[warning] Fake Private-note -- pirvnota.com

[bitbollo]

Hi everyone,
Please pay attention to a fake "privnote" website.
Its called Pirvnota

Code:

 https://pirvnota.com

and It should be used with maximum caution since It seems they "read" the notes and change the btc address inside (putting their own address) [source telegram chat scarce.city ].

I haven't tested by myself so I would be happy to change/delete this post of needed or new findings will arise.

[YOSHIE]

I haven't tested by myself so I would be happy to change/delete this post of needed or new findings will arise.

I hope you never try to deal with the Privnote site, I've seen several warnings from @ChiBitCTy and @Room101 here warning the Privnote site is a scam.
For example:

* Topic: Privnote(s).com Bitcoin Phishing Scam

* Topic: PSA: Make sure you NEVER use privnotes.com!!

You should undo your intention to visit it because they have tested it above, this is the umpteenth warning for the privnotes.com site.

Hope those who want to use the Privnote site, forget to visit, if they don't want to lose their crypto assets.


yes, i just saw this.

Hi everyone,
Please pay attention to a fake "privnote" website.

Which are actually: pirvnota.com

There seems to be a bit of an irregularity with the link about Pirvnota.com.

Many scammers and phishing sites pose as legitimate messaging apps to steal...

[bitbollo]

Wrong...please check typo/misspellings

Because Privnote.com its the legit site and I guess its misspelled on your post...since its clear that previous scam accusations are talking about privnotes.com (Yes this one is a scam)...

I haven't tested by myself so I would be happy to change/delete this post of needed or new findings will arise.

I hope you never try to deal with the Privnote site, I've seen several warnings from @ChiBitCTy and @Room101 here warning the Privnote site is a scam.
For example:

* Topic: Privnote(s).com Bitcoin Phishing Scam

* Topic: PSA: Make sure you NEVER use privnotes.com!!

You should undo your intention to visit it because they have tested it above, this is the umpteenth warning for the privnotes.com site.

Hope those who want to use the Privnote site, forget to visit, if they don't want to lose their crypto assets.

[crwth]

Make sure that you are using the right site for this.  These type of websites that encrypt your notes to is subject to investigation or exercised caution. If they have some kind of filtering, they could really access your notes and manipulate your content inside.

I think it’s a common thing to see that there are mistakes on the name of the website. Immediately that should be an indicator that it exist.

[Avirunes]

The sad part about these kind of sites is that the scammers find an easy way to advertise such sites through Google and other reputed sites we use in our daily lives. While trying to search the actual site on google, I found this fake privnote clone on sponsored links.



The report section of this ad revealed the information about the advertiser:

Advertiser identity verified by Google
Advertiser:
Bлaдимep Дpимaнoв
Location:
Russia

Bлaдимep Дpимaнoв (Vladimer Drimanov) from Russia seems to be advertiser of the clone of privnote mentioned here. I have reported the ad now.  

[Yamane_Keto]

Thanks for the warning, I followed the links above and found this thread The dangers and threat of using Self destruct Private Notes

Code:

- https://safenote.co/

- https://revealit.me/

- https://yopass.se/#/

- https://safe-text.com/

- https://nohistory.fyi/

But really, does anyone use an online service to send sensitive data? This data can be viewed by the service provider a.k.a site owner and then may be modified.
The data is not hashed to ensure that it is not modified, and therefore even the legal site cannot be trusted.

Image source

[albon]

Its called Pirvnota

Code:

 https://pirvnota.com

and It should be used with maximum caution since It seems they "read" the notes and change the btc address inside (putting their own address) [source telegram chat scarce.city ].

I used the pirvnota site and wrote a note containing my BTC address, and pressed Create Note, and after that, I got a link containing my note, and after I opened the noted link and showed it, the surprise was that they changed my BTC address to theirs as in the following image:



Thank you for posting this warning, and indeed pirvnota is a fake site that has the same interface as the original Privnote.com site and manipulates users' notes, and these scammers certainly see them before any user sends them, so I honestly do not see the benefit of using these sites that provide anonymous notes, because I am sure that this is a lie and that the users' notes will be exposed to the site administrators.

[shasan]

Hi everyone,
Please pay attention to a fake "privnote" website.
Its called Pirvnota

Code:

 https://pirvnota.com

and It should be used with maximum caution since It seems they "read" the notes and change the btc address inside (putting their own address) [source telegram chat scarce.city ].

I haven't tested by myself so I would be happy to change/delete this post of needed or new findings will arise.

