CONTINUOUS INTERNET TELEMETRY24H DRIFT1,083 material changesacross 885 domains · -995 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination kirklanddc.com · -13 vs yesterdayNOW2,500 curated domains not answering+1,374 vs yesterdayERRORS16,844 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED42,922 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,083 material changesacross 885 domains · -995 vs yesterdayDNS DRIFT2 domains changed DNS providertop destination kirklanddc.com · -13 vs yesterdayNOW2,500 curated domains not answering+1,374 vs yesterdayERRORS16,844 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED42,922 throttled or blocked our scanner429 rate-limit / 403 bot-block

notion.so

Observed Jul 18, 2026, 12:01 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Secured byGoogle Trust Services
Also usesFacebook/MetaGoogle Search Console
IPv6 · dev_tools
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat notion.so actually stands on - every host below is a signed observation
notion.so
A / AAAA
208.103.161.1208.103.161.22602:f79a::22602:f79a::1
Cloudflareserves the site
NS
dana.ns.cloudflare.comwoz.ns.cloudflare.com
cloudflare.comanswers its DNS
TLS
notion.so
Google Trust Servicesissued its certificate

DNS Records

A 2

  • 208.103.161.1
  • 208.103.161.2

AAAA 2

  • 2602:f79a::2
  • 2602:f79a::1

TXT 10

  • _eohaffzltripfzavo0ehlmi84k0tkxw
  • facebook-domain-verification=2agf76ffad9vxlxya597jrzil7xoxf
  • google-site-verification=01Xid8U6cE4LuiG2OeRTL-hnDC9MxKvVD6mAgAS51Oo
  • google-site-verification=LBOGI6TChsA_9vwaJYLU7RXgunDGAWKG0fcHxiU2-o4
  • google-site-verification=U2r6h9FWkKMadZDxW94daNJ1YUGXP-9_tJ7PUYfYz4c
  • google-site-verification=_aahlmtDiPlbg224pU3M_8w9Ka-3tcGUmBd6ZW052AU
  • proxy-ssl.webflow.com
  • v=spf1 ~all
  • v=DMARC1; p=quarantine; pct=100; rua=mailto:re+1b3a27dd30bc@inbound.dmarcdigests.com;
  • v=BIMI1; l=https://vmc.digicert.com/ae66f82a-dd47-4f08-9fd9-fd865f1d0b30.svg; a=https://vmc.digicert.com/ae66f82a-dd47-4f08-9fd9-fd865f1d0b30.pem

NS 2

  • dana.ns.cloudflare.com
  • woz.ns.cloudflare.com

SOA 1

  • dana.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common NameIssuerExpires
notion.so C=US, O=Google Trust Services, CN=WE1 Sun, 13 Sep 2026 23:41:14 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for notion.so. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for notion.so <a href="https://domaindrift.io/t/notion.so"> <img src="https://domaindrift.io/badge/notion.so.svg" width="300" height="64" alt="DomainDrift signed observations for notion.so"> </a>

Ed25519 Receipt

Receipt ID
c2fb7e67-70e6-4d25-a7bf-999f89988007
Output Hash
b341a946ee21ee933a38cfa403c1dd8372fd39bfd1a2d9410dbb050530c530bb
Signature
ed25519:7b6138892c9459553ff2342ccc2405117585178abca8275a41c2dda5ecb0a3e70c21947e1fdb1aee56b996ab6510060b27deab9c1948dfbed86cd45de9516202
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser