A method comprises receiving, by a processor, a query comprising at least one name of a target individual. The method further comprises determining, by the processor, a plurality of email addresses. Each of the determined email addresses has a respective prefix based at least in part upon the at least one name of the target individual, and the determination is based at least in part upon statistical data regarding common syntaxes for email addresses. The method further comprises determining email traffic based at least in part upon the determined email addresses. The method further comprises determining, by the processor, one or more relationships of the target individual based at least in part upon the determined email traffic.