Gmail Email Headers Analyzer: IP Reputation & Spoofing Detection

This n8n workflow monitors Gmail inboxes for new emails, extracts headers, and performs comprehensive security analysis. It validates SPF, DKIM, and DMARC authentication to identify spoofing attempts, extracts originating IP addresses, and assesses their reputation and geolocation via APIs like IP Quality Score. Results are consolidated into a JSON response for easy integration.

Key benefits include enhanced email security, automated threat detection, and reduced manual analysis time. Ideal for IT pros and security teams combating phishing, it provides actionable insights on sender trustworthiness, preventing fraud and improving compliance.

Use cases: Integrate into SIEM systems, alert on high-risk emails, or automate quarantine in enterprise environments. Setup requires Gmail credentials and optional API keys for full IP intel.