Today I received a spoofed E-mail looking like a PayPal receipt Among all the non-working links is one that is labeled Resolution Center It redirects via a BitLy link to https://vertification.paypal.com-security-login-account.com/signin/ This site is using a signed cert from Lets Encrypt that m…

[image] whozdat9: (…) that makes it look almost legitimate No it doesn't. It just tells the user the connection between him/her and this spoofing site is secure. Nothing more, nothing less.

You can report a certificate that is being used to conduct fraud: [image] Mechanism for requesting revocation of mis-used certificates? Issuance Policy A…

[image] whozdat9: If there would be a way to revoke their SSL cert from this site it will reduce the legitimate look of the fake site Well, it might, if browsers checked revocation information--but they generally don't. However, browsers these days typically highlight the domain name. If yo…

Let’s Encrypt uses Google’s Safe Browsing API to check if the domain a certificate is request for is known to be malicious. If that’s the case, issuance is blocked. This check is only performed during issuance; there’s no automatic revocation if the domain gets added later on (though renewal will be…

[image] pfg: AFAIK the blacklist consists mostly of *.<blacklisted-label>.<tld> rules, i.e. something like paypal.com , paypal.io , www.paypal.com would be blocked, but paypal.com.example.com wouldn't. That's the part I was thinking of, but wasn't aware it worked that way. Though I suppose it …

Spoofed PayPal E-mail using SSL Cert

Issuance Tech

motoko April 30, 2017, 6:00pm 3

You can report a certificate that is being used to conduct fraud:

Topic		Replies	Views
A fake PayPal phishing website is using "Let's Encrypt" certificate Help	7	5167	October 7, 2016
Golpe plishing SSL Ajuda (em português)	1	54	May 26, 2026
SCAM Website using your SSL cert - Please remove certificate Issuance Policy	14	1227	December 30, 2023
Domain using Lets Encrypt certificate for phishing! Issuance Policy	1	2819	December 11, 2017
SSL Issued From LE Being Used in Credit Card Scam Help	12	711	August 14, 2023

Spoofed PayPal E-mail using SSL Cert

Related topics