign in to the Microsoft 365 Defender portal.
- Select Incidents & alerts > Alerts. You may see one or all of the following alerts for Forms:
- User restricted from sharing forms and collecting responses
- Form flagged and confirmed as phishing
- Form blocked due to potential phishing attempt
- Form flagged and confirmed as phishing
- User restricted from sharing forms and collecting responses
- Select an alert to review it. To review the form that has been flagged, tap or click the three dots in the bottom right corner next to the Manage alert button, and then select Review this form.
Unblock a form or confirm its phishing attempt
If this is helpful please accept answer.