Today I experienced the dangers of a catch-all address (eg. *@sermoncloud.com). I received 6,000+ email spam messages that were over 150 MB worth of downloading (they had attachments) in a short period to a Sermon Cloud address. I deleted the catch-all account so emails now must be real. Just a warning for those who own domains.