Beaware of fake privnote.com

[AB de Royse777]

Code:

FAKE https://privnote.co/

it's .co not .com. Unfortunately one of the signature payment participant got scammed earlier. He sent me the btc address via privnote but instead of .com he someone managed to send it via .co

The .co guys changed the BTC address. None of us were aware and the coins went to the wrong address as I thought it was the address given by the campaign participants.

Please use privnote carefully. Don't send payment addresses using privnote.

[Cantsay]

Sorry for that user’s fund that was lost.

It’s not just the .co, there are several other privnote sites that are used for phising, and if you use it to send wallet addresses it will change it to a different address which then leads to the lost of funds.

For this that are interested you can check this thread for the others. [INFO} Be aware of https://privnote.co/ (check replies for the others).

[tabas]

I am sorry about that person's loss, I think it's also good for that person report this to privnote.com that there are copycats that are roaming and scamming their users so they'll put a note on their landing page to beware of the fake ones.

Don't send payment addresses using privnote.

I agree but those that have done it found it comfortable. 

[hugeblack]

It is better not to even use privnote.com, the service is closed source. They did not mention that they encrypt data, and there is no guarantee that they might do the same thing that happened with .co, in addition to the fact that the service depends on Cloudflare, where they can record some data related to you.

There are open source tools ---> https://www.fortinet.com/resources/cyberglossary/pgp-encryption#:~:text=PGP%20uses%20the%20public%20key,it%20with%20their%20private%20key


It can be used to encrypt messages and the public key can be shared via PM or SimpleX Chat.

[Yaunfitda]

Code:

FAKE https://privnote.co/

it's .co not .com. Unfortunately one of the signature payment participant got scammed earlier. He sent me the btc address via privnote but instead of .com he someone managed to send it via .co

The .co guys changed the BTC address. None of us were aware and the coins went to the wrong address as I thought it was the address given by the campaign participants.

Please use privnote carefully. Don't send payment addresses using privnote.

Yes, there have been a lot of cases like this before,

https://krebsonsecurity.com/2020/06/privnotes-com-is-phishing-bitcoin-from-users-of-private-messaging-service-privnote-com/

Earlier this year, KrebsOnSecurity heard from the owners of Privnote.com, who complained that someone had set up a fake clone of their site that was fooling quite a few regular users of the service.

Just look at the date, it's 4 years ago and this criminals is still using it. I felt sorry for your campaign participants. Hopefully he will learn his lessons very well not to trust this kind of services. And for those who read this, double check everything, don't trust but verify.

[cryptomaniac_xxx]

I'm sorry to hear it @AB de Royse777. Way back, I gave this warning to the community,

The dangers and threat of using Self destruct Private Notes.

And then we also have this:

• Fake Private-note -- pirvnota.com
• PSA: Make sure you NEVER use privnotes.com!!

[dkbit98]

There are several warnings posted about phishing privnote websites, but this can be applied to any other fake website.
It is best to bookmark websites you are often using, and don't blindly trust any search engine results that are full of scams.
Use your brain people and dont try to invent wheels all over again... even logo is clearly saying pIRVnote, not privnote. 

scam:

Code:

https://privnote.co/ 

legit:

Code:

https://privnote.com/

[Apocollapse]

More and more people fallen to scams related to privacy.

In this case if someone really concerned with their privacy, it's better to use decentralized messaging apps e.g. nostrchat.io or just use telegram for easier navigation. Verify the telegram account by linking to this forum and sign a message, post the address in telegram and then delete it when the receiver has received the coins.

[BitcoinGirl.Club]

scam:

Code:

https://privnote.co/ 

legit:

Code:

https://privnote.com/

When you placed these two side by side or up and down you can easily notice the difference but if you were looking at it in different time line even navigating from one window to another, you will have difficulties to figure out the difference unless you are using it regularly and closely related to the service. Scammers are very cleaver. I saw many fake companies who copied well known brands but fake logo is very close to the original that you can easily buy the fake product by thinking you are buying the original product.

[NotATether]

People who insist on using Privnote for some reason should at least encrypt the messages using EncDec to thwart this kind of scam.

This is why all messages should be encrypted using PGP to eliminate man-in-the-middle attacks like this.

If PGP is too complicated for you, use my tool encdec.zenulabidin.com and you can send them a base64-encrypted message and the password.

I use AES-256 with 600K rounds of PBKDF2-SHA256 password hash.