An alert has flagged both inbound and outbound traffic to a malicious website. Your shift supervisor says the customer has been notified many times in the past, but never responds. You are advised to mark the ticket Authorized Activity and whitelist the IP. How would you handle this situation?