Scan report · about 2 months agoPublic

www.notion.so

208.103.161.2AS33191 · US
Verdict

Looks safe

Automated

It asks you to enter a password. Our automated checks did not find known threat signals on this site at the time of the scan.

What to do

No action needed. Stay alert as usual — a clean result reflects this scan only, and sites can change after they are checked.

A clean result means no known threat signals were found in this scan — it is not an absolute guarantee, and a site can change after it is checked.

Findings

Strongest first
InfoBrand impersonation detected
Microsoft · low

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteLow/medium confidence (keyword only) — can be a news article or partner page. Corroborate before acting.

InfoCross-domain scripts injected at runtime
1 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP
208.103.161.2NOTION-WEB - Notion Labs, Inc., US · AS33191US
TLS
CN=WE1, O=Google Trust Services, C=US · expires Sep 13, 2026
Redirects
1 hop · /login → /login
7 malicious4 suspicious

Hashes & fingerprints

Page capture

Live

Title “Notion - Log in” · brand shown: Microsoft (low)

Engines

7 · time to verdict

Page

HTTP
200 · Completed
Title
Notion - Log in
Load
3.79 s · 220 requests
Stack · 10Amazon S3Amazon Web ServicesCloudflareCloudflare Bot ManagementGoogle Sign-inhCaptcha