Domain Intelligence Report

notion.so

DNS records, WHOIS/RDAP registration, SSL certificate, subdomain enumeration, and email-security posture — aggregated in real time and cached.

5
DNS record types
64d
SSL cert remaining
100
Subdomains found
SPF + DMARC
Email security signals
Generated 2026-07-11 20:03 UTC Refresh data
Look up another:
Please enter a valid domain.
Get alerts when notion.so changes
Free email alerts when its SSL certificate nears expiry, or its subdomains, DNS, WHOIS, or SPF/DMARC/DKIM records change. One domain free — no credit card.
Put this data into your code — for any domain, any workflow
Same DNS, WHOIS, SSL, subdomain & email-security data via REST API — every field above as structured JSON. Drop it into monitoring scripts, CRM enrichment, security audits, fraud detection, or internal dashboards. Scales up to 5M requests/month.
Get free API key →
Common uses: SSL expiry monitoring Subdomain change alerts CRM lead enrichment SPF/DMARC/DKIM audits Domain reputation scoring Attack surface mapping Bulk WHOIS lookup SaaS onboarding checks
curl "https://domain-intelligence-api.p.rapidapi.com/lookup/notion.so" \
  -H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \
  -H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"
import requests

url = "https://domain-intelligence-api.p.rapidapi.com/lookup/notion.so"
headers = {
    "X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
    "X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
}
r = requests.get(url, headers=headers, timeout=15)
data = r.json()
print(data["subdomains"]["count"], "subdomains found")
// Node 18+ has built-in fetch — no import needed
const res = await fetch(
  "https://domain-intelligence-api.p.rapidapi.com/lookup/notion.so",
  { headers: {
      "X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
      "X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
  }}
);
const data = await res.json();
console.log(data.dns.A, data.email_security.spf);
<?php
$ch = curl_init("https://domain-intelligence-api.p.rapidapi.com/lookup/notion.so");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com",
    "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY",
]);
$data = json_decode(curl_exec($ch), true);
curl_close($ch);
echo $data["subdomains"]["count"];
Free tier: 1,000 requests/month · no credit card · all endpoints included See all plans →
DNS

DNS Records

All record types resolved from authoritative DNS for notion.so.

A 2 records
  • 208.103.161.1
  • 208.103.161.2
AAAA 2 records
  • 2602:f79a::1
  • 2602:f79a::2
TXT 8 records
  • "google-site-verification=LBOGI6TChsA_9vwaJYLU7RXgunDGAWKG0fcHxiU2-o4"
  • "google-site-verification=U2r6h9FWkKMadZDxW94daNJ1YUGXP-9_tJ7PUYfYz4c"
  • "google-site-verification=_aahlmtDiPlbg224pU3M_8w9Ka-3tcGUmBd6ZW052AU"
  • "proxy-ssl.webflow.com"
  • "v=spf1 ~all"
  • "_eohaffzltripfzavo0ehlmi84k0tkxw"
  • "facebook-domain-verification=2agf76ffad9vxlxya597jrzil7xoxf"
  • "google-site-verification=01Xid8U6cE4LuiG2OeRTL-hnDC9MxKvVD6mAgAS51Oo"
NS 2 records
  • woz.ns.cloudflare.com.
  • dana.ns.cloudflare.com.
SOA 1 record
  • dana.ns.cloudflare.com. dns.cloudflare.com. 2409203742 10000 2400 604800 1800
Registration

WHOIS / RDAP

Registration data for notion.so via the RDAP protocol, with port-43 WHOIS fallback if RDAP is unavailable.

whois via port43:whois.nic.so (via iana-referral)
Registrar
1API
Created
2015-03-31T00:00:00Z
Updated
2026-04-24T19:02:39Z
Expires
2027-03-31T00:00:00Z
Handle
31288-sonic
Nameservers
dana.ns.cloudflare.comwoz.ns.cloudflare.com
Status
activeclientTransferProhibited
TLS

SSL Certificate

Live TLS handshake against notion.so. No third-party scanner.

ssl 64 days remaining
Issuer
CN=WE1,O=Google Trust Services,C=US
Subject
CN=notion.so
Valid from
2026-06-15T22:41:17+00:00
Valid to
2026-09-13T23:41:14+00:00
Serial
281866685362041598307040322181379775154
SANs (5)
notion.so*.notion.so*.dev.notion.so*.stg.notion.so*.www.notion.so
Reconnaissance

