Hello Let's Encrypt Community, I want to draw your attention to a critical issue involving the misuse of Let's Encrypt SSL certificates. Scammers are currently exploiting Let's Encrypt SSL certificates on multiple fraudulent websites, including " https://www.silverback-app.com " and " https://admin.si…

Thanks for the report. Our current policy does not allow us to revoke certificates based on the content of websites, including for suspected phishing, malware, fraud, abuse, or otherwise objectionable content. We recommend reporting such sites to Google Safe Browsing and the Microsoft Smart Screen …

[image] suki-abkari: It is essential to uphold the reputation and integrity of Let's Encrypt and safeguard users against the activities of these fraudsters. No, it's not. Please educate yourself about what a TLS certificate entails and especially what it does not. Please see: [image…

Thank you for the information and the links provided. I understand the primary role of Let's Encrypt is to provide SSL/TLS certificates for securing websites. My intention in raising this matter was not to criticize Let's Encrypt but to inform the community about potential misuse of SSL/TLS certifi…

Thank you for your response and the provided information. I understand Let's Encrypt's policy regarding the revocation of certificates. I've already reported the issue to Google Safe Browsing and the Microsoft Smart Screen program, as you suggested. My aim was to raise awareness and ensure that prop…

[image] Please Report Shady Websites to the Proper Authorities Issuance Policy P…

@suki-abkari , your learning and change of direction here are great. I'm a bit late. :slightly_smiling_face: I posted my "guidepost" topic link above for the benefit of future searchers and to "tag" this topic.

Thank you for you kind response :blush: I aim to continue learning and contribute to preventing harmful actions. This platform has been incredibly helpful, and I'm eager to explore more valuable content.

Harmful Actions. Interesting. I have a friend of 40 years that contacted me yesterday. "Hey... my domain was hacked... can you un-hack it? The critical point in this post is that the domain was his-actual-name.com ' He is 80 years old and totally forgot that he let his domain go. He allowed the…

[image] suki-abkari: I've already reported the issue to relevant authorities as appropriate. I appreciate your clarification on Let's Encrypt's role. I further suggest doing the following: 1- Determine the IP(s) of the offending website(s). 2- Use https://whois.arin.net to determine who own…

I have already taken steps to identify the IPs of the offending websites and started investigating their hosting providers, cloud services and related contacts. While I received information from both NCSC Switzerland and NCSC UK, it is clear that these scammers are persistent and adaptable. Even if …

Urgent: Scammers Abusing Let's Encrypt SSL Certificate

Help

griffin October 29, 2023, 10:10pm 6

Topic		Replies	Views
SCAM Website using your SSL cert - Please Stop Them Help	5	2407	September 14, 2020
SSL Issued From LE Being Used in Credit Card Scam Help	13	707	September 13, 2023
SCAM Website using your SSL cert - Please remove certificate Issuance Policy	15	1201	December 30, 2023
Cryptocurrency Scam Help	4	660	July 5, 2022
Web3unite[.]com is a scam! Revoke the SSL! Site Feedback	5	181	July 5, 2025

Urgent: Scammers Abusing Let's Encrypt SSL Certificate

Related topics