Replying would of course validate my address as being real, so I have no intention of doing that. I had been reporting them all as spam in the hope of getting the domains blacklisted, but it seems the spammers might be one step ahead here. Maybe one day I will be sufficiently annoyed to trace one of them back, report them for GDPR violations, and see whether that does something.