Though you have not tested I think you do not need to test the service. I do not think they are legit sites they are scam sites and the main purpose of the site is to scam innocent people. We should avoid the service at any cost.

[Husires]

the surprise was that they changed my BTC address to theirs as in the following image:

It seems that the fraudster saves important data such as seeds, passwords, or email, and changes some other data such as your Bitcoin address.
Did that address have a balance or does it not have any balance? I am sure that if someone deposits, they will move that coin to a centralized exchange, and then it will be easy to track them.
Their choice of the word "private" to motivate you to submit sensitive data using their service.

[joniboini]

But really, does anyone use an online service to send sensitive data? This data can be viewed by the service provider a.k.a site owner and then may be modified.
The data is not hashed to ensure that it is not modified, and therefore even the legal site cannot be trusted.

I guess it depends on what sensitive data is being shared. If we are talking about passwords and stuff like that, maybe most of them won't use this self-destruct note. Maybe they will share secret links or screenshot with someone else, things that you don't want other people to know but need to be shared with your partner for your purpose. People can also use it to send their BTC address to somebody else if they're doing a trade that requires secrecy (although I doubt this is the best choice for that), which I guess is why scammers are publishing websites like this. I would not be surprised if some of these websites also replace credit card numbers, and stuff like that. CMIIW.

[Yamane_Keto]

I guess it depends on what sensitive data is being shared. If we are talking about passwords and stuff like that, maybe most of them won't use this self-destruct note.

This will lead us to who uses these services, is it a beginner or someone who knows the basics of encryption.
If he is a beginner, then Telegram, WhatsApp and many solutions that provide secure private messages compared to such services.

If someone knows the basics of encryption, then many open source programs such as PGP can work. I even thought that this site enables you to encrypt a message with a private key.
I used to think that it is like those services that pay some bitcoins for the message to be opened, and it is good for those who want to sell digital products such as gift cards for bitcoins, and also this service does not include that because there are no payments in bitcoins.

Maybe they will share secret links or screenshot with someone else, things that you don't want other people to know but need to be shared with your partner for your purpose.

they can share texts only, so that it calls notes

[joniboini]

This will lead us to who uses these services, is it a beginner or someone who knows the basics of encryption.

Definitely. It is inevitable to discuss who use them and for what purpose, but seeing that service like this exist and even scammers are trying to make phishing websites, it is safe to assume some people do use them. It is definitely not the best option for security or privacy, so I guess those who use them believe the tradeoff is worth it. Or if they are a beginner, they simply don't want to look for other options since they think this is good enough for them. CMIIW.

they can share texts only, so that it calls notes

Oh, you're right. My bad. I won't be surprised if there will be a new one that supports image or something similar though.

[Latviand]

Make sure that you are using the right site for this.  These type of websites that encrypt your notes to is subject to investigation or exercised caution. If they have some kind of filtering, they could really access your notes and manipulate your content inside.

I think it’s a common thing to see that there are mistakes on the name of the website. Immediately that should be an indicator that it exist.

Correct me if I'm wrong, I think that you need to download something from that website before they can access your device from inside out, visiting a website is just cookies right but downloading something is different right? Still scary though these copycat website, they benefit from confusion and they've been doing this for a long time even before bitcoin, and they still get victims. Website names don't havw mistakes, the scammer can't use the real website name so they bank on the fact that someone misspells the legitimate website, the mistake in the name of the fake website isn't a mistake, they try to buy the name that's most likely to be result of misspelling.

[Baofeng]

But really, does anyone use an online service to send sensitive data? This data can be viewed by the service provider a.k.a site owner and then may be modified.
The data is not hashed to ensure that it is not modified, and therefore even the legal site cannot be trusted.

I guess it depends on what sensitive data is being shared. If we are talking about passwords and stuff like that, maybe most of them won't use this self-destruct note. Maybe they will share secret links or screenshot with someone else, things that you don't want other people to know but need to be shared with your partner for your purpose. People can also use it to send their BTC address to somebody else if they're doing a trade that requires secrecy (although I doubt this is the best choice for that), which I guess is why scammers are publishing websites like this. I would not be surprised if some of these websites also replace credit card numbers, and stuff like that. CMIIW.

Right, but I believed that there are still some crypto enthusiast that thinks using this kind of self destructive note is safe from the prying eyes of hackers and online criminals.

Thanks to the OP for giving us the warning, although this is not the first time that we have heard this kind of attack vector. And I think it is still very effective method for criminals that's why they keep on recycling and creating this kind of websites and even using Google to trap and victimized us.