How to get Microsoft to reclassify a website link redirector?
Summary
What email marketers say11Marketer opinions
Email marketer from Microsoft Support explains that if your site is incorrectly classified, you can submit it for review via the Microsoft Security Intelligence portal. The portal allows you to submit URLs/domains for analysis and potential reclassification.
Email marketer from Security Vendor Forum explains that understanding that Microsoft often relies on third-party data feeds for threat intelligence. If you can identify the source of the flagging, contacting that vendor directly may be a more effective route to resolution.
Email marketer from MXToolbox suggests utilizing diagnostic tools to check your domain against various blacklists and security databases. This can help identify if your domain is listed on any lists that Microsoft may be using.
Email marketer from DNSLookup shares that ensuring your DNS records (SPF, DKIM, DMARC) are properly configured is important for email authentication. Incorrect or missing records can lead to deliverability issues and potentially trigger security flags.
Email marketer from Email Deliverability Forum explains that some users have reported issues with certain link shorteners being flagged by Microsoft. Consider using a custom domain for your link redirector to improve trust and avoid association with potentially problematic shortener services.
Marketer from Email Geeks explains that Microsoft ingests 3rd party phish data with little to no sanity checks, every false positive he’s personally seen at MS originated with a third party. Getting in contact with the original vendor who flagged the URL is usually ideal as some have mechanisms to retract their data and can usually get in touch with the right folks to get listings manually removed. He suggests running the URL through virustotal.com.
Email marketer from LinkedIn suggests that building a positive domain reputation over time through consistent and responsible email sending practices can help reduce the likelihood of being flagged. This includes maintaining low spam complaint rates and engaging with subscribers.
Email marketer from Reddit explains that they contacted Microsoft support directly through their business support channels and emphasize the impact the incorrect classification is having on their business. Providing detailed evidence and being persistent can help.
Marketer from Email Geeks reported manually and escalated the issue with their 365 product manager, as they use it for their emails. The issue was fixed the next day.
Email marketer from Stack Overflow suggests to use a dedicated IP address for your email sending domain. This can help improve your sending reputation and reduce the likelihood of being flagged.
Email marketer from Talos Intelligence recommends checking your domain and IP reputation on the Talos Intelligence Reputation Center (if applicable). This provides insights into your sender reputation and any potential issues that may be contributing to the classification problem.
What the experts say2Expert opinions
Expert from Word to the Wise explains that it's crucial to understand how Microsoft views senders and their practices. Monitor deliverability rates, spam complaints, and engagement metrics to identify any potential issues that may be affecting your classification.
Expert from Spam Resource, Laura Atkins, emphasizes understanding sender reputation and the factors that contribute to it. Mitigation involves identifying the root cause of the classification, whether it's related to content, sending practices, or blacklisting, and taking corrective actions to improve reputation.
What the documentation says3Technical articles
Documentation from VirusTotal explains to use VirusTotal to scan your website link redirector for any malicious flags by different security vendors. This helps identify if a specific vendor is flagging your site, allowing you to focus your efforts on that particular vendor.
Documentation from Google Search Central recommends using the security issues report in Google Search Console to identify any security issues on your website that may be causing Microsoft to flag it. Address any identified issues promptly.
Documentation from Microsoft Learn explains that SmartScreen warnings can be triggered by various factors, including reputation and content. Understanding why a warning is displayed can help in addressing the underlying issue. For example, if the site lacks sufficient reputation, building trust over time might help.