Confirmed or user reported Phishing and other malicious sites should get added to a DefensX global blocklist and rather than going in as a standard "user request" go to a DefensX SOC team for further review
At the very least, if an admin confirms or reports a site as phishing or malicious, it gets escalated to the DefensX SOC team for further review to be recategorized as something malicious.