Scan URLs for Security Threats with urlscan.io & GPT-4o mini

This n8n workflow provides an automated security scanning solution for URLs. It starts with a webhook that accepts a POST payload containing a URL (e.g., { "url": "https://example.com" }). The workflow submits the URL to urlscan.io API, which performs a scan and returns a scan ID and initial JSON data. A 30-second wait node allows time for urlscan.io to generate full artifacts like screenshots and reports.

Next, GPT-4o mini (via OpenAI) analyzes the scan results, classifying the URL as malicious, suspicious, or benign. It assigns a 1-10 risk score and generates a concise two-sentence summary. Finally, a Gmail node sends a detailed alert email including the original URL, scan ID, AI verdict, risk score, screenshot link, full report link, and raw JSON for review.

Benefits include rapid threat detection without manual intervention, reducing phishing risks, and scalable integration into apps, email filters, or chatbots. Use cases: protect teams from malicious links in emails/chats, pre-scan user-submitted URLs in web apps, or automate compliance checks for shared links. Setup takes ~5 minutes with API keys for urlscan.io, OpenAI, and Gmail.