Subdomains discovered

Aggregated from 5 upstream sources in parallel — crt.sh, certspotter, hackertarget, rapiddns, and VirusTotal — plus an always-on DNS bruteforce across a curated 773-word wordlist with automatic wildcard filtering, and background enrichment aggregating 25+ passive sources for comprehensive coverage.

subdomains 61 live · 100 discovered
certspotter: 31 foundvirustotal: 90 founddns-brute: 0 foundsubfinder: 10 found
  • admin-dev.notion.so 10.253.139.238
  • admin-stg.notion.so 10.252.20.27
  • admin.notion.so 10.96.151.117
  • affiliate.notion.so 104.18.10.212
  • aif.notion.so 18.160.18.17
  • analytics.pgncs.notion.so 52.85.193.4
  • api.mail.dev.notion.so 104.18.39.159
  • api.mail.notion.so 104.18.37.97
  • api.pgncs.notion.so 35.165.30.9
  • app.mail.dev.notion.so 104.18.39.159
  • calendar-api-stg.notion.so 208.103.161.1
  • calendar-api.notion.so 208.103.161.1
  • calendar-te.notion.so 208.103.161.1
  • calendar-test.notion.so 208.103.161.1
  • cert.notion.so 52.72.49.79
  • certs.notion.so 35.205.106.218
  • consultants.notion.so 208.103.161.1
  • cspreports.mail.notion.so 104.18.37.97
  • dev.notion.so 208.103.161.1
  • developers.notion.so 208.103.161.1
  • email.updates.notion.so 34.110.180.34
  • exp.notion.so 208.103.161.1
  • file-local.notion.so 127.0.0.1
  • file-stg.notion.so 18.160.18.119
  • file.notion.so 3.170.42.117
  • front-dev.notion.so 66.33.60.66
  • front-prod.notion.so 66.33.60.193
  • front-stg.notion.so 66.33.60.35
  • hello.notion.so 199.15.214.22
  • hkfxbbdzib.notion.so 208.103.161.1
  • identity.dev.notion.so 104.18.35.211
  • identity.notion.so 104.18.36.89
  • info.notion.so 198.202.211.1
  • kafka-utility.notion.so 172.16.9.51
  • local.notion.so 127.0.0.1
  • login.notion.so 15.197.151.86
  • mail-resource-proxy.mail.dev.notion.so 104.18.39.159
  • mail-resource-proxy.mail.notion.so 104.18.37.97
  • mg.mail.notion.so 34.110.180.34
  • msgstore.admin-dev.notion.so 208.103.161.1
  • msgstore.admin-stg.notion.so 208.103.161.1
  • msgstore.admin.notion.so 208.103.161.1
  • msgstore.www.notion.so 208.103.161.1
  • notion.so 208.103.161.1
  • op-scim-bridge.notion.so 44.250.83.236
  • ops-vpn.notion.so 35.155.59.211
  • pgbouncer-dev.notion.so 10.253.137.40
  • pgbouncer-stg.notion.so 10.252.1.120
  • pgbouncer.notion.so 10.96.152.60
  • pgncd.notion.so 208.103.161.1
  • privacycenter.notion.so 3.170.42.107
  • prod-transcription-preview.notion.so 208.103.161.1
  • retool.mail.notion.so 104.18.37.97
  • sitemaps.notion.so 208.103.161.1
  • status.notion.so 208.103.161.1
  • stg.notion.so 208.103.161.1
  • utility-2.notion.so 172.16.9.163
  • utility.notion.so 172.16.9.163
  • wl.notion.so 10.103.78.39
  • wl2.notion.so 10.103.225.100
  • www.notion.so 208.103.161.1

+ 39 more seen in CT logs / passive DNS (historical — may be inactive)

Email

Email Security Posture

SPF and DMARC presence and records for notion.so, plus DKIM keys auto-probed across 29 common selectors (Google Workspace, Microsoft 365, Mailchimp, SendGrid, Postmark and more).

SPF present
  • v=spf1 ~all
DMARC present
  • v=DMARC1; p=quarantine; pct=100; rua=mailto:re+1b3a27dd30bc@inbound.dmarcdigests.com;
DKIM none via common selectors

Probed common selectors (Google, Microsoft 365, Mailchimp, SendGrid, etc.). Custom or hash-based selectors aren't auto-discoverable.

Run this on any domain.

Same data, JSON response, REST API. Free tier available, no card required.

View API → RapidAPI Listing
Related

More domain reports

Browse intelligence reports for other popular domains.