mass.report
Scan Intelligence Report0/100
high Risk
priznote.com
https://priznote.com/notes/
IP
104.21.58.161 · Cloudflare, Inc.
Location
Toronto, Canada
Domain Age
5 days ⚠
HTTP
200 · 9.4s
SSL
Valid· WE1, Google Trust Services, US
Status
COMPLETED
Domain Intelligence: priznote.com
Scanned 9 times since Feb 10, 2026, 09:27 AM UTC
⚠ High (65)
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
Privnote
Credential PhishingTechnology · 4/5/2026
Summary
The site at priznote.com is a typosquat clone of the legitimate Privnote service (privnote.com). It presents itself as a platform for self-destructing notes, utilizing a similar design and branding to deceive users. The domain is only one character different from the real domain, indicating a clear intent to impersonate Privnote.
Attack Techniques (4)
Typosquat domain (priznote.com → privnote.com)Cloned UI with identical branding and functionalityJavaScript SPA likely capturing user input dynamicallyBrand logo loaded from the same domain as the phishing site
Indicators of Compromise (5)
▸Domain: priznote.com
▸Page title: 'Privnote - Self-destructing notes'
▸Network request for logo: https://priznote.com/notes/privnote-logo.svg
▸JavaScript bundle: https://priznote.com/notes/assets/index-rPN5mNTO.js
▸POST request to: https://priznote.com/cdn-cgi/rum?
Risk AssessmentUsed in abuse reports
The domain priznote.com is a newly registered typosquat of the legitimate Privnote service, created just 5 days ago. The page title directly references Privnote, and the site mimics its branding and functionality. Network requests reveal the loading of brand assets, further solidifying the impersonation. The SSL certificate was issued only 5 days ago, adding to the high-risk profile of this domain.
Recommended Action
Suspend Domain
Cross-Reference8
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API