Did you enter that same email as your domain contact info? Because in that case, it is in the WHOIS databases in plain text, and yes, it is trivial for any spam

Did you enter that same email as your domain contact info? Because in that case, it is in the WHOIS databases in plain text, and yes, it is trivial for any spambot to harvest. The same holds for any registrar though. The only way to avoid having your email out there in the open is to sign up for a private WHOIS service (which GoDaddy offers, as do many other registrars).