I just received a text message on my mobile claiming they were from the lotteries commision (which they clearly arent). The URL in the message was emi1.me/ubjBt which I do not plan on visiting.
The emi1.me domain in whois says its a cloudflair domain. Perhaps one of your users has been hacked.
Who (if anyone) should this be reported to ?