Skip to content
Notis

Check suspicious domains with Dnsfilter

Give your incident intake a direct path to a Dnsfilter threat suggestion for faster triage.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Suggest Domain Threat

Tool to suggest a fqdn as a potential threat. use after identifying a suspicious domain to verify its threat categorization.

Why this helps

Suspicious domains sit in tickets or chats while someone manually opens another security tool.

  • Shorten first response time
  • Keep triage in one report
  • Create consistent threat checks

Setup

Build it in a few focused steps.

  • 1Connect Dnsfilter in Notis once.
  • 2Create an automation named Suspicious domain threat check.
  • 3Tell Notis to use Dnsfilter to suggest whether the reported FQDN is a potential threat and summarize the result.
  • 4Pick a Notis webhook trigger and choose a report channel.
  • 5Test with one known suspicious domain.

Questions about this workflow

What input does the webhook need?

It should include the suspicious fully qualified domain name.

Does a suggestion prove malicious activity?

No. Treat the returned suggestion as a triage signal.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Spotify to Dnsfilter. A trigger fires from one place; an action lands in another.

Spotify triggers

Dnsfilter actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create IP Address

Tool to create a new ip address in dnsfilter. use after confirming the target network id exists.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Get Application Category

Tool to get basic information of a specific application category. use when you need details for a given application category id.

ActionInstant

New Device Added

Triggers when a new device is added.

TriggerPolling

Get Billing Information

Tool to retrieve basic billing information for an organization. use when you need to obtain billing details for reporting or automation tasks.

ActionInstant

Spotify Playlist Item Change

Triggers when songs are added to or removed from a Spotify playlist.

TriggerPolling

Get Category

Tool to get basic information of a specific category. use when you need to retrieve details for a category by its id.

ActionInstant

New Playlist Created or Deleted

Triggers when a new playlist is created or deleted.

TriggerPolling

Get IP Address

Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.

ActionInstant

List All Categories

Tool to list all categories including internal categories. use when you need the complete set of filtering categories.

ActionInstant

List All IP Addresses

Tool to list all user-associated ip addresses. use when you need a comprehensive list of all ip address entries in your organization.

ActionInstant

List All MAC Addresses

Tool to list all mac addresses with basic information. use when you need to retrieve all mac address entries in your organization.

ActionInstant

Connect any two apps with Notis in the middle.

Spotify and Dnsfilter, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.