So, we recently launched our website, and things are going great so far. But since last night we have seen that some end-users browsers are making calls to strange URLs. We don't know how or why the browser makes those calls. Our guess is that the user's browser was compromised and they might have unknowingly installed some browser extension that makes those calls.

Now the question is whether we could make the browser to stop making those cross-domain calls and only whitelist our domain and a few additional domains like GTM and other tracking apps? Of course, we need to handle this at the front-end level, but I'm not sure how to set a whitelist URLs list for fetch. Is there a way to do it??