Comodo issued a SSL cert to a malicious phishing website

Digital Certificates SSL Certificate
#1

You as a CA are liable for damages. Please revoke the HTTPS certificate ASAP to this site. It is a phishing site for google accounts.

Site is www.authcl.com . If you go there now it just redirects to zoho.com

You will only see phishing when you go to specific links such as this:

https://authcl.com/fa/74dec3e3827819c905683312f3d6fd49

For more information please look at this reddit post:

#2

Hi

Why would Comodo be liable for a certificate issued by GeoTrust?

Clicking on the padlock, after it redirects to the zoho website shows a domain validated certificate issued by GeoTrust.

Maybe you should have checked this before posting on the Comodo forum.

Garry

#3

Comodo has issued the certificate for authcl.com.
https://sslanalyzer.comodoca.com/?url=authcl.com

#4

Fair enough… So both Comodo and GeoTrust not validating deep enough on the Domain Validated certificates. :-\

#5

You do realise, “validating” a certificate for authcl.com only proves that it was issued to authcl.com?

If that happens to be a phishing site, “you are liable for damages” is a bit of a stretch. You could get an EV certificate for a malware site with any supplier anywhere if you used a legitimate business name to do so.