Sounds like a security flaw. I’d submit it to a big bounty program.
The dots don't matter.
jennifer@gmail.com marksmith@gmail.com neilpatel@gmail.com
etc. etc. etc.
Win / win either way for OP. Learning opportunity or a bit of cash in hand for relatively little investment.