Scan URLs for security threats with urlscan.io and GPT-4o mini
Ready for 3.0Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.
What this workflow does
This AI workflow has 5 nodes and runs when an HTTP POST request hits its webhook URL. Along the way it connects Gmail and OpenAI.
How it runs
Trigger: When an HTTP POST request hits its webhook URL.
- Perform a scan (urlscan.io): uses urlscan.io
- Wait: waits 30 seconds
- Message a model (OpenAI): uses OpenAI
- Send a message (Gmail): uses Gmail
Services it uses
Before you upgrade to n8n 3.0
Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.
Nodes used (5)
- Webhook
n8n-nodes-base.webhook - urlscan.io
n8n-nodes-base.urlScanIo - Wait
n8n-nodes-base.wait - Gmail
n8n-nodes-base.gmail - OpenAI
@n8n/n8n-nodes-langchain.openAi
From the author
How it works • Webhook → urlscan.io → GPT-4o mini → Gmail • Payload example: { "url": "https://example.com" } • urlscan.io returns a Scan ID and raw JSON. • AI node classifies the scan as malicious / suspicious / benign, assigns a 1-10 risk score, and writes…