# Phishing Website Allowlisting - Microsoft Defender for Endpoint

If your organization uses Microsoft Defender for Endpoint, Microsoft Defender XDR, or other **[Microsoft Web Protection](https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/web-protection-overview?view=o365-worldwide)** products, your employees may experience issues with loading our simulated phishing websites.

Either a red blocked screen, or a little pop-up from Windows Defender may when attempting to load our simulated phishing websites.

**Windows Defender Blocked Popup**

![](https://help.caniphish.com/hc/article_attachments/9527345306255)

**Microsoft SmartScreen Blocked Screen**

![mdefender-red.png](https://help.caniphish.com/hc/article_attachments/7269043196303)

The reason access is blocked is due to the category Microsoft has marked these domains under. To allowlist GrintOps Phishing websites, please follow the below guide.

## Allowlisting GrintOps Phishing Websites

It's possible to override the blocked category in web content filtering to allow a single site by creating a custom indicator policy. The custom indicator policy will supersede the web content filtering policy when it's applied to the device group in question.

To define a custom indicator, follow these steps:

1. In the Microsoft Defender portal, go to Settings > Endpoints > Indicators > URL/Domain > Add Item. (Or click here - [https://security.microsoft.com/securitysettings/endpoints/custom\_ti\_indicators?childviewid=url](https://security.microsoft.com/securitysettings/endpoints/custom_ti_indicators?childviewid=url))  
    ![](https://help.caniphish.com/hc/article_attachments/9527298310671)
2. **The following are examples of GrintOps phishing website domains to be added under the "Manage URLs to Not Rewrite" section.** One-by-one, enter the following GrintOps phishing website domains with an expiration of your choosing and ensuring the "Allow" action is specified for all devices in your organization:

- - [![Screenshot 2025-07-17 113630.png](https://help.grintops.com/uploads/images/gallery/2025-07/scaled-1680-/oZAscreenshot-2025-07-17-113630.png)](https://help.grintops.com/uploads/images/gallery/2025-07/oZAscreenshot-2025-07-17-113630.png)

**![](https://help.caniphish.com/hc/article_attachments/9527345309327)  
![](https://help.caniphish.com/hc/article_attachments/9527298315663)**

[![mceclip6.png](https://help.grintops.com/uploads/images/gallery/2025-07/scaled-1680-/mceclip6.png)](https://help.grintops.com/uploads/images/gallery/2025-07/mceclip6.png)

All done! It takes time for Microsoft to propogate these changes so please wait 1-2 hours for this policy to take effect.