open ssl scam