Review extracted domains for DNS threats
Turn domains found in parsed emails and files into a focused DNS threat review.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Suggest Domain Threat
Submits a domain threat report for review and possible threat classification.
Why this helps
Suspicious domains can sit unnoticed in parsed documents while you switch between extraction results and DNSFilter.
- Review extracted domains in one security workflow.
- Get DNSFilter threat suggestions before changing filtering policies.
- Keep policy changes under your control.
Setup
Build it in a few focused steps.
- 1Connect Airparser and DNSFilter once in the Notis portal.
- 2Create an automation in Automations, New Automation, and give it a clear name.
- 3Tell Notis to check domains in the incoming Airparser data with DNSFilter's threat suggestion action and report the results for review.
- 4Choose the webhook trigger and select where run reports should go.
- 5Test with one real parsed example containing a domain.
Questions about this workflow
Does this automatically block a domain?
No. This workflow requests a threat suggestion and reports the result. Blocking requires a separate policy action.
How does the workflow start?
A Notis webhook starts it when your incoming request contains the Airparser data.
What if the parsed content has no domain?
Tell Notis in the instruction to report that no domain was found and skip the DNSFilter check.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Airparser to Dnsfilter. A trigger fires from one place; an action lands in another.
Airparser triggers
Dnsfilter actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create IP Address
Adds an IP address to a network for filtering policies.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Add Allowed Application
Allows an application through a policy, regardless of other blocking rules.
Get Application Category
Retrieves details about an application category.
Add Allowlist Domains to Policies
Adds domains to the allow lists of multiple policies, bypassing their filtering rules.
Get Billing Information
Retrieves billing records for an organization, including amounts and billing periods.
Add Blacklist Category To Policy
Adds a content category to a policy’s block list without changing other settings.
Get Category
Retrieves basic information about a category.
Add Blacklist Domain To Policy
Blocks a domain for users covered by a policy.
Connect any two apps with Notis in the middle.
Airparser and Dnsfilter, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.