# Scam site https://breezeekitchen.com/ using Let's Encrypt certificate

**URL:** <https://community.letsencrypt.org/t/scam-site-https-breezeekitchen-com-using-lets-encrypt-certificate/173570>\
**Category:** Issuance Policy\
**Created:** [March 10, 2022, 8:40pm UTC](https://community.letsencrypt.org/t/scam-site-https-breezeekitchen-com-using-lets-encrypt-certificate/173570 "2022-03-10T20:40:31Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![elfman](https://avatars.discourse-cdn.com/v4/letter/e/87869e/32.png) [@elfman](https://community.letsencrypt.org/u/elfman)\
**Post date:** [March 10, 2022, 8:40pm UTC](https://community.letsencrypt.org/t/scam-site-https-breezeekitchen-com-using-lets-encrypt-certificate/173570/1 "2022-03-10T20:40:31Z")

</div>

This website was used to scam users on the Facebook marketplace. Anything that can be done to revoke this certificate from this user ? The site is currently down and I have a dispute open with PayPal. Yes .. I'm the dummy who fell for the $80 pizza oven regularly priced at $600 🙂 These folks actually shipped a cheap item to my home town to make it look like to PayPal that I received the item.

---

<div class="post-metadata">

**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\
**Post date:** [March 10, 2022, 8:46pm UTC](https://community.letsencrypt.org/t/scam-site-https-breezeekitchen-com-using-lets-encrypt-certificate/173570/2 "2022-03-10T20:46:01Z")

</div>

Please read this:

> **[The CA's Role in Fighting Phishing and Malware - Let's Encrypt](https://letsencrypt.org/2015/10/29/phishing-and-malware.html)**
>
> Since we announced Let’s Encrypt we’ve often been asked how we’ll ensure that we don’t issue certificates for phishing and malware sites. The concern most commonly expressed is that having valid HTTPS certificates helps these sites look more...

---

<div class="post-metadata">

**Author:** ![jvanasco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jvanasco/32/55900_2.png) [@jvanasco](https://community.letsencrypt.org/u/jvanasco)\
**Post date:** [March 10, 2022, 8:50pm UTC](https://community.letsencrypt.org/t/scam-site-https-breezeekitchen-com-using-lets-encrypt-certificate/173570/3 "2022-03-10T20:50:23Z")

</div>

Was it an Ooni oven? There are a lot of those scams right now. Report it to Ooni (they have a twitter) and Facebook, and ask if there have been other complaints for that site. If there are, add that info – e.g. that it's a known scammer and not a licensed reseller for that company – to your PayPal case.

They were advertising to me heavily last week, but I knew it was a scam and alerted Ooni.

Edit: I did see that site, reported a different one to Ooni ([https://twitter.com/jonathanvanasco/status/1499862373884178434](https://twitter.com/jonathanvanasco/status/1499862373884178434)).

---

<div class="post-metadata">

**Author:** ![webprofusion](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/webprofusion/32/85310_2.png) [@webprofusion](https://community.letsencrypt.org/u/webprofusion)\
**Post date:** [March 11, 2022, 1:50am UTC](https://community.letsencrypt.org/t/scam-site-https-breezeekitchen-com-using-lets-encrypt-certificate/173570/4 "2022-03-11T01:50:10Z")

</div>

Ooni could then report this to Cloudflare (their IP owner - [https://www.cloudflare.com/trust-hub/reporting-abuse](https://www.cloudflare.com/trust-hub/reporting-abuse)) and GoDaddy (their DNS host) to track down the site owner.

---

<div class="post-metadata">

**Author:** ![fallingrock](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/fallingrock/32/12109_2.png) [@fallingrock](https://community.letsencrypt.org/u/fallingrock)\
**Post date:** [March 11, 2022, 2:32pm UTC](https://community.letsencrypt.org/t/scam-site-https-breezeekitchen-com-using-lets-encrypt-certificate/173570/5 "2022-03-11T14:32:50Z")

</div>

Cloudflare has told me directly that they do not take any responsibility for sites they provide cdn services for.

---

<div class="post-metadata">

**Author:** ![jvanasco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jvanasco/32/55900_2.png) [@jvanasco](https://community.letsencrypt.org/u/jvanasco)\
**Post date:** [March 11, 2022, 3:14pm UTC](https://community.letsencrypt.org/t/scam-site-https-breezeekitchen-com-using-lets-encrypt-certificate/173570/6 "2022-03-11T15:14:48Z")

</div>

No vendor will take responsibility for their clients' sites. They are also typically legally shielded by the "safe harbor" provision of the DMCA.

While Cloudflare can not be held responsible for their clients, they will de-platform clients who violate Cloudflare's Terms-of-Service.

When scam sites infringe on the trademarks and copyrights of an entity, there are streamlined ways for the entity to uncover details about the scammer. (Those typically involve lawyers and courts.)

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [March 16, 2022, 12:42am UTC](https://community.letsencrypt.org/t/scam-site-https-breezeekitchen-com-using-lets-encrypt-certificate/173570/7 "2022-03-16T00:42:04Z")

</div>

> [@jvanasco](#):
>
> No vendor will take responsibility for their clients' sites. They are also typically legally shielded by the "safe harbor" provision of the DMCA.

(And, sometimes more importantly, by §230 of the CDA, for non-copyright issues.)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [April 15, 2022, 12:42am UTC](https://community.letsencrypt.org/t/scam-site-https-breezeekitchen-com-using-lets-encrypt-certificate/173570/8 "2022-04-15T00:42:08Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
