<p></p><hr><h2>Introduction</h2><p>This document describes the <strong>technical design, functional scope, requirements, compatibility, and end-to-end operation</strong> of the <em>Phishing Report Button</em> add-in for Microsoft Outlook in <strong>On-Premise</strong> environments.</p><p>The add-in is intended for organizations that <strong>do not use Exchange Online or Azure Active Directory</strong>, and require a local solution to report suspicious emails directly from Outlook.</p><hr><h2>Scope of the Add-in</h2><p>The add-in allows users to:</p><ul class="accent-bullets"><li><p>Report suspicious or phishing emails directly from Outlook.</p></li><li><p>Send relevant email information to the Whalemate backend.</p></li><li><p>Receive immediate visual feedback about the report status.</p></li></ul><h3>Out of scope</h3><p>The add-in <strong>does not include</strong>:</p><ul class="accent-bullets"><li><p>Integration with Microsoft Graph.</p></li><li><p>Authentication via Azure AD, OAuth, or MSAL.</p></li><li><p>Automatic forwarding of the original email to the spam folder.</p></li><li><p>Full access to extended email headers.</p></li><li><p>Automatic correlation with previously sent phishing campaigns.</p></li></ul><p>These limitations are <strong>inherent to the Office Add-ins model in On-Premise environments</strong>.</p><hr><h2>Add-in Architecture (Design Overview)</h2><p>The add-in follows a <strong>simple client–server architecture</strong>, with no dependencies on Microsoft cloud services.</p><h3>Main components</h3><ol class="steps-list"><li><p><strong>Outlook Add-in (Client)</strong></p></li><li><p><strong>Whalemate Backend (Server)</strong></p></li></ol><p>There are no intermediate components or third-party services.</p><hr><h2>Client Component – Outlook Add-in</h2><h3>Add-in type</h3><ul class="accent-bullets"><li><p>Type: <strong>Office Add-in (MailApp)</strong></p></li><li><p>UI: <strong>Task Pane</strong></p></li><li><p>Technology: <strong>Office.js</strong></p></li><li><p>Runtime: Outlook client (On-Premise)</p></li></ul><h3>Operation</h3><p>The add-in is triggered by a <strong>manual user action</strong> (“Report Phishing”) on a selected email.</p><h3>Client capabilities</h3><p>The add-in can access only the data exposed by <code class="inline-code-shadow bg-gray-100 border border-gray-200/60 dark:border-gray-800 font-medium dark:bg-gray-700/60 text-gray-900 dark:text-gray-200 font-mono text-md px-1 py-0.5 rounded-[0.2rem] [&amp;::before]:content-none [&amp;::after]:content-none">Office.context.mailbox.item</code>, including:</p><ul class="accent-bullets"><li><p>Sender email address</p></li><li><p>Sender domain</p></li><li><p>Reporting user email address</p></li><li><p>Report timestamp</p></li><li><p>Original email send timestamp</p></li><li><p>Email body (HTML and plain text)</p></li><li><p>Links contained in the email body</p></li></ul><h3>Client limitations</h3><p>Due to the On-Premise context:</p><ul class="accent-bullets"><li><p>❌ No access to full email headers</p></li><li><p>❌ No access to binary attachments</p></li><li><p>❌ No Microsoft Graph</p></li><li><p>❌ No Azure AD / MSAL</p></li><li><p>❌ No strong identity tokens (JWT)</p></li></ul><p>These limitations prevent, for example, correlating reports with previous campaigns based on custom headers.</p><hr><h2>Backend Component – Whalemate</h2><h3>Reception endpoint</h3><p>POST https://back.whalemate.com/api/public/reported-email-microsoft-webhook</p><h3>Backend responsibilities</h3><p>Upon receiving a report, the backend:</p><ol class="steps-list"><li><p>Registers the reporting event.</p></li><li><p>Stores the reported email information.</p></li><li><p>Displays the report in the Whalemate SOC interface.</p></li><li><p>Optionally forwards the information to organization-configured email addresses.</p></li></ol><hr><h2>End-to-End Operation Flow</h2><p>Logical reporting flow:</p><ol class="steps-list"><li><p>The user selects a suspicious email in Outlook.</p></li><li><p>The user clicks <strong>Report Phishing</strong>.</p></li><li><p>The add-in:</p></li></ol><ul class="accent-bullets"><li><p>Retrieves the selected item.</p></li><li><p>Extracts available metadata and content.