Guide
Six methods that actually work, ranked by how long they take — and how to stop doing the slow ones by hand.
You have a company name, or a website, and you need a way to reach someone there. Sometimes the address is sitting in plain sight. More often it is one click deeper than you expect, written in a way that defeats a search, or simply not published at all.
Below are the six methods worth knowing, roughly in the order you should try them. The first four are things you do by hand and they are free. The last two are tools, and they solve genuinely different problems — it is worth knowing which one you actually need before you pay for anything.
Obvious, and still the highest-yield method. The catch is that the address is rarely on the homepage. Companies put contact details on a dedicated page, and they call that page different things depending on where they are:
Two things slow this down. First, the footer link is often just an icon, so you scan the page for a while before finding it. Second, plenty of sites write addresses as "name (at) company (dot) com" or render them inside an image, specifically so that they cannot be copied easily.
Here is what a typical contact page looks like. Three addresses, and they are not equally useful — which is the point of the next section.
Northwind Studio
Brand and packaging design · Manchester
Registered in England. Studio hours Mon–Thu.
Click the Mail Extractor icon in your toolbar
It has already read this page — the badge on the icon shows how many addresses it found. Open it and you will see each one labelled. Don't have it yet? Add it to Chrome — it's free.
These addresses use .example, a domain suffix reserved by RFC 2606 for documentation. It can never be registered, so nothing here can reach a real person. That also means Mail Extractor will label them Unknown TLD — its way of saying "I don't recognise this suffix, but I kept it rather than dropping it quietly." That is the same behaviour that stops it from discarding real addresses on newer domains like .dev or .app.
Not every address on a page is worth having. Three kinds turn up, and they behave very differently:
If you are building a list of any size, sorting addresses into these three groups as you collect them saves far more time than cleaning a spreadsheet afterwards.
Rather than browsing the site, ask Google to look inside it. These work in any search engine that supports the site: operator:
site:company.com contact
site:company.com "@company.com"
site:company.com impressum
"company name" + "email" -jobs -careers
The second one is the useful trick: searching for the domain in quotes surfaces pages where an address is written out in full, including press releases and PDFs that are not linked from the navigation. Excluding jobs and careers keeps recruitment inboxes out of the results.
Most organisations use one consistent format. If you have found a single address at a company, you can usually infer the rest. The common patterns, roughly in order of how often they appear:
{firstname}.{lastname}@company.com
{firstinitial}{lastname}@company.com
{firstname}@company.com
{firstname}{lastinitial}@company.com
Treat this as a hypothesis, not an answer. A guessed address that bounces costs you more than the address was worth: bounce rates above a couple of percent are read as a spam signal by the big mailbox providers, and that damage applies to every message you send afterwards, not just the bad ones. If you guess, verify before you send.
Industry directories, trade association member lists, trade show exhibitor catalogues and local business listings are the densest sources of company websites there are. What they rarely give you is the address itself — they give you the link to the company's site, and you are back at method 1, once per row.
This is where the afternoon goes. A list of two hundred exhibitors is two hundred sites to open, two hundred contact pages to find, two hundred addresses to copy. The method is sound; the repetition is the problem. If that is the situation you are in, the companion guide — how to scrape a website for emails — is about exactly this, including a sample directory you can run a real batch against.
Search for help with this and you will find two categories of product described in almost the same words. They do different things, and picking the wrong one is the most common way people waste money here.
Database lookup tools ask for a person's name and a company domain, then return an address from a large index, usually with a deliverability check. They are the right answer when you know who you want to reach and need their address. They are the wrong answer when you have a list of companies and no names, because there is nothing to look up.
Page readers work the other way round. They read the page you are on and take whatever is published there. They cannot invent an address that was never published — but they never guess, either, so everything they hand you is something a human chose to put on the open web.
Mail Extractor is the second kind. It reads the page you are looking at, sorts the addresses into the three groups from section 2, and — the part that matters for method 5 — when a company's homepage has no address on it, it opens that company's contact or imprint page and reads that instead. That is the repetitive part of the afternoon, done for you.
Picture this company's homepage: no address on it anywhere. By hand, that is a dead end until you spot the Impressum link in the footer and click through. This page is what is behind that link — and following it is what the extension does for you, per site, without being asked.
Nordwind Logistik GmbH — Impressum
Freight forwarding · Hamburg
Handelsregister HRB 00000 · Amtsgericht Hamburg
Click the Mail Extractor icon in your toolbar
It has already read this page — the badge on the icon shows how many addresses it found. Open it and you will see each one labelled. Don't have it yet? Add it to Chrome — it's free.
As above, these are .example addresses — reserved for documentation, so nothing here reaches a real person, and Mail Extractor tags them Unknown TLD rather than dropping them.
| What you have | Best method |
|---|---|
| One company, and you need anyone there | 1 — their contact or imprint page |
| One company, and you need a named person | 6 — a database lookup tool, or 4 plus verification |
| The site is there but the address is hidden or obfuscated | 3 — search operators |
| A directory, map listing or exhibitor list — dozens or hundreds of companies | 6 — a page reader that follows contact pages |
Collecting an address that a company has published on its own website is generally lawful. What you do with it afterwards is a separate question, and it is the one that gets people into trouble.
In the EEA and the UK, a work address that identifies a person is personal data under the GDPR, and you need a lawful basis to use it — legitimate interest can apply to business-to-business outreach, but it has to be a real interest, documented, and you must honour objections. In the United States, the CAN-SPAM Act requires accurate headers, a physical postal address and a working opt-out in every commercial message. Several other jurisdictions, Canada's CASL among them, are stricter still and ask for consent up front.
None of this makes prospecting impossible. It does mean that "I found the address" and "I may email it" are two different statements, and only the first one is settled by the methods above.
Mail Extractor reads the page you are on, labels every address it finds, and follows the contact page when a homepage has none. Free tier, no account, no card.