#PrivNote.com #Clone #Phishing #Scam
#andreysokol #alexandrermakov #tornoteio #tornote #fory66399 #metamask #privnote #hkleaks #Scams
@itsecbot dispatch @dispatch @nemo
I found a possible fake / phishing site with exact same Privnote.com look and function...
...BUT uses URL ➡️ prsivnote.com/ ⬅️
( ⬆️ S added to URL ⬆️ )
WHOIS INFO:
...FOR FAKE:
https://www.whois.com/whois/prsivnote.com
....FOR REAL:
https://www.whois.com/whois/privnote.com
==================
⬇️ SOME INFO MERGED FROM THIS POST:
⏺️ https://krebsonsecurity.com/2024/04/fake-lawsuit-threat-exposes-privnote-phishing-sites/
Also post:
⏺️ https://ioc.exchange/@dispatch/112213544350490340
#Russia'sWaronUkraine #ALittleSunshine #AlexandrErmakov #LatestWarnings #TaylorMonahan #privnote.com #Breadcrumbs #WebFraud2.0 #AndreySokol #Tornote.io #fory66399 #MetaMask #Privnote #Hkleaks
@nemo @itsecbot @dispatch And I mentioned / quoted the link in the post and said it was from there!
Also some other info - this link shows different spellings of fake sites like PRLivnote.com :
https://web.archive.org/web/20250602020151/https://prsivnote.com/about
@freeschool @itsecbot @dispatch
You're correct 😅 #meaculpa 🙏
:D Great addition thank you 👍 ✅
@itsecbot @dispatch @nemo
Hi Brian (check the thread as I mention your findings and add a graphic here if you'd like to use it...
@briankrebs (Brian Krebs is on Mastodon for those that didn't know / want to follow...)
Post examples related to PrivNote.com fakes (online note website) are listed below with various websites (notice spelling):
1/ PrivnoteS.com Is Phishing Bitcoin from Users of Private Messaging Service Privnote.com
2/ Fake Lawsuit Threat Exposes Privnote Phishing Sites
https://krebsonsecurity.com/2024/04/fake-lawsuit-threat-exposes-privnote-phishing-sites/
Main Credits to:
https://infosec.exchange/@briankrebs
#FreeSchool for the custom graphic
#fake #website #phishing #data
prsivnote [dot com] is a potential fake version of privnote (can anyone confirm?):
https://privnote.com/ is the non-fake version for online notes...
The different/bad URL spelling of original is #prSivnote [dot com] is what I think skims data and bitcoin addresses in the notes much like other #clone websites which you can see more info here:: https://qoto.org/@freeschool/114722010435397368)
@freeschool @itsecbot @dispatch
Krebs on security has posted that one year ago.
Still good to get a reminder thx 👍 ✅
Good work.