Skill v1.0.0
currentAutomated scan100/100version: "1.0.0" name: blitz-list-builder description: "Use when a list of company domains already exists (competitors, Google Maps export, named accounts) and the job is finding the owner, founder, CEO, or VP at each one via the Blitz API. Best for SMB owner-finding and named-account ABM. Also use when Prospeo's title-first search misses small companies." license: MIT compatibility: Scripts need Node.js with tsx and API keys in .env (see .env.example at the repo root). metadata: author: automatewithuday source: martechs.io version: "1.0" category: list-building
Blitz List Builder
Prospeo is title-first: "all VPs of Marketing in B2B SaaS." Blitz is domain-first: "for each of these 500 restaurant domains, find the owner."
If you already know the target companies (from Google Maps, a CSV of competitors, or a manually-curated list), Blitz finds the people for you.
When to use Blitz vs Prospeo
| Your situation | Use | |
|---|---|---|
| "I have 5,000 domains, find the owners" | Blitz | |
| "Find all CFOs at US SaaS companies 100-500 employees" | Prospeo | |
| "I need to supplement Prospeo results with additional contacts at the same companies" | Blitz | |
| "I want the widest net possible in a vertical" | Prospeo | |
| "I'm targeting specific named accounts (ABM)" | Blitz |
Often: use Prospeo to build the initial list, then Blitz to add 1-2 more contacts per company.
Prerequisites
- Blitz API key (env:
BLITZ_API_KEY) — sign up at their website - List of target company domains (CSV with a
company_domaincolumn, or one domain per line)
Inputs
--domains-file=<path>— CSV or txt with company domains (one per line, or a column namedcompany_domain)--titles=<csv>— comma-separated title keywords to filter (default:owner,founder,ceo,president,cto,vp)--out=<path>— CSV output path
Outputs
CSV with columns: company_domain, first_name, last_name, job_title, linkedin_url, email, email_source, company_name, company_industry, company_headcount, company_phone
Email will be populated when Blitz returns one. Use /email-waterfall skill on the output to fill in missing emails via Prospeo/ZenRows/etc.
Usage
export BLITZ_API_KEY=xxx# Pull owner/founder/CEO contacts for 5000 SMB domainsnpx tsx scripts/find-contacts.ts \--domains-file=restaurants.csv \--titles=owner,founder,ceo,general-manager \--out=restaurant-owners.csv# Domain-first discovery with custom title matchnpx tsx scripts/find-contacts.ts \--domains-file=saas-companies.txt \--titles=vp-marketing,head-of-growth,cmo,director-marketing \--out=saas-marketers.csv
API overview
Blitz has two main endpoints we use:
Company enrichment (find employees):
POST {BLITZ_BASE_URL}/api/enrichment/companyBody: { "domain": "acme.com" }Response: { employees: [{ first_name, last_name, title, linkedin_url, email }], company: { name, industry, headcount, phone } }
Email enrichment (find email for a LinkedIn URL):
POST {BLITZ_BASE_URL}/api/enrichment/emailBody: { "linkedin_profile_url": "https://linkedin.com/in/..." }Response: { email: "...", status: "verified" }
Rate limiting
The script throttles at 30 requests/second with concurrency 10. This matches Blitz's published limits. If you see 429s, lower the concurrency flag.
Hit rate expectations
Rough benchmarks (from real campaigns):
- SMBs (restaurants, clinics, salons): 70-80% contact-found rate, 40-60% email-found
- B2B tech (10-500 employees): 80-90% contact-found, 50-70% email-found
- Enterprise (>1000 employees): 90%+ contact-found, but filtering for the RIGHT person matters more than the found-rate
- Solo operators / micro-businesses: 30-50% — often no public LinkedIn
Title filtering — write specific keywords
Default keywords (owner, founder, ceo, president, cto, vp) are broad. Narrow them per campaign:
# Restaurants--titles=owner,operator,general-manager# SaaS RevOps--titles=revops,revenue-operations,vp-sales,director-sales# Dental practices--titles=dentist,owner,practice-manager# Law firms--titles=partner,managing-partner,principal
The script does case-insensitive substring match. "vp" matches "VP Sales" but also "VP Product" — narrow further if that's too loose.
Common gotchas
- Domain must be just the bare domain. Blitz wants
acme.com, nothttps://acme.com/orsub.acme.com. - Huge companies return truncated employee lists. Blitz caps at ~50-100 employees per domain. For enterprise-heavy lists, use Prospeo or LinkedIn search instead.
- Stale LinkedIn data. Blitz's cache can be 3-12 months old. Job titles may have changed. Validate with the email waterfall.
- No email returned ≠ person unreachable. 40% of hits have no email. Feed them to
/email-waterfall— it'll try Prospeo + ZenRows. - Rate-limit errors. 429 = you hit the cap. Script retries with exponential backoff, but long bursts still fail.
Required step: Qualify with /icp-prompt-builder
This is a required step. Do not skip it.
Before pulling more than 500 companies' worth of contacts, sample ~50 and run `/icp-prompt-builder` on them:
- Evaluates the first 10 with an AI qualification prompt
- You give corrections ("this one should be NO because they're a competitor")
- Refines the prompt, runs next 10
- Stops after 2 rounds with zero corrections — prompt is tuned
- Apply the tuned prompt to the remaining leads to filter before paying for email enrichment
Why it's required: Blitz contact-finding is cheap, but email enrichment downstream is not. A typical 5,000-contact run costs $150+ in email-finding API calls. If 40% of your list is wrong-fit, you burn ~$60 finding emails at companies that will never convert. The ICP prompt builder takes 10-15 min and saves that.
How to skip safely: you can't. If you're sure your list is already perfectly qualified (e.g., it came from a curated seed list of named accounts you want to pitch), run `/icp-prompt-builder` anyway on 10 of them and confirm your existing qualification matches — the prompt builder becomes a sanity check instead of a filter.
Cost
Per Blitz pricing (check their current rates):
- Company enrichment: ~$0.02-0.05 per domain
- Email enrichment: ~$0.05-0.10 per email
5,000 domains = ~$150 for contacts alone. Plan your budget.
Output → next step
Once you have the CSV, the typical flow:
- Deduplicate — remove duplicate emails, duplicate LinkedIn URLs
- Filter — drop rows where
job_titledoesn't cleanly match your ICP - Fill missing emails — run
/email-waterfallon rows with emptyemail - Validate — run MillionVerifier on all emails (see
/email-waterfallscript) - Upload — pass to Smartlead via `/cold-email-starter-kit` script
smartlead-add-leads.ts
Scripts
scripts/find-contacts.ts— main batch enrichment script
What to do next
Run `/email-waterfall` to fill in emails for rows Blitz didn't return. Then `/list-quality-scorecard` to grade the final list.
After the scorecard, proceed to `/campaign-copywriting` → `/smartlead-campaign-upload-public`.
Or wait: if the required `/icp-prompt-builder` step (above) showed <40% qualification rate, your source list of domains is off. Fix that before spending more Blitz credits.
Related skills
- `/icp-prompt-builder` — qualify the contacts this skill returns BEFORE running email waterfall
- `/prospeo-full-export` — the title-first alternative
- `/google-maps-list-builder` — for local-business domain lists
- `/disco-like` — lookalike companies from seed domains
/email-waterfall— when Blitz doesn't return an email- `/cold-email-starter-kit` →
06-list-building-prospeo.mdfor broader list-building context