We received reports from our users that our URL is unsafe, but they are safe.

Question

Hi there,

I am trying to contact Microsoft Defender support, but I am experiencing difficulties getting in contact with anyone.

I am writing regarding false positive alerts that our users are receiving from Microsoft Defender concerning our legitimate application feature, Raycast Focus (https://www.raycast.com/core-features/focus).

Our users have reported that Microsoft Defender is flagging the Raycast Focus feature as potentially harmful. I would like to clarify that this is a false positive detection. Raycast Focus is a productivity feature that allows users to voluntarily block distracting websites during their focus sessions. The feature only blocks websites that users themselves have explicitly chosen to block, and only during their designated focus time periods.

Technical details:

• Feature URL: raycast.com/focus-session

• Product website: https://www.raycast.com/core-features/focus

• Functionality: Website blocking based on user-defined rules during focus sessions

• Purpose: Productivity enhancement

We kindly request that you review this case and whitelist our feature to prevent false positive detections. We are happy to provide any additional information or documentation needed to verify the legitimacy of our software.

Please let me know if you need any further details to process this request.

Thank you for your attention to this matter.

Answer 1

Hi @Tirta Wulandari

Submit the False Positive to https://aka.ms/wdsi

You can submit the files of the raycast application to Microsoft for analysis. (From my understanding this is your application)

Here is a link on how to go about this https://learn.microsoft.com/en-us/defender-endpoint/defender-endpoint-false-positives-negatives

Here is a similar case - https://answers.microsoft.com/en-us/windows/forum/all/how-can-i-tell-if-microsoft-defender-is-returning/8d68b490-dfae-40ce-92f0-bdc77bd7f0f7