Alert user on email from new domain.

Hey guys,
Cybersecurity for a financial institution here.
We are facing many instances where our users are getting emails from lookalike or spoofed domains.
Is there an addin or tool that can detect when an email arrives from a new domain?
Using O365.

Thanks!

alert cybersecurity detect domain domains email emails facing financial hey new domain o365 spoofed thanks tool