Something I haven't seen mentioned is a DNS firewall to block phishing domains and newly registered domains. I use NextDNS for that and I'm sure there are others.