mass.report
Scan Intelligence Report0/100
high Risk
privaote.com
https://privaote.com/privnote
IP
172.67.220.184 · Cloudflare, Inc.
Location
Toronto, Canada
Domain Age
2 days ⚠
HTTP
200 · 16.8s
SSL
Valid· WE1, Google Trust Services, US
Status
COMPLETED
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
Privnote
Vendors
25/25
Status
completed
✓ phishtank✓ sophos✓ emsisoft✓ apple✓ apwg✓ openphish✓ spamhaus✓ urlscan✓ eset✓ microsoft✓ google✓ norton✓ netcraft✓ virustotal✓ yandex✓ brightcloud✓ avast✓ phishreport✓ mcafee✓ urlquery✓ cisa✓ bitdefender✓ fortiguard✓ urlabuse✓ avg
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
Privnote
Credential PhishingTechnology · 4/5/2026
Summary
The site at privaote.com is a typosquat clone of the legitimate Privnote service (privnote.com). It uses a similar page title and URL path to impersonate Privnote, likely to capture user credentials or sensitive information. The domain is only one character different from the real domain, indicating a clear intent to deceive.
Attack Techniques (4)
Typosquat domain (privaote.com → privnote.com)Brand name in URL path (/privnote/)Page title impersonating PrivnoteDynamic content likely capturing credentials via JavaScript
Indicators of Compromise (5)
▸Domain: privaote.com
▸Page title: Privnote - Self-destructing notes
▸URL path: /privnote/
▸Network request for logo: /privnote/privnote-logo.svg
▸New SSL certificate issued on Feb 14, 2026
Risk AssessmentUsed in abuse reports
The domain privaote.com is a newly registered typosquat of the legitimate Privnote service, created only 2 days ago. The page title and URL path clearly indicate an attempt to impersonate Privnote, which raises significant concerns regarding credential phishing. Additionally, the SSL certificate was issued just days ago, further highlighting the urgency of this threat. Immediate action is required to mitigate potential user harm.
Recommended Action
Suspend Domain
Cross-Reference8
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API