Microsoft Defender's defense mechanisms may mistakenly identify messages as phishing attempts (false positives).
If this happens to your email domain, it is crucial to report the error to Microsoft using the client allow/block list tool.
This article explains how to allow a Proteclink URL contained in messages.
If the URL support.security-mail.net is blocked, you will need to follow the same procedure.
Steps:
- Log in directly to the Allow/Block Tenant List page: https://security.microsoft.com/tenantAllowBlockList.
- Enter your Microsoft 365 administrator account credentials.
- Navigate to the URL tab.
- Click Allow a URL by submitting the URL (or Submit URL).
- Enter or copy/paste: protectlink.security-mail.net/*
6. Check Should not have been blocked (false positive).