We had a phishing email this week that Microsoft Defender let through. Its email body link was a Microsoft short URL like https://ncv.microsoft.com/ https://ncv

We had a phishing email this week that Microsoft Defender let through. Its email body link was a Microsoft short URL like https://ncv.microsoft.com/ https://ncv.microsoft.com/ which then landed on another Microsoft URL that began with https://customervoice.microsoft.com/Pages/ResponsePage.aspx https://customervoice.microsoft.com/Pages/ResponsePage.aspx and showed a legitimate looking FAX/PDF download, which was the only link in the chain that was obviously some odd scam site. The first link still works and it seems to redirect to a random scam page each time.