@angristan My work recently ran into a similar issue with our client dashboard subdomain being listed by Microsoft SmartScreen; several calls/email from Edge users… We had to use Edge itself to report the false-positive, the SmartScreen website only allows reports.

I hope we don’t end up with a ‘safe site’ system like YouTube’s DMCA, where they blindly trust any report and put the onus on webmasters for fake/malicious reports.