I have a primary mail (me@mydomain.tld) I use for normal communication and as a fallback in case the catch-all subdomain is rejected (some companies don't like

I have a primary mail (me@mydomain.tld) I use for normal communication and as a fallback in case the catch-all subdomain is rejected (some companies don't like them; or are inconsistent for which form/account they allow it and for which not - I'm looking at you, Deutsche Post/DHL!). The remainder goes to *@subdomain.myotherdomain.tld. I still get a lot of spam on my primary mail, I'm pretty sure it has been leaked by breaches and from friend's address books. My spam folder contains mail for these services: btc-e, bitcoinforum, Heroes of Newerth, hearthpwn, hifi-manuals.com, gcc-bugzilla. Most of these have been breached (for HoN I even recall it was during their early alpha/beta, and they did not acknowledge the breach when I informed them - they implied I must have used it somewhere else and that it got leaked from there). On the GCC bugzilla the address might be visible (at least to logged in users), so that's probably scraping. The hifi-manuals is pretty fresh, but IIRC they have been breached shortly after that. A lot of businesses know both business@catchall and paypal1234@catchall, but I'm happy to say that I have not yet noticed 3rd party spam on these. Same for real life encounters for which I used the catchall (though the look on sales people is often priceless). However, aliexpress is pretty annoying with their own spam, as are some other retailers.