Well, after doing this for 30+ years, but not actually trying to run any experiments, I have found the opposite. Of the 1670 email aliases that I've created, I

Well, after doing this for 30+ years, but not actually trying to run any experiments, I have found the opposite. Of the 1670 email aliases that I've created, I've received spam at about 5% of them. Sometimes it happens years after any interaction, possibly from a sale of assets after a shutdown. Sometimes it happens immediately (within a day or two of being created). Sometimes it's from a breach that the other party may not be aware of (yet). Sometimes it's from a dictionary email attack. Just last week I was spammed from South America to an email address I only ever provided to my local police station. I have no idea what "hot" email addresses sell for on the dark nets, but it's probably something greater than $0, which means the outsourced third-world CRM workers will scrape and sell them whenever possible.