Find someones email - how?

Check the footer and the privacy policy before you start guessing patterns - plenty of small companies list a real address there. And once you've built a guess, don't spray variations at it. One wrong address is fine, twenty bounces and your own domain starts looking like a spammer.

Try the boring places first - the contact or team page, their LinkedIn, anything they've written where a byline carries an address. Failing that, work out the company's pattern from any address you can find (firstname, firstname.lastname, initial plus surname - it's almost always one of three) and run your guess through a verifier before you send anything. Blind sending to a guessed address is how you end up in a spam trap.