Phishing analysis
Keepnet + Spamhaus ZEN integration
Check sender IPs against Spamhaus blocklists.
Lookup
Keepnet integrates with Spamhaus ZEN to check sender IPs against Spamhaus blocklists.
What you get
- A verdict added to incidents automatically
- Usable as a condition in playbook rules
- Shown next to the other engines’ results
How it works
- An employee reports an email
- Keepnet sends its sender IPs to Spamhaus ZEN
- The verdict joins the incident and can trigger a playbook
Data and permissions
| Data | Direction | Detail |
|---|---|---|
| Sender IPs from reported emails | Out | Only what this engine checks |
| Verdict | In | Stored with the incident |
What you need
- Your own Spamhaus ZEN API key
- Incident Responder
Set up
Company settings, Integrations: paste your API key.
Related integrations
- Works with
- Incident Responder
- Built by
- Keepnet
- Last updated
- October 2026
