Oct 31, 2019 09:53 AM
(This post was last modified: Oct 31, 2019 10:01 AM by evilgnome.)
All data is sent unencrypted in plaintext just check the requests, it also doesn't enforce any kind of decryption key when opening a note and the part after # in the URL can be replaced by arbitrary characters and the note will still open.
I wanna put out a warning because if you search for Privnote on Google the fake site is the 2nd result and 1st result if you don't have an ad blocker installed!
Bitcoin addresses are not swapped out automatically but manually, if you make a note and put some Bitcoin address and wait a while it'll be swapped out (manually, by the owner of the site), or if you send vouchers they'll be redeemed and the note destroyed without even being opened.
This is a warning about privnotes.com (scam) NOT privnote.com (safe).
I kinda feel like we should censor privnotes.com because of it showing as #1 in Google with ads and #2 without ads coupled with the fact that Hack Forums is heavily cryptocurrency oriented.
I lost a pretty penny due to this so I am kinda pissed, the owner is hiding behind CloudFlare and usual tricks like direct-connect, mx, CrimeFlare (down) and Netcraft didn't reveal nothing, recently registered, hiding behind WHOIS guard registered with NameSilo. From what I can tell the owner is a Russian national, but I don't know for sure.
DO NOT DEAL WITH THIS MEMBER
Always type it in not google lesson learned the hardway i guess. Thanks for the warning though this should be pinned TBH
Oct 31, 2019 10:17 AM
(This post was last modified: Oct 31, 2019 10:20 AM by evilgnome.)
(Oct 31, 2019 10:13 AM)shreder Wrote: Always type it in not google lesson learned the hardway i guess. Thanks for the warning though this should be pinned TBH
My partner typed it in manually but misspelled it by adding an s at the end, we both used phones so we didn't notice the website design discrepancies, I then copied the address from my phone to my PC before sending, the only reason I knew it's the site is cause we both had the whole note copied on the phone clipboard and the only thing different was the BTC address (of the original copied note versus the note I opened and copied). Then of course I started digging now and down the rabbit hole I go...
The fact that it's #1 or #2 on Google search I discovered afterwards, but very relevant fact for any would-be future victim.
DO NOT DEAL WITH THIS MEMBER
(Oct 31, 2019 10:17 AM)evilgnome Wrote: My partner typed it in manually but misspelled it by adding an s at the end, we both used phones so we didn't notice the website design discrepancies, I then copied the address from my phone to my PC before sending, the only reason I knew it's the site is cause we both had the whole note copied on the phone clipboard and the only thing different was the BTC address (of the original copied note versus the note I opened and copied). Then of course I started digging now and down the rabbit hole I go...
The fact that it's #1 or #2 on Google search I discovered afterwards, but very relevant fact for any would-be future victim.
Still human error you should always be aware of. Unfortunately we are human and we do make mistakes. Best is to bookmark it and check it for real.
Dude I told you, you've been scammed by your IRL friend after 10 years of friendship, it happens.
DO NOT DEAL WITH THIS MEMBER
Looks like https://privnotes.com/ is down 🤝
OP, how long should I expect this to be down ;)
DO NOT DEAL WITH THIS MEMBER
Send me the BTC addresses in PM and I will take a look.
Either way, I would be pissed if I were you too. Will investigate this privnotes thing too.
(Oct 31, 2019 10:37 AM)LayersOSImodel Wrote: Dude I told you, you've been scammed by your IRL friend after 10 years of friendship, it happens.
I get what you're saying but it's not the case this time and I've been scammed for small double digit amounts for 6+ year friendships. This is not like that it has nothing to do with online.
(Oct 31, 2019 10:43 AM)Anzee Wrote: Looks like https://privnotes.com/ is down 🤝
OP, how long should I expect this to be down ;)
Till the heat death of the universe I hope, though it's up right now as of writing this.
(Oct 31, 2019 11:01 AM)Kill Joy Wrote: Send me the BTC addresses in PM and I will take a look.
Either way, I would be pissed if I were you too. Will investigate this privnotes thing too.
I really appreciate it, I sent you the address in PM!
DO NOT DEAL WITH THIS MEMBER
(Oct 31, 2019 11:33 AM)evilgnome Wrote: I get what you're saying but it's not the case this time and I've been scammed for small double digit amounts for 6+ year friendships. This is not like that it has nothing to do with online.
Till the heat death of the universe I hope, though it's up right now as of writing this.
I really appreciate it, I sent you the address in PM!
Oops, look like it's down again... The owner must be making some changes 🎉
(Oct 31, 2019 11:45 AM)Anzee Wrote: Oops, look like it's down again... The owner must be making some changes 🎉
🤣 🤣 🤣
DO NOT DEAL WITH THIS MEMBER
Thanks for the warning!
While I've never sent sensitive information that has a monetary value attached, I've definitely used the service before just to have a quick discrete message sent.
Will try my best to dig into their host and see if there's some sort of complaint option with them or the registrar.
|
