Skip to content
Notis

Flag suspicious domains from WhatsApp

Give your security team a fast answer when someone spots a risky link in chat.

Trigger

New WhatsApp Message Received

Polling trigger that monitors for new messages received in TimelinesAI WhatsApp chats.

Action

Suggest Domain Threat

Tool to suggest a fqdn as a potential threat. use after identifying a suspicious domain to verify its threat categorization.

Why this helps

Suspicious links get buried in busy WhatsApp conversations and go unreviewed.

  • Shortens response time to reported links
  • Creates a consistent threat review step
  • Keeps security context tied to the original chat

Setup

Build it in a few focused steps.

  • 1Connect TimelinesAI and Dnsfilter once in Notis.
  • 2Create an automation named Flag suspicious domains.
  • 3Tell Notis to extract any suspicious fully qualified domain name from each new WhatsApp message, suggest it as a Dnsfilter threat, and summarize the result.
  • 4Pick New WhatsApp Message Received as the trigger.
  • 5Choose a report channel and test with one real message containing a domain.

Questions about this workflow

What if a message has no domain?

Notis can skip the Dnsfilter action and report that no domain was found.

Does this block the domain automatically?

No. The action only suggests the domain as a potential threat for review.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Timelinesai to Dnsfilter. A trigger fires from one place; an action lands in another.

Timelinesai triggers

Dnsfilter actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create IP Address

Tool to create a new ip address in dnsfilter. use after confirming the target network id exists.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Get Application Category

Tool to get basic information of a specific application category. use when you need details for a given application category id.

ActionInstant

New WhatsApp Message Received

Polling trigger that monitors for new messages received in TimelinesAI WhatsApp chats.

TriggerPolling

Get Billing Information

Tool to retrieve basic billing information for an organization. use when you need to obtain billing details for reporting or automation tasks.

ActionInstant

Get Category

Tool to get basic information of a specific category. use when you need to retrieve details for a category by its id.

ActionInstant

Get IP Address

Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.

ActionInstant

List All Categories

Tool to list all categories including internal categories. use when you need the complete set of filtering categories.

ActionInstant

List All IP Addresses

Tool to list all user-associated ip addresses. use when you need a comprehensive list of all ip address entries in your organization.

ActionInstant

List All MAC Addresses

Tool to list all mac addresses with basic information. use when you need to retrieve all mac address entries in your organization.

ActionInstant

Connect any two apps with Notis in the middle.

Timelinesai and Dnsfilter, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.