Reports / notion.so

notion.so

Generated Refresh data

We found 89 subdomains of notion.so in certificate transparency logs, passive DNS and DNS brute force, including app.notion.so, login.notion.so and admin.notion.so. notion.so is registered with 1API since 2015-03-31 and expires 2027-03-31. Its SSL certificate from Google Trust Services expires in 34 days. For email it has an SPF record, DMARC set to quarantine and no DKIM key on the common selectors we check.

Registration
1APISince 2015-03-31 · expires 2027-03-31
SSL certificate
34 days leftGoogle Trust Services
Subdomains
89 foundChecking which are live…
Email authentication
SPF + DMARC onlyDMARC policy: quarantine

DNS records

5 of 7 types
A4
  • 208.103.161.16
  • 208.103.161.1
  • 208.103.161.2
  • 208.103.161.17
AAAA4
  • 2602:f79a::2
  • 2602:f79a:0:1::2
  • 2602:f79a::1
  • 2602:f79a:0:1::1
MX No MX records
TXT8
  • "google-site-verification=_aahlmtDiPlbg224pU3M_8w9Ka-3tcGUmBd6ZW052AU"
  • "proxy-ssl.webflow.com"
  • "v=spf1 ~all"
  • "_eohaffzltripfzavo0ehlmi84k0tkxw"
  • "facebook-domain-verification=2agf76ffad9vxlxya597jrzil7xoxf"
  • "google-site-verification=01Xid8U6cE4LuiG2OeRTL-hnDC9MxKvVD6mAgAS51Oo"
  • "google-site-verification=LBOGI6TChsA_9vwaJYLU7RXgunDGAWKG0fcHxiU2-o4"
  • "google-site-verification=U2r6h9FWkKMadZDxW94daNJ1YUGXP-9_tJ7PUYfYz4c"
NS2
  • dana.ns.cloudflare.com.
  • woz.ns.cloudflare.com.
CAA No CAA records
SOA1
  • dana.ns.cloudflare.com. dns.cloudflare.com. 2416455140 10000 2400 604800 1800

Live lookup, cached up to 5 min.

WHOIS / RDAP

via port43:whois.nic.so (via iana-referral)
Registrar
1API
Registered
2015-03-31
Expires
2027-03-31
Last updated
2026-04-24
Registry handle
31288-sonic
Nameservers
dana.ns.cloudflare.comwoz.ns.cloudflare.com
Status
activeclientTransferProhibited

RDAP with port-43 WHOIS fallback, cached up to 1 h.

SSL certificate

Valid, 34 days left
Issuer
Google Trust ServicesCN=WE1,O=Google Trust Services,C=US
Subject
notion.so
Valid from
2026-08-13 22:59 UTC
Valid until
2026-11-11 23:59 UTC
Serial number
308883125785419995194989829383913625974
Names covered (5)
notion.so*.notion.so*.dev.notion.so*.stg.notion.so*.www.notion.so

Live TLS handshake on port 443, cached up to 6 h.

Subdomains

89 found
Slow sources are still finishing. This list updates by itself.
  • admin-dev.notion.so
  • admin-stg.notion.so
  • admin.notion.so
  • affiliate.notion.so
  • aif.notion.so
  • analytics-iframe.notion.so
  • analytics.pgncs.notion.so
  • api.mail.dev.notion.so
  • api.mail.notion.so
  • api.pgncs.notion.so
  • app.mail.dev.notion.so
  • app.notion.so
  • calendar-api-dev.notion.so
  • calendar-api-stg.notion.so
  • calendar-api.notion.so
  • calendar-dev.notion.so
  • calendar-stg.notion.so
  • calendar-te.notion.so
  • calendar.notion.so
  • cdn.notion.so
  • cert.notion.so
  • certs.notion.so
  • community.notion.so
  • consultants.notion.so
  • cspreports.mail.dev.notion.so
  • cspreports.mail.notion.so
  • desktop-release.notion.so
  • dev.notion.so
  • developers.notion.so
  • early-access.notion.so
  • email.updates.notion.so
  • exp.notion.so
  • file-dev.notion.so
  • file-local.notion.so
  • file-stg.notion.so
  • file-test-369.notion.so
  • file.notion.so
  • flowdash.notion.so
  • front-dev.notion.so
  • front-preview.notion.so
  • front-prod.notion.so
  • front-stg.notion.so
  • gw-vpn.notion.so
  • hello.notion.so
  • hkfxbbdzib.notion.so
  • identity.dev.notion.so
  • identity.notion.so
  • image.notion.so
  • images.notion.so
  • info.notion.so
  • kafka-utility.notion.so
  • local.notion.so
  • login.notion.so
  • mail-resource-proxy.mail.dev.notion.so
  • mail-resource-proxy.mail.notion.so
  • mail.dev.notion.so
  • mail.notion.so
  • mcp.notion.so
  • mg.mail.notion.so
  • msgstore.www.notion.so
  • node.2.front-preview.notion.so
  • notion-mcp.notion.so
  • notion.so
  • op-scim-bridge.notion.so
  • ops-vpn.notion.so
  • pgbouncer-dev.notion.so
  • pgbouncer-stg-test.notion.so
  • pgbouncer-stg.notion.so
  • pgbouncer.notion.so
  • pgncd.notion.so
  • privacycenter.notion.so
  • prod-api.notion.so
  • prod-api2.notion.so
  • prod-streamer.notion.so
  • prod-transcription-preview.notion.so
  • redir.front-preview.notion.so
  • sitemaps.notion.so
  • sp.2.front-preview.notion.so
  • staging.notion.so
  • status.notion.so
  • stg.notion.so
  • test-big-file.notion.so
  • utility-2.notion.so
  • utility.notion.so
  • vpn.notion.so
  • wl.notion.so
  • wl2.notion.so
  • www.notion.so
  • xxx.notion.so
Sources: certspotter 14 · rapiddns 21 · dns-brute 3 · virustotal 75

From CT logs, passive DNS (25+ sources) and brute-force. Live means it resolves now.

SPF Present
v=spf1 ~all
DMARC Present
p=quarantine
v=DMARC1; p=quarantine; pct=100; rua=mailto:re+1b3a27dd30bc@inbound.dmarcdigests.com;
DKIM None found
No key on the common selectors.

DKIM checked on 29 common selectors; custom ones can't be discovered. Cached up to 1 h.

Got an email from notion.so asking you to change bank details? Check it before you pay

Get this report as JSON

One call returns everything on this page. Each section is also its own endpoint.

curl "https://domain-intelligence-api.p.rapidapi.com/lookup/notion.so" \
  -H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \
  -H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"
1,000 requests a month free, no card Paid plans up to 5M a month ?wait=1 waits for every subdomain source to finish

More reports