How to flag another WordPress site so that it gets on the blacklist

Our firm had a phishing attack sent to many and victims who fell for it were taken to a credential harvester at compromised-domain.tld/wp-admin/images/zeusnew/ZS/IK/page.php I’m glad Wordfence is protecting our site and I see it checks against a blacklist, but how does that blacklist get populated? Can I flag a site or report a site?