Re:800M Email Addresses Leaked Online by Email Verification ...
by _red on Friday March 08, 2019 @12:25AM
(#19335329)
Thats a good solution. For 15 years or so I just used the [email protected] approach. But in the last 4 or 5 years, the spammers have gotten smarter and now are stripping off the site and just emailing [email protected].
Yours is a good solution.
I use a subdomain. *@abc.example.com goes to my CatchAll folder. [email protected] go to their respective users. There are no equivalent names between @abc.example.com and @example.com so if anyone gets cute[0] and tries stripping out subdomains, the messages are rejected. Also, subdomains are common enough that no one thinks anything of it.
As a nice bonus, the subdomain can also be directed elsewhere. I've aimed it at various "we automatically file your e-mail" type scripts and services before, just to try them out.
0 - Spammers absolutely try to get cute and drop the subdomain. For example, in the Dropbox leak, [email protected] and [email protected] of mine were leaked. I see tons of spam attempts to [email protected] and [email protected] daily.