A custom domain with wildcard for catch all is how I have been creating logins for the past 17 years. It is fascinating to see which addresses suddenly start getting spam down the road.
It is also very easy to nuke an address this way once it is a spam trap.
It is also very easy to nuke an address this way once it is a spam trap.