Skip to content
Notis

Check domains in new Gmail messages for threats

Give incoming links a quick security review without switching between Gmail and DNSFilter.

Trigger

New Gmail Message Received Trigger

Triggers when a new message is received in Gmail.

Action

Suggest Domain Threat

Tool to suggest a fqdn as a potential threat. use after identifying a suspicious domain to verify its threat categorization.

Why this helps

Suspicious links can get buried in a busy inbox, leaving you to inspect them one by one.

  • Review domains mentioned in new messages as they arrive.
  • Surface DNSFilter threat suggestions alongside the message context.
  • Send run reports to a channel you already check.

Setup

Build it in a few focused steps.

  • 1Connect Gmail and DNSFilter once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and give it a clear name.
  • 3Tell Notis to extract domains from each new message, ask DNSFilter to suggest threat classifications, and summarize the message and results.
  • 4Pick the New Gmail Message Received trigger and choose where run reports should go.
  • 5Test with one real email that contains a domain.

Questions about this workflow

Does this workflow block a domain?

No. It requests a DNSFilter threat suggestion and reports the result for review; it does not change filtering policies.

What if the email has no domain to check?

Notis can report that no candidate domain was found in the message.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Gmail to Dnsfilter. A trigger fires from one place; an action lands in another.

Gmail triggers

Dnsfilter actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create IP Address

Tool to create a new ip address in dnsfilter. use after confirming the target network id exists.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Get Application Category

Tool to get basic information of a specific application category. use when you need details for a given application category id.

ActionInstant

Email Sent

Triggers when a Gmail message is sent by the authenticated user. It polls the 'SENT' label and emits metadata including sender, recipients, subject, timestamp, and thread ID.

TriggerPolling

Get Billing Information

Tool to retrieve basic billing information for an organization. use when you need to obtain billing details for reporting or automation tasks.

ActionInstant

New Gmail Message Received Trigger

Triggers when a new message is received in Gmail.

TriggerPolling

Get Category

Tool to get basic information of a specific category. use when you need to retrieve details for a category by its id.

ActionInstant

Get IP Address

Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.

ActionInstant

List All Categories

Tool to list all categories including internal categories. use when you need the complete set of filtering categories.

ActionInstant

List All IP Addresses

Tool to list all user-associated ip addresses. use when you need a comprehensive list of all ip address entries in your organization.

ActionInstant

List All MAC Addresses

Tool to list all mac addresses with basic information. use when you need to retrieve all mac address entries in your organization.

ActionInstant

Connect any two apps with Notis in the middle.

Gmail and Dnsfilter, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.