(5/5)

Phishing_analysis__URLScan_io_and_Virustotal_

Automated workflow: PhishinganalysisURLScanioandVirustotal. This workflow integrates 14 different services: microsoftOutlook, httpRequest, filter, stickyNote, wait. It contains 28 nodes and follows best practices for error handling and security.

Integrations Used (5)

Slack

Workflow Structure (16 nodes)

100%

Schedule Trigger

Split In Batches

Code

Find indicators of compromise

Has URL?

Url Scan Io

URLScan: Scan URL

No error?

Wait

Wait 1 Minute

Url Scan Io

URLScan: Get report

Manual Trigger

When clicking "Execute Workflow"

Microsoft Outlook

Get all unread messages

Microsoft Outlook

Mark as read

Filter

Not empty?

Slack

sends slack message

Http Request

VirusTotal: Scan URL

Http Request

VirusTotal: Get report

Merge

Merge Reports

Node Types:

trigger

action

logic

default

http

code

Requires credentials

Prerequisites

Required Credentials (4)

Microsoft Outlook

Used by: Mark as read, Get all unread messages

Docs

Slack

Used by: sends slack message

Docs

Url Scan Io

Used by: URLScan: Get report, URLScan: Scan URL

Docs

Virus Total

Used by: VirusTotal: Scan URL, VirusTotal: Get report

Docs

Multiple services required

This workflow needs 4 different credentials. Make sure you have accounts for all services before importing.

Complexity

Advanced

Expert level. Custom code, complex logic, many integrations.

Setup time: ~55 min

Score: 95/100

Custom Code

Conditional Logic

Loops

7 Integrations

When to Use This Workflow

Team Notifications

Send automated alerts and updates to your team chat when important events occur.

Never miss critical updates - your team stays informed in real-time.

Scheduled Operations

Run automated tasks at specific times - daily reports, weekly cleanups, monthly backups.

Set it and forget it - reliable automation that runs on your schedule.

Real-time Response

React instantly when events happen - new orders, form submissions, or API calls.

Zero delay between trigger and action for time-sensitive workflows.

workflow.json

{
  "id": "8EmNhftXznAGV3dR",
  "meta": {
    "instanceId": "workflow-15d0d343",
    "versionId": "1.0.0",
    "createdAt": "2025-09-29T07:07:59.440889",
    "updatedAt": "2025-09-29T07:07:59.440898",
    "owner": "n8n-user",
    "license": "MIT",
    "category": "automation",
    "status": "active",
    "priority": "high",
    "environment": "production"
  },
  "name": "Phishing_analysis__URLScan_io_and_Virustotal_",
  "tags": [
    "automation",
    "n8n",
    "production-ready",
    "excellent",
...