ATP Safe Links - Report False Positives / Possibility to overwrite MS classification
There is no feasible way to report false positives in ATP Safe Links.
If you run into this scenario, you can either send an email to SafelinksFeedback@microsoft.com and wait that it is being resolved or you open a support case at Microsoft.
Both options take a lot of time.
However, the email containing the link classified as malicious by Microsoft has already been sent out and the expectation is to make this link working as soon as possible.
Therefore, there needs to be a way to report those links which have to be re-classified (with a proper process attached) or a configuration to overwrite MS classification (last option would only help within the tenant, but not cross-tenant).
I don't know if you set the "Do not rewrite the following URLs:" in your portal if it will allow previously stamped 'bad' as ok.
Frank Martinez commented
+1 Microsoft needs to make some mechanism available to customers so that URLs that are incorrectly identified by STP Safelinks as being unsafe can be corrected. Per-tenant whitelisting is inadequate (and doesn't seem to work well).