I see that spoofs are more common than I thought.

But is anyone seeing the inconsistency here? I didn't get the spoof until about a couple hours after I sent an email to myself from Yahoo. And I am not exaggerating, for this is an email address that didn't exist anywhere on the web (this was an address set up for me to send files specifically to myself). It is strange that I didn't receive any spam until I sent an email to myself from Yahoo.

It scary to think that people could be getting addresses from within Yahoo. Am I missing something here?