The site qrivnote.com is a newly registered domain (21 days) that visually imitates Privnote, a known note-destructing service. It uses a Privnote-like page title, branding assets (logo, icons) and a login/password field to capture credentials. The presence of a login form on a typosquatted domain, combined with a matching UI and brand signals, constitutes a high-risk credential phishing attempt. The site employs common JS assets and Cloudflare usage, but the core signals—domain similarity, impersonated branding, and credential capture interface—confirm malicious intent and target victims seeking Privnote-like functionality.