Seriously? I’ve only played with the WHOIS . Teach me how? Sounds like fun!
It’s a combination of tools and some deep digging. Whois or variants, Email address source if they returned a conformation.
I’ll PM you... :)