The flow
Starts it 1Logic 8Service 11
The steps in the order they run, from what starts it.
- 1When URL SubmittedForm triggerStarts it
- 2Parse Domain from URLCodeLogic
- 3Fetch RDAP Domain InfoHttp RequestService
- 4Fetch Certificate Transparency InfoHttp RequestService
- 5Fetch DNS A RecordHttp RequestService
- 6Submit for URLScan.io AnalysisHttp RequestService
- 7Fetch HTML of Scam PageHttp RequestService
- 8Merge Enrichment DataMergeLogic
- 9Parse Resolved IPCodeLogic
- 10Wait 15 Seconds for ScanWaitLogic
- 11Parse HTML FingerprintsCodeLogic
- 12Combine All FindingsCodeLogic
- 13Fetch IP Hosting InfoHttp RequestService
- 14Fetch URLScan.io ResultsHttp RequestService
- 15Retrieve Case LogsData TableService
- 16Analyze Fingerprint CorrelationsCodeLogic
- 17Prepare Report FormatCodeLogic
- 18Log Case DataData TableService
- 19Compose Abuse Report EmailGmailService
- 20Dispatch Telegram ReportTelegramService
How it's built
- Starts on
- Someone submitting a form
- Steps
- 20, 1 loop or waits
- Size
- Medium: a working afternoon
- Connects to
- Gmail, Telegram, n8n data table
- Model
- None. This is plumbing, not judgement
Questions
What does it need to run?
An n8n account, plus your own Gmail and Telegram accounts. You connect your own accounts after importing it; none are included.
What starts it?
It starts on someone submitting a form.
Does it use AI?
No. Every step is fixed logic or a call to a service, so it does the same thing every time.
How long does it take to set up?
Plan an afternoon. 20 steps is enough that you should read each one before running it.
How do I import it?
Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.
Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 20 steps before you point it at anything that matters.