Check suspicious domains before they reach your team
Submit a domain when it looks questionable. AgentQL gathers available public context, and DNSFilter returns a threat suggestion for your review.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Suggest Domain Threat
Submits a domain threat report for review and possible threat classification.
Why this helps
Investigating a suspicious domain means switching between research tabs and security tools, while the decision can get lost in the shuffle.
- Centralize initial domain research and threat checks
- Keep a review step before changing filtering rules
- Send run reports to a place you already check
Setup
Build it in a few focused steps.
- 1Connect AgentQL and DNSFilter once in the Notis portal.
- 2Create an automation and name it Check a Suspicious Domain.
- 3Tell Notis to research the submitted domain with AgentQL and request a DNSFilter threat suggestion, then report the result without changing a policy.
- 4Choose the Notis webhook trigger and choose where run reports should go.
- 5Test with one real domain you are authorized to investigate.
Questions about this workflow
Does this workflow block the domain?
No. It requests a DNSFilter threat suggestion and reports the result. It does not add a block rule.
What starts the workflow?
An HTTP request to the Notis webhook starts it. Include the domain you want reviewed.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Agentql to Dnsfilter. A trigger fires from one place; an action lands in another.
Agentql triggers
Dnsfilter actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create IP Address
Adds an IP address to a network for filtering policies.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Add Allowed Application
Allows an application through a policy, regardless of other blocking rules.
Get Application Category
Retrieves details about an application category.
Add Allowlist Domains to Policies
Adds domains to the allow lists of multiple policies, bypassing their filtering rules.
Get Billing Information
Retrieves billing records for an organization, including amounts and billing periods.
Add Blacklist Category To Policy
Adds a content category to a policy’s block list without changing other settings.
Get Category
Retrieves basic information about a category.
Add Blacklist Domain To Policy
Blocks a domain for users covered by a policy.
Connect any two apps with Notis in the middle.
Agentql and Dnsfilter, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.