Notion’s hours-long outage was caused by phishing complaints
Last week’s hours-long outage at online workspace startup Notion was caused by phishing complaints, according to the startup’s domain registrar.
Notion was offline for most of the morning on Friday, plunging its more than four million users into organization darkness because of what the company called a “very unusual DNS issue that occurred at the registry operator level.” With the company’s domain offline, users were unable to access their files, calendars, and documents.
We’re experiencing a DNS issue, causing the site to not resolve for many users. We are actively looking into this issue.
— Notion Status (@NotionStatus) February 12, 2021
Notion registered its domain name notion.so
through Name.com, but all .so
domains are managed by Hexonet, a company that helps connect Sonic, the .so
top-level domain registry, with domain name registrars like Name.com.
That complex web of interdependence is in large part what led to the communications failure that resulted in Notion falling offline for hours.
In an email to TechCrunch, Name.com spokesperson Jared Ewy said: “Hexonet received complaints about user-generated Notion pages connected to phishing. They informed Name.com about these reports, but we were unable to independently confirm them. Per its policies, Hexonet placed a temporary hold on Notion’s domain.”
“Noting the impact of this action, all teams worked together to restore service to Notion and its users. All three teams are now partnering on new protocols to ensure this type of incident does not happen again. The Notion team and their avid followers were responsive and a pleasure to work with throughout. We thank everyone for their patience and understanding,” said Ewy.
There are several threads on Reddit discussing concerns about Notion being used to host phishing sites, and security researchers have shown examples of Notion used in active phishing campaigns. A Notion employee said almost a year ago that Notion would “soon” move its domain to notion.com
, which the company owns.
Notion’s outage is almost identical to what happened with Zoho in 2018, which like Notion, resorted to tweeting at its domain registrar after it blocked zoho.com
following complaints about phishing emails sent from Zoho-hosted email accounts.
It sounds like there’s no immediate danger of a repeat outage, but Notion did not return TechCrunch’s email over the weekend asking what it plans to do to prevent phishing on its platform in the future.
Read more:
Last week’s hours-long outage at online workspace startup Notion was caused by phishing complaints, according to the startup’s domain registrar. Notion was offline for most of the morning on Friday, plunging its more than four million users into organization darkness because of what the company called a “very unusual DNS…
Recent Posts
- Surveillance has a body count
- You can now finally use Sonos Voice Control with Spotify tunes – here’s how
- Apex Legends tournament disrupted by rogue RCE exploit hack
- TapeACall is about to get a lot more expensive
- House passes bill banning data brokers from selling personal data to foreign adversaries
Archives
- March 2024
- February 2024
- January 2024
- December 2023
- November 2023
- October 2023
- September 2023
- August 2023
- July 2023
- June 2023
- May 2023
- April 2023
- March 2023
- February 2023
- January 2023
- December 2022
- November 2022
- October 2022
- September 2022
- August 2022
- July 2022
- June 2022
- May 2022
- April 2022
- March 2022
- February 2022
- January 2022
- December 2021
- November 2021
- October 2021
- September 2021
- August 2021
- July 2021
- June 2021
- May 2021
- April 2021
- March 2021
- February 2021
- January 2021
- December 2020
- November 2020
- October 2020
- September 2020
- August 2020
- July 2020
- June 2020
- May 2020
- April 2020
- March 2020
- February 2020
- January 2020
- December 2019
- November 2019
- December 2011