| Welcome to public-facing application security :) Any number of reasons, potentially more than one at once: 1. Being a dick / bored / ... 2. Pen-testing you for some reason. 3. Trying to inflate your signup numbers for some reason. 4. Trying to see how many users you have (see other comment) 5. Testing their own fake email system for something 6. Trying to increase your costs 7. Demonstrating something for someone else not realizing it's production 8. Pure, unadulterated incompetence 9. Something else malicious |
Assuming there is one, of course, but my experience with current newsletters is that there is a popup. Sometimes a "delayed action" one.