https://privenode.com/
172.67.163.151 · Cloudflare, Inc.
Toronto, Canada
1 day ⚠
200 · 18.2s
Valid· E7, Let's Encrypt, US
COMPLETED
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
Privnote
Vendors
30/30
Status
completed
No KB/IOK detections were recorded for this scan.
finance | technology | ecommerce | cybersecurity | other · 4/5/2026
This page at privenode.com presents itself as Privnote, with a page title and branding that closely mimic Privnote's UI. The domain is not Privnote.com, and the domain intelligence flags typosquatting (privenode vs privnote). The page loads Privnote-like assets (logo, UI copy) and includes a password input, suggesting credential collection via a cloning SPA. The SSL cert is newly issued and the domain is extremely new, indicating high risk of impersonation.
The site at privenode.com is a clear impersonation of Privnote. The domain is a near-duplicate spelling variant of Privnote and configured to resemble Privnote's interface, including a logo, page copy, and a password field. The page uses multiple external scripts and loads a Privnote-like logo, indicating an attempt to harvest credentials or sensitive data via clone-controlled UI. The SSL certificate is newly issued (1 day old) by Let's Encrypt, which is common for malicious sites attempting quick, low-friction phishing. Given the strong brand-mismatch signals, this warrants high-priority takedown actions. Recommend suspending the domain and blocking hosting access to prevent victim exposure, and flagging for registrar action due to brand impersonation.
Suspend Domain