Skip to content
Notis

Search VirusTotal when a shipping concern surfaces

Turn a concrete concern into a searchable query without letting investigation sprawl take over the task.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Search VirusTotal

Tool to search for objects in the virustotal database. use when locating files, urls, domains, ips, or comments matching a query. supports pagination with limit and cursor.

Why this helps

When something looks unusual, ad hoc searching can branch into too many tabs and leave the original work unfinished.

  • Search VirusTotal for objects matching a supplied query.
  • Give a shipping-related concern a consistent investigation starting point.
  • Keep search initiation attached to the process that raised the concern.

Setup

Build it in a few focused steps.

  • 1Connect Shippo and VirusTotal to Notis once in the portal.
  • 2Create an automation or ask Notis to search VirusTotal using a query supplied by your connected shipping process.
  • 3Choose a Notis webhook trigger and set a channel for run reports.
  • 4Test with a focused query and review the returned matches.

Questions about this workflow

What kinds of objects can VirusTotal search find?

The action supports searches for files, URLs, domains, IPs, or comments, depending on the query.

Does the search determine if a shipment is unsafe?

No. It returns matching VirusTotal objects for a person or downstream process to review.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Shippo to Virustotal. A trigger fires from one place; an action lands in another.

Shippo triggers

Virustotal actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Add VirusTotal Comment

Tool to add a comment to a virustotal resource (file, url, domain, or ip address). use after analyzing a resource to leave contextual feedback. provide exactly one identifier per call.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Add Vote

Tool to add a vote (harmless/malicious) to a virustotal resource. use after reviewing analysis results to submit your verdict.

ActionInstant

Get Analysis Report

Tool to retrieve the analysis report of a file or url submission. use after obtaining an analysis id to fetch its detailed report.

ActionInstant

Get comments

Tool to retrieve the latest comments on a virustotal resource. use when you need to review user-generated comments for a file, url, domain, or ip after obtaining its identifier.

ActionInstant

Get Domain Relationships

Tool to retrieve relationship objects for a given domain. use when you have a domain and need to explore its related entities.

ActionInstant

Get Domain Report

Tool to retrieve the analysis report of a domain. use when you need detailed insight on a domain's reputation and analysis stats.

ActionInstant

Get File Report

Tool to retrieve the analysis report of a file. use when you have a file's hash and need detailed scan metadata.

ActionInstant

Get IP Address Relationships

Tool to retrieve objects related to a specific ip address by relationship type. use when you have an ip and need to explore connected files, urls, or other entities.

ActionInstant

Connect any two apps with Notis in the middle.

Shippo and Virustotal, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Virustotal.