Do you know how the site is obtaining the e-mail addresses? If they are puling them from a spam list, the site may technically be illegal.
I do not know of a way to obtain a list of e-mail addresses assigned to a domain name through PHP or some other legitimate method. Is there something that I am missing?
Given the wording that you highlighted in the CAN-SPAM act, your friend is wrong about the legality of harvesting e-mail addresses. E-mails are not a matter of public record. I
don't know of anywhere where I can obtain a list of all e-mail addresses. Content and images on a web site are also public, but are protected by copyright laws.
I always thought that the CAN-SPAM act was focused on the transmission of unauthorized e-mails and not the collection of addresses.
There must be a legal forum where you can post the question. This looks like a gray area.
"Democracy is two wolves and a lamb voting on what to have for lunch. Liberty is a well-armed lamb contesting the vote." -- Benjamin Franklin