I’m not at all careful to keep my email address hidden on the internet either.
It never occurred to me that it might be due to being on a custom domain. I figured either I was just lucky, or that there’s less spam these days.
Tip: configure a catch-all to your email address, and use custom email addresses for every website. I love having e.g. news.ycombinator.com@gilani.me and being able to filter out bad email addresses whenever they become tiresome.
I've also configured Mailgun on the domain (not what it was intended for but ¯\_(ツ)_/¯ ) so whenever I need to send an outgoing email from one of my custom addresses, I use their SMTP credentials.
At this point, I've been me@ amin@ heyamin@ and even notamin@gilani.me.
My GMail spam folder has around 10-15 messages in it per day. My inbox is nearly always fine. The nice thing that GMail does is sort promotional emails that it doesn't judge to be outright spam under the "Promotions" category, which I don't see unless I seek it out. That one still isn't that bad, on the order for 10 per day, but it is genuinely stuff I don't care to see.
If I were to move away from GMail (which is on my todo list), I'd have to figure out what to do about those. Likely they mostly have unsubscribe links; after a quick scroll down the list, I think it's nearly all from companies that I do have or had an existing relationship with.
I wish GMail had an "unsubscribe" button so I don't have to hunt through emails for their often-hidden unsubscribe link. Yes, I could click Spam and then "Unsubscribe + Mark Spam", but I really want just "Unsubscribe", but that's not an option.
I do have a fairly uncommon last name, so it's not something that spammers might accidentally put in a word list to use as an email domain, but overall I've just mostly not cared about "protecting" my email address, and it's mostly not been a problem. Is this entirely atypical? If so, I wonder why...
At one point I decided to actually hit the unsubscribe links rather than just archiving these emails. Turns out I was subscribed to nearly 200 different mailing lists. But there were only 1 or 2 that wouldn't let me unsubscribe.
I keep dedicated email addresses for most purposes, and the two that are getting any are a random mailing list, and the kickstarter address. That one has been caught in a vortex of spam, clearly meaning that kickstarter can't keep their mouths shut about customer emails.
Most of it goes to:
* admin@<mydomain>.com - listed in whois publicly for a few years, understandable
* <dropbox's address>@<mydomain.com> - started coming in 2014, the fact they were breached only became properly known in 2016.
* <my first name>@<mydomain.com> - This is the actual email address I give to in person contacts. Not quite sure how it ended up on spam lists, my best guesses are from a recruiter sharing it, git commits (though the fact the address I use way more commonly for git isn't there indicates probably not) or someone just figured it out.
I gave up on Gmail for all the same reasons as the stories in this thread.