AcademyWorkflowsOperations

Email header analysis for spoofing checks

IT and security teams that want a quick check on whether incoming email headers suggest spoofing or spam.

  • Recommendedour rating
  • 5,700views on n8n
Open on n8n.io ↗

Paste it straight onto an n8n canvas with Ctrl+V or Cmd+V.

analyze-email-headers-for-ip-reputation-and-spoofing-detection-gmail.json

Loading the file...

What it does

This n8n workflow watches a Gmail inbox for new emails and reads their headers. It checks the SPF, DKIM and DMARC results, extracts the sending IP address and looks up its reputation and location with external services, including IP Quality Score. All results are returned in one JSON response through a webhook.

Use cases

  1. 01Check whether a message passes SPF, DKIM and DMARC
  2. 02Look up the reputation of a sending IP address
  3. 03Send header results to another system through a webhook

Connects

HTTP Request · Code

Questions about
Email header analysis for spoofing checks.

What is Email header analysis for spoofing checks used for?

IT and security teams that want a quick check on whether incoming email headers suggest spoofing or spam. This n8n workflow watches a Gmail inbox for new emails and reads their headers. It checks the SPF, DKIM and DMARC results, extracts the sending IP address and looks up its reputation and location with external services, including IP Quality Score. All results are returned in one JSON response through a webhook.

How do I import Email header analysis for spoofing checks into n8n?

Copy the workflow JSON from this page and paste it onto the n8n canvas with Ctrl+V or Cmd+V. Then connect your credentials in each node.

Is Email header analysis for spoofing checks safe to use?

It passed our automatic scan for credential theft, hidden instructions and risky install commands. Third party open source software. Sabemos AI does not maintain it. Check the code and permissions before you connect it to company data.