Skip to content
Notis

Add confirmed malicious domains to a DNSFilter policy

Send a domain for review. Airtop gathers its public context, and Notis adds it to the specified DNSFilter policy blocklist when your instruction's confirmation criteria are met.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Add Blacklist Domain To Policy

Blocks a domain for users covered by a policy.

Why this helps

A suspicious link can sit in an inbox or browser tab while someone gathers context and finds the right DNS policy to update.

  • Keep investigation and policy action in one run.
  • Specify the policy and confirmation criteria in plain language.
  • Reduce manual copying between a browser and DNSFilter.

Setup

Build it in a few focused steps.

  • 1Connect Airtop and DNSFilter once in Notis.
  • 2Create an automation in the portal or by telling Notis the outcome you want.
  • 3In one instruction, provide the domain and DNSFilter policy, have Airtop inspect the public site, and add the domain to that policy only when it meets your stated confirmation criteria.
  • 4Choose the webhook trigger and a channel for run reports.
  • 5Test with one real example and verify the policy update.

Questions about this workflow

Can Airtop decide on its own that a site is malicious?

The prompt should define the evidence or confirmation criteria you want. Review the first run and make those criteria clear before relying on the automation.

Which policy will be changed?

Name the intended DNSFilter policy in your instruction. This action adds one domain to one policy's blocklist.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Airtop to Dnsfilter. A trigger fires from one place; an action lands in another.

Airtop triggers

Dnsfilter actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create IP Address

Adds an IP address to a network for filtering policies.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Add Allowed Application

Allows an application through a policy, regardless of other blocking rules.

ActionInstant

Get Application Category

Retrieves details about an application category.

ActionInstant

Add Allowlist Domains to Policies

Adds domains to the allow lists of multiple policies, bypassing their filtering rules.

ActionInstant

Get Billing Information

Retrieves billing records for an organization, including amounts and billing periods.

ActionInstant

Add Blacklist Category To Policy

Adds a content category to a policy’s block list without changing other settings.

ActionInstant

Get Category

Retrieves basic information about a category.

ActionInstant

Add Blacklist Domain To Policy

Blocks a domain for users covered by a policy.

ActionInstant

Connect any two apps with Notis in the middle.

Airtop and Dnsfilter, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.