Triage suspicious domains with Dnsfilter
Turn an incoming domain alert into an actionable threat suggestion within one workflow.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Suggest Domain Threat
Tool to suggest a fqdn as a potential threat. use after identifying a suspicious domain to verify its threat categorization.
Why this helps
Manual domain checks create delay when a suspicious hostname is already in front of you.
- Shorten time from alert to assessment
- Standardize domain triage
- Keep the returned suggestion with the original alert
Setup
Build it in a few focused steps.
- 1Connect 0CodeKit and Dnsfilter in Notis once.
- 2Create an automation named Suggest a Threat for a Suspicious Domain.
- 3Tell Notis to submit the incoming FQDN to Dnsfilter and summarize the returned threat suggestion.
- 4Choose a webhook trigger and report destination.
- 5Test by sending one real suspicious domain payload.
Questions about this workflow
What input is required?
A suspicious fully qualified domain name must be included in the webhook request.
Does this block the domain?
No. It suggests a threat categorization only.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link 0CodeKit to Dnsfilter. A trigger fires from one place; an action lands in another.
0CodeKit triggers
Dnsfilter actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create IP Address
Tool to create a new ip address in dnsfilter. use after confirming the target network id exists.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Get Application Category
Tool to get basic information of a specific application category. use when you need details for a given application category id.
Get Billing Information
Tool to retrieve basic billing information for an organization. use when you need to obtain billing details for reporting or automation tasks.
Get Category
Tool to get basic information of a specific category. use when you need to retrieve details for a category by its id.
Get IP Address
Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.
List All Categories
Tool to list all categories including internal categories. use when you need the complete set of filtering categories.
List All IP Addresses
Tool to list all user-associated ip addresses. use when you need a comprehensive list of all ip address entries in your organization.
List All MAC Addresses
Tool to list all mac addresses with basic information. use when you need to retrieve all mac address entries in your organization.
Connect any two apps with Notis in the middle.
0CodeKit and Dnsfilter, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.