Skip to content
FlowHubFluxonLab
C
General Automationfree

Analyze Email Headers for IP Reputation and Spoofing Detection - Outlook

by Angel Menendezadapted from n8n official workflow galleryUpdated Aug 2026
RequiresCCodeHTTP RequestHTTP Request
Share Post Share
Trigger on New EmailTrigger on New …HRRetrieve Headers of EmailRetrieve Header…CoExtract Received HeadersExtract Receive…LiRemove Extra Received HeadersRemove Extra Re…SeExtract Original From IPExtract Origina…HRQuery IP Quality Score APIQuery IP Qualit…HRQuery IP APIIfAuthentication-Results Header?Authentication-…CoExtract Authentication-Results HeaderExtract Authent…IfReceived-SPF Header?Received-SPF He…IfDKIM-Signature Header?DKIM-Signature …SeSet SPF ValueCoExtract Received-SPF HeaderExtract Receive…SeDKIM Signature FoundDKIM Signature …IfDMARC Header?SeNo DMARC HeaderCoExtract DMARC HeaderExtract DMARC H…SeSet DMARC ValueIfOriginal IP Found?Original IP Fou…SeNo DKIM Signature FoundNo DKIM Signatu…SeDetermine Auth ValuesDetermine Auth …SeNo SPF FoundMeMergeAgAggregateNONo Operation, do nothingNo Operation, d…SeFormat Webhook OutputFormat Webhook …SeFormat Individual Auth OutputsFormat Individu…SeFormat Combined Auth OutputFormat Combined…RTRespond to WebhookRespond to Webh…WeWebhook1SeSet HeadersAgAggregate Received-SPF HeadersAggregate Recei…SeSet Headers HereSeSet Webhook Headers HereSet Webhook Hea…12345678910111213141516171819202122232425262728293031323334353637383940
1/5
STEPS · 40
Starts on a Microsoft Outlook event

Analyze Emails for Security Insights Who is this for? This workflow is ideal for security teams, IT Ops professionals, and managed service providers (MSPs) responsible for monitoring and validating email traffic. It’s especially useful for organizations that need to identify potential phishing attempts, spam, or compromised accounts by analyzing email headers and IP reputation. What problem is this workflow solving? This workflow helps identify malicious or suspicious emails by verifying email authentication headers (SPF, DKIM, DMARC) and analyzing the reputation of the originating IP address. By automating these checks, it reduces manual analysis time and flags potential threats efficiently. What this workflow does Email Monitoring:** Polls a specified Microsoft Outlook folder for new emails in real-time. Header Analysis:** Retrieves and processes email headers to extract critical information such as authentication results and the sender’s IP address. IP Reputation Check:** Leverages external APIs (IP Quality Score and IP-API) to analyze the originating IP for potential spam or malicious activity.

Tags

n8nreference-only
Connects
CCodeWHTTP Request
CategoryGeneral Automation
Triggermanual
Complexityadvanced
Nodes34
AddedDec 27, 2024
CW
free

Handle Shopify Admin GraphQL requests with error handling and retries

Quick Overview This sub-workflow is called by another n8n workflow to execute Shopify Admin GraphQL queries and mutations via HTTP, adding input validation, detailed error detection (including rate limits), and automatic retries with exponential backoff before returning the final Shopify response. How it works Receives input from a parent workflow execution, including a Shopify GraphQL query, shop API endpoint, and Admin API access token. Validates required inputs, normalizes the shop endpoint, and builds the Shopify Admin GraphQL request payload with variables and API version defaults. Sends the POST request to the Shopify Admin GraphQL endpoint with the X-Shopify-Access-Token header and captures the full HTTP response. Parses the response to detect HTTP/network failures, GraphQL errors, Shopify userErrors, bulk/job failures, and throttle status from Shopify cost extensions. If throttled or encountering retryable server/network errors, waits for the calculated backoff interval and retries the same Shopify GraphQL request up to the configured maximum. If non-retryable errors remain, stops the execution and returns a formatted error object; otherwise returns the Shopify data, rate-l

by Nexus AI
CW
free

Generate llms.txt from a website sitemap using forms and HTTP requests

Quick overview This workflow uses an n8n Form and HTTP requests to read a website sitemap, fetch each listed page, extract the page title and meta description, and generate an llms.txt file that you can preview, copy, or download. How it works Receives a form submission with the site name, site description, sitemap URL, and a maximum page limit. Fetches the sitemap XML and, if it is a sitemap index, extracts the child sitemap URLs. Fetches each leaf sitemap and extracts, deduplicates, and caps page URLs while grouping them into sections based on the first URL path segment. Requests each page’s HTML content and continues even if some pages fail to load. Extracts the HTML title and meta description (or falls back to a title derived from the URL), then compiles the results into a sectioned llms.txt markdown file. Renders a completion page that displays the generated llms.txt content and provides Copy and Download actions. Setup Copy the n8n Form URL from the Form Trigger node and open it in your browser (or use the test form in the editor). Submit your site name, sitemap URL, and optionally a site description and max pages value. Upload the downloaded or copied llms.txt file to your w

by isaWOW
CW
free

Search and preview GIFs with forms and GIPHY

Quick overview This workflow publishes an n8n Form where users enter a search term, queries the GIPHY Search API for the top 9 G-rated GIFs, and renders the results as a clickable HTML gallery on the form completion page with copy-to-clipboard links. How it works Receives a submission from an n8n Form at the gif-finder path with a required query field. Calls the GIPHY Search API with the submitted query, limiting results to 9 GIFs and filtering to G-rated content. Transforms the GIPHY response into responsive HTML that shows a grid of GIF thumbnails and a fallback message when no results are returned. Displays the generated HTML on the form completion page so users can click any GIF to copy its direct URL to the clipboard. Setup Create a GIPHY developer app and generate an API key. Add an HTTP Query Auth credential and set the api_key value to your GIPHY API key, then select it in the HTTP Request that calls GIPHY. Activate the workflow and share the n8n Form URL for the gif-finder form with your users.

by Roshan Ramani