</p></li></ul><ol class="steps-list"><li><p>Sends the payload to the Whalemate backend via HTTPS.</p></li><li><p>The backend processes and stores the report.</p></li><li><p>The user receives visual feedback (success or error).</p></li></ol><h3>Simplified logical diagram</h3><pre class="relative  language-plaintext" data-language="plaintext" onmouseenter="initCodeBlockCopy()"><button class="absolute right-2 top-2 flex cursor-pointer items-center gap-1 rounded-lg bg-white px-1.5 py-1.5 text-xs font-medium text-gray-700 shadow-sm dark:bg-gray-800 dark:text-gray-200" onclick="copyCodeBlock(this)"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewbox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-copy-icon lucide-copy h-3.5 w-3.5 transition-transform duration-200 ease-in-out hover:scale-110"><rect width="14" height="14" x="8" y="8" rx="2" ry="2"></rect><path d="M4 16c-1.1 0-2-.9-2-2V4c0-1.1.9-2 2-2h10c1.1 0 2 .9 2 2"></path></svg></button><code class="language-plaintext relative"><span>[User]
   |
   v
[Outlook On-Prem]
   |
   | Office Add-in (Office.js)
   v
[Report Phishing Button]
   |
   | HTTPS POST
   v
[Whalemate Backend]
   |
   +--&gt; SOC / UI
   +--&gt; Forwarding to configured emails
</span></code></pre><hr><h2>Compatibility</h2><h3>Outlook Add-in compatibility table</h3><table style="min-width: 75px"><colgroup><col style="min-width: 25px"><col style="min-width: 25px"><col style="min-width: 25px"></colgroup><tbody><tr><th colspan="1" rowspan="1"><p>Platform / Client</p></th><th colspan="1" rowspan="1"><p>On-Prem Add-in</p></th><th colspan="1" rowspan="1"><p>MSAL Add-in (M365)</p></th></tr><tr><td colspan="1" rowspan="1"><p>Outlook Windows 2010 or earlier</p></td><td colspan="1" rowspan="1"><p>❌ Not supported</p></td><td colspan="1" rowspan="1"><p>❌ Not supported</p></td></tr><tr><td colspan="1" rowspan="1"><p>Outlook 2013 (SP1)</p></td><td colspan="1" rowspan="1"><p>✅ Supported</p></td><td colspan="1" rowspan="1"><p>❌ Not supported</p></td></tr><tr><td colspan="1" rowspan="1"><p>Outlook 2016</p></td><td colspan="1" rowspan="1"><p>✅ Supported</p></td><td colspan="1" rowspan="1"><p>✅ Supported</p></td></tr><tr><td colspan="1" rowspan="1"><p>Outlook 2019</p></td><td colspan="1" rowspan="1"><p>✅ Supported</p></td><td colspan="1" rowspan="1"><p>✅ Supported</p></td></tr><tr><td colspan="1" rowspan="1"><p>Outlook 2021</p></td><td colspan="1" rowspan="1"><p>✅ Supported</p></td><td colspan="1" rowspan="1"><p>✅ Supported</p></td></tr><tr><td colspan="1" rowspan="1"><p>Outlook Microsoft 365 (Windows)</p></td><td colspan="1" rowspan="1"><p>✅ Supported</p></td><td colspan="1" rowspan="1"><p>✅ Supported</p></td></tr><tr><td colspan="1" rowspan="1"><p>Outlook Web (OWA)</p></td><td colspan="1" rowspan="1"><p>✅ Supported</p></td><td colspan="1" rowspan="1"><p>✅ Supported</p></td></tr><tr><td colspan="1" rowspan="1"><p>Outlook Mac (Office 2016+)</p></td><td colspan="1" rowspan="1"><p>❌ Not supported</p></td><td colspan="1" rowspan="1"><p>✅ Supported</p></td></tr><tr><td colspan="1" rowspan="1"><p>Windows Mail / POP–IMAP clients</p></td><td colspan="1" rowspan="1"><p>❌ Not supported</p></td><td colspan="1" rowspan="1"><p>❌ Not supported</p></td></tr></tbody></table><hr><h2>Technical Requirements</h2><h3>Client requirements</h3><ul class="accent-bullets"><li><p>Outlook with Office Add-ins (Office.js) support</p></li><li><p>Ability to install custom add-ins</p></li><li><p>Outbound HTTPS connectivity to Whalemate backend</p></li></ul><h3>Backend requirements</h3><ul class="accent-bullets"><li><p>Public HTTPS endpoint</p></li><li><p>JSON payload support</p></li><li><p>Secure storage of reported data</p></li></ul><hr><h2>Security Considerations</h2><ul class="accent-bullets"><li><p>The add-in does not execute native code on the client.</p></li><li><p>No local persistence of email data.</p></li><li><p>All communication is performed over HTTPS.</p></li><li><p>No Microsoft credentials or authentication tokens are used.</p></li><li><p>Data access is limited to the user-selected email.</p></li></ul><hr><blockquote><p>‼️This add-in is specifically designed for On-Premise environments, prioritizing simplicity, compatibility, and security within the constraints of the Outlook extensibility model.</p></blockquote><p></p>

