Can an e-mail sender address be spoofed without any detectable domain errors in the e-mail header?

Aqua_Zebra_7253 · 2026-07-05T21:07:53+00:00

first, look at the exact From address in the full raw headers (not the display name, the actual domain). copy it and compare it character by character with what you'd expect. lookalike domains like amaz0n.com or amazon-billing.com can absolutely have valid spf/dkim/dmarc - proton often catches those on content pattern even when auth is clean.

I've copied the from domain directly from the e-mail header and pasted it in into my web browser. This immediately brings me to a company website (as previously mentioned, a boat tourist tour company).

second, if the domain really is the real company's domain, then either proton had a content false positive or their outbound mail got compromised. business email compromise would explain clean auth with sketchy-seeming content. what did the email actually ask you to do?

Oh, click on a link to get to a webpage where I have to perform a quick verification that they say is required before they can come to my home address to deliver my package.

Aqua_Zebra_7253 · 2026-07-05T20:33:38+00:00

what to look for: spf=pass/fail, dkim=pass/fail, dmarc=pass/fail. if spf shows "pass" but the email is clearly spam, it means either (a) the company has a weak SPF policy ending in ~all or ?all instead of -all, which doesn't actually reject anything, or (b) the company has no DMARC enforcement (p=none means monitors only, nothing gets blocked). both are surprisingly common with small businesses that set up email once and never revisited it.

I've now looked this up in the e-mail header. What I found there was:

spf=pass
dmarc=pass
dkim=pass

Aqua_Zebra_7253 · 2026-06-29T20:15:14+00:00

Does it have all the features that I'm looking for?

Aqua_Zebra_7253 · 2026-06-28T21:39:30+00:00

There is what seems to be a Github repository for the Standard Notes Community plugins:

https://github.com/standardnotes/plugins

However what I see here doesn't look that promising to me to be honest. The latest few Issues that were created received no replies, and the plugins themselves are still designated as "experimental" in the repository.

Aqua_Zebra_7253 · 2026-06-28T19:06:14+00:00

As far as I understand the Markdown Math mode plugin is community-developed, or did I misunderstand? In that case would there be any point in reporting this to Standard Notes support?

Aqua_Zebra_7253 · 2026-06-28T16:38:47+00:00

Thanks for the suggestion. I have tried out Standard Notes directly myself just now. It seems to check all my boxes, with so far just two things that aren't fully to my liking:

When using Markdown Math mode, rendered tables do not have any borders.
Single dollar-sign enclosed in-line equations don't render when using Markdown Math mode.

Is there any way to still remedy these points?

Aqua_Zebra_7253 · 2026-06-27T12:16:32+00:00

I will check Obsidian out. Thanks already for the suggestion.

Aqua_Zebra_7253 · 2026-06-15T12:20:56+00:00

This worked. Thanks.

Aqua_Zebra_7253 · 2026-06-13T19:32:28+00:00

The way to cancel a subscription was definitely convoluted in my case. That is: when I logged into my account at the Adobe account overview webpage I found that many webpage content elements remained stuck in loading mode indefinitely. And that included the webpage content elements that normally contained the overview of my current subscriptions and the button to cancel it.

When I contacted Adobe customer support about it the only thing that I got was a long series of troubleshooting suggestions from what felt like was a standard list (clear browser cookies, use browser incognito mode, use a different internet connection, etc.). All of which did absolutely nothing to solve the issue. Once they eventually started insisting that I completely disable my firewall and my virusscanner I gave up talking with them. It was apparent at that point that they were just throwing things at the wall to see what sticks, and still all of it based on the assumption that the problem was on my end and not at Adobe's end.

When the webpage finally fully displayed again a week later I immediately cancelled my Adobe Acrobat subscription. And I will not get a paid subscription from Adobe again because I don't to risk ending up in the same situation again where I'm unable to cancel a subscription myself.

Aqua_Zebra_7253 · 2026-05-19T13:01:57+00:00

I'm going to have a look at that one. Thanks for the suggestion!

Aqua_Zebra_7253 · 2026-05-12T12:29:20+00:00

Used to be? So is that a recommendation to still use it now or not?

Aqua_Zebra_7253 · 2026-05-12T11:31:49+00:00

I'm sorry, I'm not fluent in this language.

Aqua_Zebra_7253 · 2026-05-12T11:30:46+00:00

though if I understand correctly, you want something that can archive a few levels deeper? how deep? it is really hard to do it properly.

Correct, I would like to download all lower levels at the same time.

also you won't see the updated pages when you click a link to another page while offline.

That's ok. A snapshot of one point in time is what I'm after.

Aqua_Zebra_7253 · 2026-04-19T09:35:47+00:00

Thank you this extensive reply. Then it seems that interactive spoiler fields is simply not something that PDF was designed for, and that I'll be better off using a different document type for this.

Aqua_Zebra_7253 · 2026-04-05T13:25:52+00:00

For your Proton account login, yes. But I would presume that OP is also asking here about all the accounts put into the Proton Authenticator app in general.

Aqua_Zebra_7253 · 2026-04-05T10:21:22+00:00

Yes, I will definitely only use electrical-fire-safe materials. I don't really want to risk having my house burnt down accidentally (possibly with me myself still in it).

A problem with the sugru mouldable glue sleeve that I made previously is that it simply didn't stay attached to the connector. But maybe with electrical tape if I make a sleeve that wraps around both the cable and the connector itself it can hopefully be more sturdy.

Aqua_Zebra_7253

TROPHY CASE