A signup form 'validated' his email by mailing him spam about magnets (milek7.pl)
An engineer testing Pangram's signup found that the act of entering his email address triggered an unsolicited message from a churn of throwaway domains, its payload a base64 HTML blob of physics filler buried off-screen.
Then the company's founder turned up in the thread: 'I had no idea this was happening' — he traced it to a third-party validation vendor in his own stack.
Sign in to save