Protecting the Web from SMS Phishing: Introducing SmishReport.com by SURBL

Protecting the Web from SMS Phishing: Introducing SmishReport.com

In today’s digital world, phishing isn’t limited to your inbox. Increasingly, scammers are targeting individuals via SMS, a tactic known as smishing (SMS phishing). These text messages often contain malicious links designed to steal sensitive information, install malware, or commit fraud. As smishing attacks continue to rise, tools like SmishReport.com play a crucial role in helping protect the online community.

What is SmishReport.com?

SmishReport.com is a free, community-driven tool designed to combat SMS phishing attacks by identifying and reporting malicious domains found in smishing messages. The site allows users to quickly and anonymously submit suspicious domains they’ve received via text message.

The primary goal of SmishReport.com is to collect and verify smishing-related domains and contribute that intelligence to SURBL, an international anti-abuse organization that maintains lists of domains used in spam and other types of abuse.

How to Submit a Domain to SmishReport.com

Submitting a domain to SmishReport.com is fast and simple:

1. Visit SmishReport.com.
2. Paste the domain or URL you received in a suspicious SMS, or upload a screenshot.
3. Click submit – that’s it! If the URL is confirmed to be malicious, it will be added to the appropriate SURBL blocklist to protect users worldwide.

There’s no need to create an account or provide personal information. Your submission helps build a safer digital environment for everyone.

Here’s an example of a smishing message submitted to SURBL via Smishreport.com

If the URL is confirmed to be malicious, it will be listed in the appropriate SURBL blocklist. You can see the submissions and the listing categories on the Smish Report site. For example, the URL in the last screenshot was added to the following SURBL lists:

Fresh: List of newly registered domains, less than 30 days year old
Abuse: List of domains related to abuse, including spam.
Phishing: List of domains related to phishing attacks

What is SURBL?

SURBL BV (Spam URI Real-time Blocklists) is a well-established anti-abuse organization that compiles domain intelligence for use in email and web filtering. Unlike traditional spam blocklists that focus on message senders, SURBL lists the domains found within the message body, such as malicious links in emails or SMS texts.

SURBL data is widely used by spam filters, web reputation systems, DNS-based security solutions, and security researchers. When a domain is listed on SURBL, it helps:

SMS Filters and telco’s enhance their coverage
Email services block messages containing known malicious URLs
Security software detect and prevent phishing and malware attacks
Organizations protect their users and networks from emerging threats

Why Your Contribution Matters

Every smishing message you report helps strengthen a global defense against digital fraud. By submitting domains to SmishReport.com:

You help identify new threats early
You contribute to SURBL, enabling better detection across the internet
You protect others from falling victim to scams you’ve already encountered

Smishing is a growing problem, and it’s a challenge that no one organization can solve alone. Community reporting empowers us all to be part of the solution.

Join the Fight Against Smishing

The next time you receive a suspicious text message, don’t just delete it. Report it! Visit SmishReport.com, paste the suspicious domain, and submit. It only takes a few seconds to make the internet a safer place.

Stay safe. Stay alert. And keep reporting.