We are using Sandblast Agent with Zero Phishing and one website that is definitely phishing did not get detected by the Zero Phishing scanning.
What is the proper way to report it to hopefully improve next scans?
I would create a ticket with TAC - the Service Request Type Content Classification is only for Report Spam misclassification, Request URL Categorization and Application Control Requests.
You can request the resource be investigated by R&D by clicking here (after clicking on the icon).
You can create an exclusion in the GUI temporarily, by adding an exclusion here (while ZP is not listed, it will apply) and in addition, CIDR domains can be added for internal exclusions for the browser plugin.
Note, the rule will need to apply to the specific group or rule - potentially not "Entire Organisation"
Retrieving data ...