Multi-source domain reputation analysis
Build a workflow that takes a domain as input (form, Send-to-Story, or chat command). Query URLhaus, VirusTotal, and URLScan in parallel for reputation and recent activity. Normalize and combine the signals into a single risk score with the supporting detail from each source. Handle domains not found in a source, API timeouts, and rate limits gracefully. Output a consolidated reputation summary and recommended verdict.
What this prompt builds
Investigate a domain across URLhaus, VirusTotal, and URLScan to confirm or clear it fast.
The problem
Judging a domain from a single source produces false positives and false negatives, so analysts second-guess verdicts and waste time. Pivoting between tools by hand is tedious during a live investigation.
Solution and impact
This workflow enriches a domain across URLhaus, VirusTotal, and URLScan and consolidates the signals into one verdict. Analysts get a higher-confidence answer in seconds and spend less time chasing benign domains.