question

NicolasMarieMoreau avatar image
0 Votes"
NicolasMarieMoreau asked KaelYao-MSFT commented

How to report a false positive filter of Microsoft ?

Good morning to the community,

Is there a way to contact Microsoft and know more about their phishing policies ?
They are reporting our website as phishing since more than 2 months to all Office 365 users.
Since we are not Outlook professional users, they don't accept to communicate with us to help their customers.
Many of our important email receivers tried to find a solution but Microsoft didn't help them (airports, hospitals pharmaceutical, etc.).

Problem description :
Problem is only with Office 365 users :
Receiver doesn't receive the email and we (as sender) doesn't receive any report of no deliverability.
Only admins can find the reason of the lost emails :

Original IP
<ip address>

Directionality
Inbound

System overrides
None

Threats / Phish confidence level
Phish / Normal

Threats / Detection technologies
Phish / URL malicious reputation

Delivery action / Original delivery location
Blocked / Quarantine

Latest delivery location
Quarantine

Protection policy/action
Spam policy/Send to quarantine

Internet Message ID
<C7D55F3C-370A-44E1-8C10-763148DAD23C@<domain>.com>

Network Message ID
1cb617a6-ea28-425b-28c8-08d9259d7a2e

Cluster Id
317900958

Language
NL

Threats / URLs in message
Phish / https://ci5.googleusercontent.com/proxy/cav8uZoiN5G25XE8uJ8azREvxQzIURmy9-fOWr5CDko2PzGgv2SHasyjzbaHP0X4jZfxQeAm6uMhv4PtKBxRkGZK=s0-d-e1-ft#http://www.<domain>.com/<domain>_RGB-02.jpg

Phish / https://ci3.googleusercontent.com/proxy/mb7rHP5QfgBU_5lsny6A3H6PQsx4S_jX28ItgNlH-bsMsOOe0yxp-y7TUljpe-je1S4zzwqwKew6VYrEDFI-JrLN=s0-d-e1-ft#http://www.<domain>.com/colors_<domain>.jpg

Phish / https://www.<domain>.com/

None / http://<domain>.com/


I hope to find a solution for this error.
Best regards,
Nicolas

PS : when our customers add our domain to the green list, all is working fine : but this is not a stable solution. Some of our big customers are not able to do that.





office-outlook-itprooffice-exchange-online-itpro
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @NicolasMarieMoreau ,

Welcome to Q&A forum!

Considering your issue may be more related to exchange online, I added relevant exchange online tag under your post, so that there would be more exchange experts who could provide you with more targeted help.

Hope your issue would be resolved soon :)

0 Votes 0 ·

Hi @NicolasMarieMoreau

Please note:
Since this is a public forum, I have removed your personal information in the post.
Please don't forget to hide your personal information for security.
Thanks for your understanding.

0 Votes 0 ·
KaelYao-MSFT avatar image
0 Votes"
KaelYao-MSFT answered KaelYao-MSFT commented

Hi @NicolasMarieMoreau

I suppose you may follow this guide to submit a message to Microsoft for analysis:
Manually submit messages to Microsoft for analysis

If you would like phone support, please refer to this link to contact support and see if they are able to help you with the issue:
Global Customer Service phone numbers


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @NicolasMarieMoreau

I am writing here to confirm with you how thing going now?
If you have any questions or needed further help on this issue, please feel free to post back.

0 Votes 0 ·
NicolasMoreau-2002 avatar image
0 Votes"
NicolasMoreau-2002 answered KaelYao-MSFT commented

Hi @KaelYao-MSFT,
We manually submit messages to Microsoft for analysis, as you asked to do, but this doesn't help.
The domain coronaprint.com is blacklisted by Microsoft and this is a big problem. This week we had 2 big companies, one international and another governmental who were unable to receive a pdf from us because in the pdf there was written www.coronaprint.com & info@coronaprint.com

The same pdf sent to an office 365 email address from gmail or any other accounts are blocked by Microsoft quarantaine policies.

It is a shame !

I have called your services during 1h10 without answer. Please let me know if you have a professional support.

Best regards,
Nicolas Moreau

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Nicolas.

Sorry for the inconvenience caused.

To contact M365 support, please open a service request in Microsoft 365 admin center.
145198-02.png


0 Votes 0 ·
02.png (15.5 KiB)