Analyze Outlook Email Headers for IP Reputation & Spoofing Detection

This workflow polls a Microsoft Outlook folder for new emails, retrieves and parses headers to extract authentication results (SPF, DKIM, DMARC) and sender IP addresses. It then queries external APIs like IP Quality Score and IP-API for IP reputation scoring, identifying potential spam, malware, or proxy activity.

Benefits include rapid threat detection without manual review, reducing analysis time for security teams and MSPs. It aggregates findings into a structured format output via webhook for SIEM integration or alerting, enhancing proactive email security.

Ideal for IT ops, security professionals monitoring high-volume inboxes. Use cases: Phishing prevention, compromised account detection, compliance auditing in enterprises handling sensitive communications.