false positive report

Question

Hello Security Review Team, We are submitting a false positive report for the following domain(s): https://eldercare.services https://demo.eldercare.services https://tri-alliance.ai These domains host a governance-based AI speech platform for eldercare and multilingual assistance. The system uses: Secure HTTPS (TLS encryption) Azure-based Speech-to-Text and Text-to-Speech services No credential harvesting No financial collection No downloadable executables No obfuscated scripts No third-party ad networks The demo includes: Microphone access (with user permission) Secure WebSocket communication to Microsoft Azure services Real-time speech processing We believe automated heuristics may have flagged the domain due to: AI/WebSocket activity New domain age Low traffic history We request a manual review and reclassification. If any additional technical details are required, we are happy to provide them. Thank you for your assistance. Kind regards, Huibert Arnold Tri-Alliance / ElderCare [******@e-court.law]  or ******@3dnet.org

Answer 1

To report a false positive for the domains you've mentioned, you can follow the steps outlined in Microsoft Defender documentation. Here’s a summary of the process:

1. Submit the Domains for Analysis: You can submit the domains to Microsoft for analysis through the appropriate submission channels. For domains flagged by Microsoft Defender for Office 365, you can use the submission page for suspected spam or phishing.
2. Provide Detailed Information: When submitting, include all relevant details about the domains, the nature of the services they provide, and any context that may help in the review process. This should include the information you provided about the governance-based AI speech platform and the security measures in place.
3. Request Manual Review: Clearly request a manual review and reclassification of the domains, as you have done in your message. Mention any specific reasons you believe the domains were flagged, such as their new age or low traffic history.
4. Follow Up if Necessary: If you do not receive a response or if the issue persists, consider following up with Microsoft Support for further assistance.

This approach will help ensure that your report is processed effectively.

---

References:

• Address false positives or false negatives in Microsoft Defender XDR
• Resolve false positive malware detections