When it comes to scraped data it's usually even simpler: the scrapers got the email address from the website which lists their email address as the tech/marketing/sales/hr contact for their company, which is out there because sometimes people need to approach them with things which are legitimately relevant and of interest

Always mildly amusing when you get a pitch which refers to your website by someone that obviously hasn't visited it though...