Phishing pages are hiding behind well known cloud service domain (like sites.google.com) or ordinary business website (like florist website).
Blocking websites based on classification is less effective nowadays.
IT Risk and Compliance team are required to review and approve content filtering policy. It is an uphill battle and striking the balance between risk and productivity.
Let's equip your users with a sandbox to access the internet.