I reported it yesterday evening, and received a prompt reply! They thanked me for bringing it to their attention, and it should all be taken care of now.

This morning, it seemed to still have all the subdomains blocked despite their fix. I finally had the idea to turn off the phishing and malware protection feature, and then turned it back on again. And with that, it is fixed for me (and hopefully, for others).