mass.report
Scan Intelligence Report0/100
high Risk
priznote.com
https://priznote.com/privnote
IP
172.67.205.104 · Cloudflare, Inc.
Location
Toronto, Canada
Domain Age
3 days ⚠
HTTP
200 · 21.7s
SSL
Valid· WE1, Google Trust Services, US
Status
COMPLETED
Domain Intelligence: priznote.com
Scanned 9 times since Feb 10, 2026, 09:27 AM UTC
⚠ High (65)
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
Privnote
Credential PhishingTechnology · 4/5/2026
Summary
The site at priznote.com is a typosquat clone of the legitimate Privnote service (privnote.com). It presents itself with identical branding and functionality, aiming to collect user notes and potentially sensitive information. The domain is only one character different from the real domain, indicating a clear intent to deceive users.
Attack Techniques (4)
Typosquat domain (priznote.com → privnote.com)Brand logo loaded from the same domain (privnote-logo.svg)Cloned SPA with identical UI elementsDynamic form rendering via JavaScript likely for credential capture
Indicators of Compromise (5)
▸Domain: priznote.com
▸Page Title: Privnote - Self-destructing notes
▸Network request for logo: /privnote/privnote-logo.svg
▸POST request to /cdn-cgi/rum?
▸JavaScript bundle: /privnote/assets/index-Ij7PN6mq.js
Risk AssessmentUsed in abuse reports
The domain priznote.com is a newly registered typosquatting site that impersonates the legitimate Privnote service. The page title and URL path both reference Privnote, and the site loads brand assets from the same domain. Additionally, the SSL certificate was issued just three days ago, further indicating high risk. Immediate action is required to prevent potential user data compromise.
Recommended Action
Suspend Domain
Cross-Reference8
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API