Triage suspicious campaign domains
Send a reported domain to DNSFilter for a threat suggestion, then review the result before deciding on a policy change.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Suggest Domain Threat
Submits a domain threat report for review and possible threat classification.
Why this helps
Checking a reported link and deciding what to do can interrupt campaign work and leave uncertainty scattered across tools.
- Get a threat categorization suggestion as part of a repeatable triage step.
- Keep the domain and returned result together in a run report.
- Separate a threat suggestion from the decision to block a domain.
Setup
Build it in a few focused steps.
- 1Connect AimTell and DNSFilter once in the Notis portal.
- 2Create an automation in the portal or tell Notis to create one.
- 3In one instruction, say to submit the explicitly reported domain for a DNSFilter threat suggestion and report the result without changing policies.
- 4Pick a webhook trigger and choose where run reports should go.
- 5Test with one real reported domain, then review the returned suggestion.
Questions about this workflow
Does a threat suggestion automatically block the domain?
No. This action suggests a threat categorization. Review the result and make any policy change separately.
Does DNSFilter provide a full investigation from this action?
The listed action suggests a domain as a potential threat. Do not treat it as a complete investigation or a guaranteed verdict.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link AimTell to Dnsfilter. A trigger fires from one place; an action lands in another.
AimTell triggers
Dnsfilter actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create IP Address
Adds an IP address to a network for filtering policies.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Add Allowed Application
Allows an application through a policy, regardless of other blocking rules.
Get Application Category
Retrieves details about an application category.
Add Allowlist Domains to Policies
Adds domains to the allow lists of multiple policies, bypassing their filtering rules.
Get Billing Information
Retrieves billing records for an organization, including amounts and billing periods.
Add Blacklist Category To Policy
Adds a content category to a policy’s block list without changing other settings.
Get Category
Retrieves basic information about a category.
Add Blacklist Domain To Policy
Blocks a domain for users covered by a policy.
Connect any two apps with Notis in the middle.
AimTell and Dnsfilter, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.