To get someone's email from a LinkedIn profile, read the profile for their name and current company, then find the work email from those two. That is how to get someone's email from a LinkedIn profile without guessing, and it is always two steps: a profile link says who a person is, not where their work mail goes. The planner above opens on that route, with what each step needs and what it costs.
Why it takes two steps
A work email belongs to the employer. A lookup keyed on the link alone answers from whatever employer its copy of the profile holds, and for anyone who changed jobs since, that is the old company's address. Nothing about it looks wrong.
Reading the profile first means the company searched is the one the profile shows today. An address that still comes back at another company is kept but marked low confidence, so you can check it before you send.
Guessing first.last@ skips both steps. The part before the @ means whatever the company's mail server says it means: the SMTP standard leaves the local part to the receiving host.
How to read the route
The route shows both steps in the order they run, what each needs and the price of the two together. The second step runs only on people the first one answered, and a lookup that finds nothing costs nothing.
If your list already has names and current employers, start from those and the route drops to one step. A personal email or a phone number is one step from the link, because both follow the person, not the employer.
What to do next
For a list, import it into a Oneprofile table and add the two steps: the profile read on the LinkedIn link, then the work email lookup on the name and company it returns. Check each address for deliverability and send only to the valid ones. The bulk email finder guide covers each verdict, catch-alls included, and our step-by-step LinkedIn email guide walks through a worked example.