Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

notion.so

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .so TLD

Run a live full scan of notion.so

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
75
A/AAAA targets
Subdomains
72
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
11
in our scans

DNS Records

A
208.103.161.1, 208.103.161.2
AAAA
2602:f79a::1, 2602:f79a::2
MX
—
NS
dana.ns.cloudflare.com, woz.ns.cloudflare.com
TXT
_eohaffzltripfzavo0ehlmi84k0tkxw, facebook-domain-verification=2agf76ffad9vxlxya597jrzil7xoxf, google-site-verification=01Xid8U6cE4LuiG2OeRTL-hnDC9MxKvVD6mAgAS51Oo, google-site-verification=LBOGI6TChsA_9vwaJYLU7RXgunDGAWKG0fcHxiU2-o4, google-site-verification=U2r6h9FWkKMadZDxW94daNJ1YUGXP-9_tJ7PUYfYz4c, google-site-verification=_aahlmtDiPlbg224pU3M_8w9Ka-3tcGUmBd6ZW052AU, proxy-ssl.webflow.com, v=spf1 ~all
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
file.notion.so
3.173.161.4 2600:9000:20f1:d600:13:cbc0:fdc0:93a1 2600:9000:20f1:2800:13:cbc0:fdc0:93a1 2600:9000:20f1:ae00:13:cbc0:fdc0:93a1 +8
2026-06-20 23:38:09.913
privacycenter.notion.so
3.173.161.76 2600:9000:28dc:f000:1b:9a54:98c0:93a1 2600:9000:28dc:5a00:1b:9a54:98c0:93a1 2600:9000:28dc:9200:1b:9a54:98c0:93a1 +8
2026-07-18 10:58:27.645
admin-dev.notion.so
10.253.171.179 10.253.139.133 10.253.172.107 10.253.155.116 +6
2026-06-23 23:24:11.453
admin.notion.so
10.96.140.42 10.96.159.15 10.96.73.177 10.96.45.51 +6
2026-06-23 10:45:50.436
admin-stg.notion.so
10.252.16.93 10.252.10.185 10.252.44.80 10.252.16.164 +4
2026-06-23 21:28:21.023
identity.notion.so
172.64.151.167 2606:4700:440a::6812:2459 104.18.36.89 2606:4700:440d::6812:2459 +2
2026-07-26 02:14:18.809
affiliate.notion.so
104.18.11.212 2606:4700::6812:bd4 2606:4700::6812:ad4 104.18.10.212
2026-06-18 03:50:10.487
calendar-api-stg.notion.so
208.103.161.1 208.103.161.2 2602:f79a::2 2602:f79a::1
2026-06-20 14:06:47.065
calendar.notion.so
208.103.161.1 208.103.161.2 2602:f79a::1 2602:f79a::2
2026-07-22 12:43:10.125
dev.notion.so
208.103.161.1 2602:f79a::2 2602:f79a::1 208.103.161.2
2026-06-23 23:24:11.453
exp.notion.so
208.103.161.2 208.103.161.1 2602:f79a::1 2602:f79a::2
2026-05-26 23:50:17.379
mail.notion.so
172.64.150.159 104.18.37.97 2606:4700:4403::6812:2561 2606:4700:4409::ac40:969f
2026-07-25 20:32:13.425
notion.so
208.103.161.1 2602:f79a::1 2602:f79a::2 208.103.161.2
2026-07-28 14:09:40.278
stg.notion.so
208.103.161.2 2602:f79a::2 2602:f79a::1 208.103.161.1
2026-06-23 21:28:21.023
www.notion.so
208.103.161.1 2602:f79a::1 208.103.161.2 2602:f79a::2
2026-07-28 16:02:09.164
api.pgncs.notion.so
54.148.233.230 35.165.30.9 54.69.21.216
2026-05-31 19:45:41.227
front-preview.notion.so
64.239.123.129 64.239.109.65
2026-06-20 04:13:17.140
aif.notion.so
1970-01-01 00:00:00.000
analytics.pgncs.notion.so
1970-01-01 00:00:00.000
api.mail.dev.notion.so
1970-01-01 00:00:00.000
api.mail.notion.so
1970-01-01 00:00:00.000
app.mail.dev.notion.so
1970-01-01 00:00:00.000
calendar-stg.notion.so
1970-01-01 00:00:00.000
cspreports.mail.dev.notion.so
1970-01-01 00:00:00.000
cspreports.mail.notion.so
1970-01-01 00:00:00.000
email.updates.notion.so
1970-01-01 00:00:00.000
file-dev.notion.so
1970-01-01 00:00:00.000
file-stg.notion.so
1970-01-01 00:00:00.000
identity.dev.notion.so
1970-01-01 00:00:00.000
mail-resource-proxy.mail.notion.so
1970-01-01 00:00:00.000
mail.dev.notion.so
1970-01-01 00:00:00.000
os.mail.notion.so
1970-01-01 00:00:00.000
retool.mail.notion.so
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

