url as fishing

Question

Hello,

When an external user sends me a mail with a url (xxx) the mail goes to quarentaines because the defender detects a url as fisshing. How can I authorize the url in my tenant?

Answer 1

Hi, @Admin Misael ABREU

To authorise URLs in your tenant and prevent them from being flagged as phishing by Microsoft Defender, you can try the following two methods.

1.Submit the URL that is flagged as phishing in the Microsoft Defender portal. Microsoft Defender will analyse the URL and provide results. If the URL is deemed safe, it will be added to the allowlist. As shown in Fig.

For more information, see Manage submissions - Microsoft Defender for Office 365 | Microsoft Learn

Manage allows and blocks in the Tenant Allow/Block List - Microsoft Defender for Office 365 | Microsoft Learn

2.Use Safe Links.

In Microsoft Defender, navigate to Policies&rules->Threat policies->Safe Links, click "Create" and add the URL in "Do not rewrite the following URLs in email". As shown in Fig.

For more information, see Complete Safe Links overview for Microsoft Defender for Office 365 - Microsoft Defender for Office 365 | Microsoft Learn

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".