Scan Gmail links with VirusTotal and send alerts to WhatsApp, Teams, and Sheets

Go to Workflow
12 views
Built by SpaGreen Creative SpaGreen Creative
Created on June 05, 2026

Description

Who it's for
This n8n workflow is designed for IT security professionals, email administrators, and organizations that want to automatically scan URLs received in emails for potential security threats. It provides a complete end-to-end system capable of automatically detecting malicious URLs using VirusTotal API, analyzing the results, and sending notifications when suspicious links are found.

Features
Automatically monitors Gmail for new emails on a continuous basis (every minute)
Extracts all URLs from email content while filtering out Google links
Scans each URL using VirusTotal's comprehensive security database
Categorizes URLs based on threat level (malicious, suspicious, harmless, undetected)
Sends immediate alerts through multiple channels (WhatsApp via Rapiwa, Microsoft Teams)
Updates Google Sheets with scan results for historical tracking and analysis
Processes URLs in batches to optimize performance
Filters out common Google links to reduce false positives

Requirements
Gmail account with OAuth2 credentials
VirusTotal API key
Google Sheets API access with OAuth2 credentials
Rapiwa API credentials for WhatsApp notifications
Microsoft Teams credentials for team notifications
A Google Sheet configured to store scan results

Important Notes
Workflow runs continuously, checking for new emails every minute
Only non-Google URLs are scanned to focus on potentially suspicious links
Results are categorized based on VirusTotal's analysis: malicious, suspicious, harmless, undetected, timeout, failure, or type_unsupported
Alert messages include the URL and all relevant security statistics from VirusTotal
All scan results are stored in a Google Sheet for future reference and analysis
The workflow processes URLs in batches to optimize performance and avoid API limits
Immediate notifications are sent when potentially malicious URLs are detected

Support & Help
WhatsApp**: Chat on WhatsApp
Discord**: SpaGreen Community
Facebook Group**: SpaGreen Support
Website**: https://spagreen.net
Developer Portfolio**: Codecanyon SpaGreen

Nodes Used (4)

Code
n8n-nodes-base.code
Google Sheets
n8n-nodes-base.googleSheets
HTTP Request
n8n-nodes-base.httpRequest
Microsoft Teams
n8n-nodes-base.microsoftTeams