31.77.244.6:443 af4ea58e6df3…
Subject: www.notion.so
Issuer: E1
SANs: *.www.notion.so, www.notion.so
156.255.7.39:443 9f5c3581405b…
Subject: www.notion.so
Issuer: E1
SANs: *.www.notion.so, www.notion.so
54.190.150.168:443 9a6f0d479ac2…
Subject: *.dev.notion.so
Issuer: Amazon RSA 2048 M01
SANs: *.admin-dev.notion.so, *.dev.notion.so, *.notion.co, admin-dev.notion.so, dev.notion.so
35.164.51.8:443 8053cd062f8d…
Subject: *.stg.notion.so
Issuer: Amazon RSA 2048 M04
SANs: *.admin-stg.notion.so, *.notion.co, *.stg.notion.so, admin-stg.notion.so, stg.notion.so
63.184.65.202:443 2191d45e16ce…
Subject: *.dev.notion.so
Issuer: Amazon RSA 2048 M04
SANs: *.admin-dev.notion.so, *.dev.notion.so, *.notion.co, dev.notion.so
32.186.89.177:443 83e91c8eeb7c…
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.admin.notion.so, *.notion.co, *.notion.site, *.notion.so, *.www.notion.so, notion.site, notion.so
54.149.200.101:443 83e91c8eeb7c…
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.admin.notion.so, *.notion.co, *.notion.site, *.notion.so, *.www.notion.so, notion.site, notion.so
63.179.124.171:443 2191d45e16ce…
Subject: *.dev.notion.so
Issuer: Amazon RSA 2048 M04
SANs: *.admin-dev.notion.so, *.dev.notion.so, *.notion.co, dev.notion.so
3.36.4.253:443 2c89a9264017…
Subject: *.dev.notion.so
Issuer: Amazon RSA 2048 M04
SANs: *.admin-dev.notion.so, *.dev.notion.so, *.notion.co, dev.notion.so
44.241.222.10:443 8053cd062f8d…
Subject: *.stg.notion.so
Issuer: Amazon RSA 2048 M04
SANs: *.admin-stg.notion.so, *.notion.co, *.stg.notion.so, admin-stg.notion.so, stg.notion.so
63.182.229.79:443 93d459d4cd3b…
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.admin.notion.so, *.notion.co, *.notion.site, *.notion.so, *.www.notion.so, notion.site, notion.so
54.218.29.5:443 83e91c8eeb7c…
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.admin.notion.so, *.notion.co, *.notion.site, *.notion.so, *.www.notion.so, notion.site, notion.so
54.178.102.29:443 1f59e6d4f760…
Subject: *.dev.notion.so
Issuer: Amazon RSA 2048 M01
SANs: *.admin-dev.notion.so, *.dev.notion.so, *.notion.co, dev.notion.so
54.202.216.103:443 63a9435a3484…
Subject: *.stg.notion.so
Issuer: Amazon RSA 2048 M03
SANs: *.admin-stg.notion.so, *.stg.notion.so, admin-stg.notion.so, stg.notion.so
35.79.162.110:443 1f59e6d4f760…
Subject: *.dev.notion.so
Issuer: Amazon RSA 2048 M01
SANs: *.admin-dev.notion.so, *.dev.notion.so, *.notion.co, dev.notion.so
63.184.89.105:443 93d459d4cd3b…
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.admin.notion.so, *.notion.co, *.notion.site, *.notion.so, *.www.notion.so, notion.site, notion.so
54.203.211.219:443 83e91c8eeb7c…
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.admin.notion.so, *.notion.co, *.notion.site, *.notion.so, *.www.notion.so, notion.site, notion.so
52.88.145.86:443 8053cd062f8d…
Subject: *.stg.notion.so
Issuer: Amazon RSA 2048 M04
SANs: *.admin-stg.notion.so, *.notion.co, *.stg.notion.so, admin-stg.notion.so, stg.notion.so
63.184.155.243:443 93d459d4cd3b…
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.admin.notion.so, *.notion.co, *.notion.site, *.notion.so, *.www.notion.so, notion.site, notion.so
18.159.237.234:443 2191d45e16ce…
Subject: *.dev.notion.so
Issuer: Amazon RSA 2048 M04
SANs: *.admin-dev.notion.so, *.dev.notion.so, *.notion.co, dev.notion.so
3.74.105.57:443 93d459d4cd3b…
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.admin.notion.so, *.notion.co, *.notion.site, *.notion.so, *.www.notion.so, notion.site, notion.so
3.39.186.102:443 38a34820783f…
Subject: *.notion.so
Issuer: Amazon RSA 2048 M01
SANs: *.admin.notion.so, *.notion.co, *.notion.site, *.notion.so, *.www.notion.so, notion.site, notion.so
35.163.218.85:443 83e91c8eeb7c…
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.admin.notion.so, *.notion.co, *.notion.site, *.notion.so, *.www.notion.so, notion.site, notion.so
32.186.62.56:443 9a6f0d479ac2…
Subject: *.dev.notion.so
Issuer: Amazon RSA 2048 M01
SANs: *.admin-dev.notion.so, *.dev.notion.so, *.notion.co, admin-dev.notion.so, dev.notion.so
34.213.110.120:443 12f84b05173d…
Subject: calendar-stg.notion.so
Issuer: Amazon RSA 2048 M04
SANs: calendar-api-stg.notion.so, calendar-stg.notion.so
35.160.9.225:443 83e91c8eeb7c…
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.admin.notion.so, *.notion.co, *.notion.site, *.notion.so, *.www.notion.so, notion.site, notion.so
44.238.142.24:443 83e91c8eeb7c…
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.admin.notion.so, *.notion.co, *.notion.site, *.notion.so, *.www.notion.so, notion.site, notion.so
100.22.119.138:443 83e91c8eeb7c…
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.admin.notion.so, *.notion.co, *.notion.site, *.notion.so, *.www.notion.so, notion.site, notion.so
66.93.154.119:443 a2404a7cde6e…
Subject: www.notion.so
Issuer: WE1
SANs: *.www.notion.so, www.notion.so
54.68.185.131:443 83e91c8eeb7c…
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.admin.notion.so, *.notion.co, *.notion.site, *.notion.so, *.www.notion.so, notion.site, notion.so

