> And yet somehow, the spammer still managed to get signed up > using a "paypal.com" address. How did they do that? > --
As others have pointed-out, there's probably a simple autoresponder on many [EMAIL PROTECTED] mailboxes. It replied, and that was good enough :-) I think if the list confirm messages had a link to click on to validate the subscription (that leads somewhere other than replying to the message), the anonymous autoresponders wouldn't validate. Plus, it wouldn't lock-out legitimate users at paypal.com (somebody suggested rejecting by domain). -Clark
