Analyze email headers for IP reputation and spoofing detection - Gmail
Ready for 3.0Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.
What this workflow does
This workflow has 33 nodes and runs on Gmail events (plus 1 other trigger). Along the way it connects Gmail.
How it runs
Trigger: On Gmail events (plus 1 other trigger).
- Set Gmail Headers Here (Edit Fields (Set)): sets 1 field: headers
- Set Gmail Webhook Headers Here (Edit Fields (Set)): sets 1 field: headers
- Gmail - Set Headers (Edit Fields (Set)): sets or maps fields
- Gmail - Extract Received Headers (Code): runs custom JavaScript code
- Gmail - Remove Extra Received Headers (Limit): keeps the first few items
- Gmail - Extract Original From IP (Edit Fields (Set)): sets 1 field: extractedfromip
- Gmail - Original IP Found? (If): checks a condition and branches into true / false
- Gmail - Query IP Quality Score API (HTTP Request): calls an HTTP API
- Gmail - Query IP API (HTTP Request): calls an HTTP API
- Gmail - Authentication-Results Header? (If): checks a condition and branches into true / false
…plus 20 more steps. See the full node list below.
Services it uses
Before you upgrade to n8n 3.0
Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.
- Still check Gmail Trigger below v1.4 runs as v1.4 (drafts skipped, max emails per poll) (Gmail Trigger).
Nodes used (11)
- Gmail Trigger
n8n-nodes-base.gmailTrigger - Code
n8n-nodes-base.code - Edit Fields (Set)
n8n-nodes-base.set - If
n8n-nodes-base.if - HTTP Request
n8n-nodes-base.httpRequest - Webhook
n8n-nodes-base.webhook - Limit
n8n-nodes-base.limit - Merge
n8n-nodes-base.merge - Aggregate
n8n-nodes-base.aggregate - Respond to Webhook
n8n-nodes-base.respondToWebhook - No Operation, do nothing
n8n-nodes-base.noOp
From the author
Analyze Emails for Security Insights Who is this for? This workflow is ideal for IT professionals, security analysts, and organizations looking to enhance their email security practices. It is particularly useful for those who need to analyze Gmail email…