privatenots[.]com
“Private Notes - Send Self-Destructing Secret Messages Securely”
Ringkasan bukti
Analysis of the domain privatenots.com, registered on February 21, 2026 through NiceNIC International Group Co., Limited, indicates that it was used to host a self‑destructing messaging service as suggested by its page title, “Private Notes - Send Self‑Destructing Secret Messages Securely.” The site resolved to the Cloudflare‑managed address 172.67.151.126, located in the United States and announced as part of AS13335 Cloudflare, Inc. The infrastructure employed Cloudflare’s CDN, HTTP/3 protocol, and front‑end libraries Bootstrap and jsDelivr. No TLS certificate was observed, consistent with the reported lack of SSL. The domain was flagged by three security vendors on VirusTotal, and it appears on three independent blocklists, leading to its removal from active service.
Gridinsoft assigned a trust score of 0 / 100, underscoring a high risk assessment. Defenders should note that the domain’s nameservers are rayne.ns.cloudflare.com and skip.ns.cloudflare.com, indicating reliance on Cloudflare’s DNS. Although the site is currently offline, the combination of a low trust score, multiple vendor detections, and blocklist listings suggests a purposeful phishing operation targeting users seeking private, disposable note‑taking services.
Monitoring for re‑registration or similar domains using the same naming pattern is advised, as is updating web filters to block the associated IP range and Cloudflare‑provided hostnames. Further investigation should focus on any residual payloads or redirects captured before takedown, and on correlating traffic logs for potential credential harvesting attempts tied to this domain.
Data Coverage
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
Linimasa deteksi
-
VirusTotal
3 → 2
-
Status domain
Dapat dijangkau → Tidak dapat dijangkau
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive