The CA's Role in Fighting Phishing and Malware

@fgirardey @RAMJAC
I would like to know if there is also any alternative to google’s service. If so, Let’s Encrypt could use it also. Perhaps using a DNS blacklist https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists ?

I searched and found several sites that have SSL certificates from official issuers (Comodo, etc) that are blocked by google’s safe browser service for providing malware and/or phishing scams.

Example: https ://kar.cr [link edited by moderator to not be clickable per other users’ suggestion - please bear in mind that this is a malicious domain when navigating to it]

So, do you think that the certificate issuer should be held accountable for the site actions/content?
If I am scammed by a site that has a ‘valid SSL’, should I sue the certificate issuer because I believed that the site was honest and real?

IMO this is marketing BS that the certificate issuers use to justify the high cost of the certificates.