Check a suspicious domain threat
Get a quick second look at a domain before deciding how to respond.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Suggest Domain Threat
Tool to suggest a fqdn as a potential threat. use after identifying a suspicious domain to verify its threat categorization.
Why this helps
Analysts lose time opening separate threat tools for every suspicious domain.
- Speed up domain triage
- Create consistent investigation notes
- Keep decisions in one report
Setup
Build it in a few focused steps.
- 1Connect 1Password and Dnsfilter in the Notis portal.
- 2Create an automation named Check a suspicious domain threat.
- 3Tell Notis to send the webhook domain to Dnsfilter Suggest Domain Threat and explain the returned categorization.
- 4Choose a webhook trigger and choose where run reports should go.
- 5Test with one known suspicious domain.
Questions about this workflow
Does this block the domain?
No. It suggests a threat classification so you can decide what to do next.
What should the webhook include?
Include the fully qualified domain name you want Dnsfilter to assess.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link 1password to Dnsfilter. A trigger fires from one place; an action lands in another.
1password triggers
Dnsfilter actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create IP Address
Tool to create a new ip address in dnsfilter. use after confirming the target network id exists.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Get Application Category
Tool to get basic information of a specific application category. use when you need details for a given application category id.
Get Billing Information
Tool to retrieve basic billing information for an organization. use when you need to obtain billing details for reporting or automation tasks.
Get Category
Tool to get basic information of a specific category. use when you need to retrieve details for a category by its id.
Get IP Address
Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.
List All Categories
Tool to list all categories including internal categories. use when you need the complete set of filtering categories.
List All IP Addresses
Tool to list all user-associated ip addresses. use when you need a comprehensive list of all ip address entries in your organization.
List All MAC Addresses
Tool to list all mac addresses with basic information. use when you need to retrieve all mac address entries in your organization.
Connect any two apps with Notis in the middle.
1password and Dnsfilter, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.