A few weeks ago we had a phising attempt. We blocked the IP with SentinelOne. The problem is that this site is hosted with Cloudflare and multiple sites where blocked. We disabled the rule in SentinelOne and got an FQDN block through our own network. Now we dont like to have an FQDN block with Cloudflare and I want to know if there are any solutions?
medsizeonline.com is the phising domain.