Today I experienced the dangers of a catch-all address (eg. *@sermoncloud.com).  I received 6,000+ email spam messages that were over 150 MB worth of downloading (they had attachments) in a short period to a Sermon Cloud address.  I deleted the catch-all account so emails now must be real.  Just a warning for those who own domains.