Scan report · about 1 month agoPublic

www.notion.so

208.103.161.17AS33191 · US
Verdict

Could not check — the site withheld its page

Automated

It asks you to enter a password. The site sent us somewhere else instead of its own page — its content was never shown to us. The site answered us, so it is online — but what came back was not its own content, which means there was nothing to assess. This is not a safety result.

What to do

Do not read this as safe or unsafe. Reach the site through a trusted route to confirm it is what you expect, and if you need a firm answer re-scan from another region.

An incomplete result is not the same as a safe one. Re-scan or verify through a trusted channel before trusting the site.

Cloaked from us

Site hid its content from us

This site served us its page, collected a profile of our browser, then sent us to notion.com — it never let us see its content.

Findings

Strongest first
InfoBrand impersonation detected
Microsoft · low

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteLow/medium confidence (keyword only) — can be a news article or partner page. Corroborate before acting.

InfoCross-domain scripts injected at runtime
1 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP
208.103.161.17NOTION-WEB - Notion Labs, Inc., US · AS33191US
TLS
CN=WE1, O=Google Trust Services, C=US · expires Nov 11, 2026
Redirects
1 hop · /login → /login
12 malicious8 suspicious

Hashes & fingerprints

Page capture

Not this site

Title “Notion - Log in” · brand shown: Microsoft (low)

Engines

7 · time to verdict

Page

HTTP
200 · Completed
Title
Notion - Log in
Load
4.93 s · 304 requests
Stack · 17Amazon S3Amazon Web ServicesCloudflareCloudflare Bot Managementdc.jsDoubleClick Floodlight