Phishing_analysis__URLScan_io_and_Virustotal_

Complex

High

Nodes

Complex

Trigger

High

Complexity

7/22/2025

Added

Workflow Overview

Total Nodes

Node Types

manual Trigger

When clicking "Execute Workflow"

1 node

slack

sends slack message

1 node

split In Batches

Split In Batches

1 node

microsoft Outlook

Mark as read, Get all unread messages

2 nodes

http Request

VirusTotal: Scan URL, VirusTotal: Get report

2 nodes

schedule Trigger

Schedule Trigger

1 node

code

Find indicators of compromise

1 node

url Scan Io

URLScan: Get report, URLScan: Scan URL

2 nodes

Has URL?, No error?

2 nodes

filter

Not empty?

1 node

sticky Note

Sticky Note, Sticky Note1, Sticky Note2, Sticky Note3, Sticky Note4, Sticky Note5, Sticky Note6

7 nodes

wait

Wait 1 Minute

1 node

merge

Merge Reports

1 node

Workflow JSON

20.33 KB

{
  "id": "8EmNhftXznAGV3dR",
  "meta": {
    "instanceId": "03e9d14e9196363fe7191ce21dc0bb17387a6e755dcc9acc4f5904752919dca8"
  },
  "name": "Phishing_analysis__URLScan_io_and_Virustotal_",
  "tags": [
    {
      "id": "GCHVocImoXoEVnzP",
      "name": "🛠️ In progress",
      "createdAt": "2023-10-31T02:17:21.618Z",
      "updatedAt": "2023-10-31T02:17:21.618Z"
    },
    {
      "id": "QPJKatvLSxxtrE8U",
      "name": "Secops",
      "createdAt": "2023-10-31T02:15:11.396Z",
      "updatedAt": "2023-10-31T02:15:11.396Z"
    }
  ],
  "nodes": [
    {
      "id": "f170068a-4540-4fbd-bd17-00a6367989d1",
      "name": "When clicking \"Execute Workflow\"",
      "type": "n8n-nodes-base.manualTrigger",
      "position": [
        -1760,
        560
      ],
      "parameters": {},
      "typeVersion": 1
    },
    {
      "id": "5a1e0490-6971-4490-a806-46da5e226365",
      "name": "sends slack message",
      "type": "n8n-nodes-base.slack",
      "position": [
        -360,
        1280
 ...

Showing first 1000 characters. Click "Expand" to view the full JSON.