[lessnonymous]

I've done similar, but without any need for Raportive (though I guess my method would have a higher error rate and not work for MEGA corps).

You want to get Bob Smith's email at example.com, but you don't know it? Simply find as many @example.com addresses as you can find then use name dictionaries to guess the address format.

For example, if you find [e-mail], [e-mail], [e-mail] and [e-mail] we can quicky deduce that example.com uses <firstinitial><surname> as their email template. The Jane Doe address doesn't fit with every other address we found so we can ignore it.

Now send an email to [e-mail] and you're most likely talking to Bob Smith.