Is office365 anti phish Broke?

[johnpd]

I have access to quarantine folder on https://protection.office.com/quarantine and it’s gone mental - technical term. Amazon emails , government emails all listed as SCL9 !

 

I checked another office 365 tenant and it too is doing it on a small site with no mail rules at all.

 

If I test an email to myself from a personal account and put our domain url in the message body - Boom - quarantine.

 

Our url is “snfederation.co.Uk”.

 

If you get chance can you please test it against your tenants for high confidence phish (SCL:9) in message headers please.

 

Luckily we are migrating away from this domain but it’s affecting message body RE trails where that url is mentioned so it all gets banned.

 

Thanks

John

[johnpd]

Fixed it by wiping the website - windows smart screen was detecting malicious files on the website which in turn rated mail from the domain as High confidence phishing SCL 9.