🇺🇸 Tech Docs

🇺🇸 Phishing Report Button – Microsoft Outlook On-Premise

🇪🇸 Empleados - Integración con Google Workspace

🇪🇸 Amenazas - Integración de envío de correos: Microsoft

🇪🇸 Simulaciones - Reporte de Usuarios Reincidentes (Beta)

🇪🇸 Concientización - Galería de recursos

🇪🇸 Concientización - Analíticas de Eventos de Newsletter

🇪🇸 Academia - Juegos - Preguntas obligatorias por categoría en Trivia

🇪🇸 Academia - Cursos - Crear un nuevo curso personalizado

🇪🇸 Academia - Cursos -Reordenamiento de secciones de curso

🇪🇸 Academia - Cursos - Eliminación masiva de inscripciones

🇪🇸 Academia - Cursos - Asignación masiva de cursos

🇪🇸 Academia - Cursos - Correos de finalización y expiración de formación

🇪🇸 Academia - Cursos - Filtro y visualización de idioma en asignación de cursos o rutas

🇪🇸 Academia - Analíticas - Registro de auditoría - Cursos y Rutas de Aprendizaje

🇪🇸 Configuración - Whitelisting en Microsoft 365

🇪🇸 Configuración - Whitelisting en Google Workspace

🇪🇸 Configuración - Integraciones -SSO con Okta

🇪🇸 Configuración - Academia -Configuración global del porcentaje de aprobación en quizzes

🇪🇸 Configuración - Academia -Toggle de Notificaciones de Academia

🇪🇸 Configuración - Academia - Configuración de Cuestionarios

🇪🇸 Funcionalidades de la Plataforma

🇧🇷 Funcionários - Integração com Google Workspace

🇧🇷 Simulações - Relatório de Usuários Reincidentes

🇧🇷 Conscientização - Galeria de recursos

🇧🇷 Conscientização - Analíticas de Eventos de Newsletter

🇧🇷 Academia - Jogos - Perguntas obrigatórias por categoria na Trivia

🇧🇷 Academia - Cursos - Criar um novo curso personalizado

🇧🇷 Academia - Cursos -Reordenação de seções do curso

🇧🇷 Academia - Cursos - Exclusão massiva de inscrições

🇧🇷 Academia - Cursos - Atribuição múltipla de cursos

🇧🇷 Academia - Cursos - E-mails de Conclusão e Expiração de Treinamento

🇧🇷 Academia - Cursos - Filtro e exibição de idioma na atribuição de cursos ou trilhas

🇧🇷 Academia - Análise - Registro de auditoria – Cursos e Trilhas de Aprendizagem

🇧🇷 Configurações - Whitelisting no Google Workspace

🇧🇷 Configurações - SSO com Okta

🇧🇷 Configurações - Academia -Configuração de percentual de aprovação

🇧🇷 Configurações - Academia -Toggle de Notificações da Academia

🇧🇷 Configurações - Academia -Configuração global de quizzes

🇧🇷 Funcionalidades da Plataforma

🇺🇸 Teams - Google Workspace Integration

🇺🇸 Simulations - Recurring Users Report

🇺🇸 Awareness - Resource Gallery

🇺🇸 Awareness - Analytics -Newsletter Event Analytics

🇺🇸 Academy - Gaming - Mandatory Questions by Category in Trivia

🇺🇸 Academy - Courses - Course Section Reordering

🇺🇸 Academy - Courses - Create a new custom course

🇺🇸 Academy - Courses - Bulk Enrollment Deletion

🇺🇸 Academy - Courses - Multiple Course Assignment

🇺🇸 Academy - Courses - Training Completion & Expiration Emails

🇺🇸 Academy - Courses - Language filter and label in course or learning path assignment