Skip to content
Notis

Check the domain behind a shipping notification

Give unfamiliar notification domains a consistent check before they become another open question in your day.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Get Domain Report

Tool to retrieve the analysis report of a domain. use when you need detailed insight on a domain's reputation and analysis stats.

Why this helps

Unexpected shipping notifications can demand attention, and manually investigating each domain makes it harder to return to planned work.

  • Retrieve detailed VirusTotal domain analysis for a supplied domain.
  • Provide a repeatable check for domains surfaced by a connected process.
  • Reduce the need to interrupt work for an initial reputation lookup.

Setup

Build it in a few focused steps.

  • 1Connect Shippo and VirusTotal to Notis once in the portal.
  • 2Create an automation or ask Notis to retrieve a domain report for domains your connected notification process sends.
  • 3Select a Notis webhook trigger and choose a run-report channel.
  • 4Test with one domain from a notification you want to review.

Questions about this workflow

Does this inspect the full notification message?

No. The webhook must provide the domain to check.

Does a clean report prove a notification is safe?

No. Reputation data is one input to review and may not cover every risk.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Shippo to Virustotal. A trigger fires from one place; an action lands in another.

Shippo triggers

Virustotal actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Add VirusTotal Comment

Tool to add a comment to a virustotal resource (file, url, domain, or ip address). use after analyzing a resource to leave contextual feedback. provide exactly one identifier per call.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Add Vote

Tool to add a vote (harmless/malicious) to a virustotal resource. use after reviewing analysis results to submit your verdict.

ActionInstant

Get Analysis Report

Tool to retrieve the analysis report of a file or url submission. use after obtaining an analysis id to fetch its detailed report.

ActionInstant

Get comments

Tool to retrieve the latest comments on a virustotal resource. use when you need to review user-generated comments for a file, url, domain, or ip after obtaining its identifier.

ActionInstant

Get Domain Relationships

Tool to retrieve relationship objects for a given domain. use when you have a domain and need to explore its related entities.

ActionInstant

Get Domain Report

Tool to retrieve the analysis report of a domain. use when you need detailed insight on a domain's reputation and analysis stats.

ActionInstant

Get File Report

Tool to retrieve the analysis report of a file. use when you have a file's hash and need detailed scan metadata.

ActionInstant

Get IP Address Relationships

Tool to retrieve objects related to a specific ip address by relationship type. use when you have an ip and need to explore connected files, urls, or other entities.

ActionInstant

Connect any two apps with Notis in the middle.

Shippo and Virustotal, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Virustotal.