domain anomalies

Microsoft Teams administrators should treat the External Domain Anomalies report as a prompt to make a domain-policy decision, not as proof of phishing or compromise. A domain that suddenly creates many first-time contacts may deserve to stay open, move to a named-domain allowlist, or be blocked...