I've been doing this for years. It's fascinating (and sometimes horrifying) which addresses end up on spam/scam lists. I used to inform companies when it happened, but they almost always go for plausible deniability with "spammers try random addresses at a domain sometimes, it must have been that".