And if you can get access to their domain that'd be even smarter ;)

Might be hard to pull this off without a person@company.io email