https://privnore.com/
104.21.95.69 · Cloudflare, Inc.
Toronto, Canada
27 days
200 · 17.8s
Valid· WE1, Google Trust Services, US
COMPLETED
Privnote Typosquat Clone (Credential Phish)
privnote-typosquat-clone-credential-phish-effbf276
technology | finance | ecommerce · 4/5/2026
The page at privnore.com presents itself as Privnote (title and logo text reference Privnote) but the domain is a typosquat 1 character away from privnote.com. The page loads Privnote branding assets and shows a note-creation interface that resembles Privnote, including a password field and note creation controls. The domain is newly registered (27 days) and uses Cloudflare with a valid SSL certificate, indicating potential evasion and infrastructure setup for credential harvesting.
The site privnore.com is a confirmed impersonation of Privnote, leveraging typosquatting (one-character difference) and Privnote branding (logo, page title) to mislead victims into using a legitimate Privnote-like service. The presence of a password field, a functional note creation UI, and frequent external JavaScript loading from attacker domains indicate credential harvesting and potential data exfiltration. The domain is newly registered (27 days) and sits behind Cloudflare with a valid TLS certificate, which is consistent with phish operations designed to appear legitimate while actively evading basic scrutiny. Immediate action is warranted: suspend domain and block hosting to prevent credential theft and data leakage, and notify branding teams for takedown coordination.
Monitor