New Threats

If we find a new scam site we clearly can not report it directly to Quad9. Who would be the recommended threat feed provider to report it to, so that Quad9 can pick it up?