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

43.153.219.204:443 href · ×2
27.107.165.210:80 href · ×2
39.101.73.103:443 href · ×2
129.152.0.124:443 href · ×2
46.101.91.72:443 href · ×2
39.101.74.50:80 href · ×1
8.136.41.111:8888 href · ×1
144.168.56.89:443 href · ×1
13.124.164.205:80 href · ×1
144.168.56.89:8080 href · ×1
143.110.168.146:80 href · ×1
43.202.218.155:80 href · ×1
185.198.27.169:8080 href · ×1
45.192.97.191:443 href · ×1
67.230.160.54:80 href · ×1
173.242.59.216:80 href · ×1
54.116.126.194:80 href · ×1
38.47.255.83:80 href · ×1
15.164.194.107:80 href · ×1
193.32.148.233:443 href · ×1
43.133.225.82:443 href · ×1
98.84.28.59:443 href · ×1
175.24.179.4:443 href · ×1
106.53.15.165:80 href · ×1
49.235.139.91:80 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

612432c105cb9244… google · argon2026h2
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.notion.so, *.notion.site, notion.site, *.notion.co, *.admin.notion.so, *.www.notion.so, notion.so
Valid: 2025-09-03 00:00:00 → 2026-10-02 23:59:59
00437010e7c16594… google · argon2026h2
Subject: *.notion.so
Issuer: Amazon RSA 2048 M02
SANs: *.notion.so, *.notion.site, notion.site, *.notion.co, *.admin.notion.so, *.www.notion.so, notion.so
Valid: 2025-08-16 00:00:00 → 2026-09-14 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 208.103.161.1 2026-05-25 21:42:03.389 2026-07-28 14:09:40.278
AAAA 2602:f79a::2 2026-05-25 21:42:03.389 2026-07-28 14:09:40.278
A 208.103.161.2 2026-05-25 21:42:03.389 2026-07-28 14:09:40.278
AAAA 2602:f79a::1 2026-05-25 21:42:03.389 2026-07-28 14:09:40.278
TXT facebook-domain-verification=2agf76ffad9vxlxya597jrzil7xoxf 2026-05-25 22:09:29.497 2026-07-28 14:09:40.278
TXT google-site-verification=LBOGI6TChsA_9vwaJYLU7RXgunDGAWKG0fcHxiU2-o4 2026-05-25 22:09:29.497 2026-07-28 14:09:40.278
NS woz.ns.cloudflare.com 2026-05-25 22:09:29.497 2026-07-28 14:09:40.278
TXT proxy-ssl.webflow.com 2026-05-25 22:09:29.497 2026-07-28 14:09:40.278
TXT google-site-verification=01Xid8U6cE4LuiG2OeRTL-hnDC9MxKvVD6mAgAS51Oo 2026-05-25 22:09:29.497 2026-07-28 14:09:40.278
TXT v=spf1 ~all 2026-05-25 22:09:29.497 2026-07-28 14:09:40.278
TXT google-site-verification=U2r6h9FWkKMadZDxW94daNJ1YUGXP-9_tJ7PUYfYz4c 2026-05-25 22:09:29.497 2026-07-28 14:09:40.278
NS dana.ns.cloudflare.com 2026-05-25 22:09:29.497 2026-07-28 14:09:40.278
TXT google-site-verification=_aahlmtDiPlbg224pU3M_8w9Ka-3tcGUmBd6ZW052AU 2026-05-25 22:09:29.497 2026-07-28 14:09:40.278
TXT _eohaffzltripfzavo0ehlmi84k0tkxw 2026-05-25 22:09:29.497 2026-07-28 14:09:40.278