Review suspicious domains shared in WhatsApp
Forward a domain that looks suspicious. Notis checks it with DNSFilter and reports the result where you work.
Trigger
New Message Received
Triggered in real time when your WhatsApp Business number receives an inbound message from a customer (text, media, location, or contact). Delivered via the Cloud API webhook.
Action
Suggest Domain Threat
Tool to suggest a fqdn as a potential threat. use after identifying a suspicious domain to verify its threat categorization.
Why this helps
Suspicious domains can get buried in chat while you switch between WhatsApp and security tools.
- Capture suspicious domains while they are still visible in chat.
- Get a DNSFilter threat suggestion without switching apps.
- Keep the review result in your chosen report channel.
Setup
Build it in a few focused steps.
- 1Connect WhatsApp and DNSFilter once in the Notis portal.
- 2Create an automation in Automations, New Automation, and give it a name.
- 3Describe in one instruction how to identify a domain in an incoming message, suggest it to DNSFilter as a potential threat, and report the result.
- 4Pick the WhatsApp New Message Received trigger and choose where run reports go.
- 5Test with one real WhatsApp message containing a domain.
Questions about this workflow
Does this block the domain in DNSFilter?
No. The available action suggests a fully qualified domain name as a potential threat. It does not change a filtering policy or block list.
What if a message contains no domain?
Tell Notis in the instruction to report that it found no domain to review.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Whatsapp to Dnsfilter. A trigger fires from one place; an action lands in another.
Whatsapp triggers
Dnsfilter actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create IP Address
Tool to create a new ip address in dnsfilter. use after confirming the target network id exists.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Get Application Category
Tool to get basic information of a specific application category. use when you need details for a given application category id.
Message Status Updated
Triggers when a WhatsApp message status changes. IMPORTANT LIMITATION: WhatsApp Cloud API does not provide a native polling endpoint for message status. Status updates are ONLY delivered via webhooks in real-time. This trigger cannot directly poll the WhatsApp API for status updates. This trigger will return empty results as WhatsApp does not support this operation. To track message status updates, you must: 1. Set up a webhook endpoint to receive status notifications from WhatsApp 2. Store the webhook data in your own database 3. Use a different mechanism to query your stored webhook data For more information, see: - https://developers.facebook.com/docs/whatsapp/cloud-api/webhooks
Get Billing Information
Tool to retrieve basic billing information for an organization. use when you need to obtain billing details for reporting or automation tasks.
New Message Received
Triggered in real time when your WhatsApp Business number receives an inbound message from a customer (text, media, location, or contact). Delivered via the Cloud API webhook.
Get Category
Tool to get basic information of a specific category. use when you need to retrieve details for a category by its id.
Interactive Reply Received
Triggered when a customer taps a quick-reply button or selects an option from an interactive list message you sent.
Get IP Address
Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.
Message Template Status Update
Triggered when the review status of a WhatsApp message template changes — for example approved, rejected, or flagged — on your WhatsApp Business Account.
List All Categories
Tool to list all categories including internal categories. use when you need the complete set of filtering categories.
List All IP Addresses
Tool to list all user-associated ip addresses. use when you need a comprehensive list of all ip address entries in your organization.
List All MAC Addresses
Tool to list all mac addresses with basic information. use when you need to retrieve all mac address entries in your organization.
Connect any two apps with Notis in the middle.
Whatsapp and Dnsfilter, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.