# Let's Encrypt - Certificate issued to a fraudulent site

**URL:** <https://community.letsencrypt.org/t/lets-encrypt-certificate-issued-to-a-fraudulent-site/210910>\
**Category:** Issuance Policy\
**Created:** [December 30, 2023, 11:56pm UTC](https://community.letsencrypt.org/t/lets-encrypt-certificate-issued-to-a-fraudulent-site/210910 "2023-12-30T23:56:32Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![tenderbar](https://avatars.discourse-cdn.com/v4/letter/t/d2c977/32.png) [@tenderbar](https://community.letsencrypt.org/u/tenderbar)\
**Post date:** [December 30, 2023, 11:56pm UTC](https://community.letsencrypt.org/t/lets-encrypt-certificate-issued-to-a-fraudulent-site/210910/1 "2023-12-30T23:56:32Z")

</div>

"[https://lorrovteollc.icu/](https://lorrovteollc.icu/)" is a fraudulent site. They mirror Insight Financial Credit Union. Yesterday they had a Cloudfare certificate. I reported them. Now you have issued them a certificate. Please revoke. They ripped off my mother.

---

<div class="post-metadata">

**Author:** ![JamesLE](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jamesle/32/49364_2.png) [@JamesLE](https://community.letsencrypt.org/u/JamesLE)\
**Post date:** [December 31, 2023, 12:02am UTC](https://community.letsencrypt.org/t/lets-encrypt-certificate-issued-to-a-fraudulent-site/210910/2 "2023-12-31T00:02:41Z")

</div>

Please see: [The CA's Role in Fighting Phishing and Malware - Let's Encrypt](https://letsencrypt.org/2015/10/29/phishing-and-malware.html)

---

<div class="post-metadata">

**Author:** ![tenderbar](https://avatars.discourse-cdn.com/v4/letter/t/d2c977/32.png) [@tenderbar](https://community.letsencrypt.org/u/tenderbar)\
**Post date:** [December 31, 2023, 12:15am UTC](https://community.letsencrypt.org/t/lets-encrypt-certificate-issued-to-a-fraudulent-site/210910/3 "2023-12-31T00:15:19Z")

</div>

Fine. I'm reporting it to the FBI right now. This is not good for your business. You can look at that site yourself and in 30 seconds realize it's fraudulent.

Take it down.

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [December 31, 2023, 12:20am UTC](https://community.letsencrypt.org/t/lets-encrypt-certificate-issued-to-a-fraudulent-site/210910/4 "2023-12-31T00:20:35Z")

</div>