Free Reverse Email Lookup: 7 Company Details From One Email

A reverse email lookup answers one question: which organisation is behind this domain? Paste someone@example.com and you get the company that runs example.com — name, website, industry, employee range, headquarters, founding year, and its LinkedIn and X profiles.

It does not tell you who "someone" is. That distinction sounds pedantic right up to the moment it matters, because most people arrive at a tool like this wanting to identify a person, and the honest answer is that a business email address doesn't carry that information in any form a lookup can read.

An email address has two halves, and they're worth very different amounts. Everything before the @ is a string a mail administrator typed. It can be a name, an initial, a department, noreply, or nothing meaningful at all, and it can be created and deleted in seconds at no cost. Everything after the @ is a domain: registered, paid for, pointed at a mail server, and maintained by somebody. That asymmetry is the whole basis of the check. The cheap half tells you nothing; the expensive half tells you who's paying.

The sender name your mail client displays is free text chosen by the sender. Anyone can put "Head of Partnerships, Reuters" in that field in about four seconds. It's the first thing you see and the last thing worth trusting.

A domain is different in kind. To send mail from one, somebody had to register it, configure DNS records that point at a mail host, and keep paying for both. That's not a high bar — a domain costs about the price of a sandwich — but it's a bar, and it leaves a public trail: registration records, a website, business filings, professional profiles. The lookup follows that trail.

This is why the result card describes an organisation rather than a human. You're reading the footprint of whoever pays for the domain, and that's a company.

The card returns seven fields beside the company name. Individually they're mildly interesting. The value is in comparing them against whatever the sender told you, because a claim and a record that disagree is a finding, and a claim and a record that agree is mostly just background.

Two habits make this faster. Read the size band first, because it's the claim people inflate most and the one that's hardest to walk back. Then open the LinkedIn link, because that's where you answer the question the lookup itself can't: does the person who emailed you actually work there?

An empty result feels like a red flag and usually isn't one. Four ordinary explanations account for most of them.

The address is on a free-mail domain. Gmail, Outlook, Yahoo and the rest belong to Google, Microsoft and Yahoo, not to the sender, so there's no company to resolve. Worth noticing which way this cuts, though: a person claiming to represent a business while writing from a personal mailbox has told you something, even if the tool hasn't.

The domain is too new. Public records lag reality by weeks to months. A company that started trading this quarter can be entirely legitimate and entirely absent from every source a lookup reads.

The company is too small to have a footprint. A two-person consultancy with a one-page site and no registry presence beyond a filing nobody indexes will return nothing. Small is not suspicious.

The domain belongs to a subsidiary or a trading name. Group structures are messy. The mail domain may sit under a brand that files under a parent's name, and the two don't always connect in public data.

None of those is fraud. The correct reading of an empty result is unverified — you've learned that the easy check didn't work, which means the next step is manual: ask for the company website, look the business up directly, and hold off on anything irreversible until something independent confirms them.

This is the workflow that puts a reverse email lookup in an SEO toolkit rather than a background-check one.

If you publish anything, you get link pitches. Guest post offers, "we noticed a broken link on your resources page", link swaps, paid placement dressed up as collaboration. They arrive from addresses you've never seen, and the fastest way to sort them is to resolve the domain before reading the message properly.

A pitch from a domain with a real company behind it — one with employees, a registered address, an actual industry — is worth thirty more seconds. A pitch from a domain with nothing behind it is a content farm or a private blog network, and the link it's offering is worth nothing or less than nothing. You don't need to reason about the copy. The absence of a company is the answer.

When something does come back, the follow-on checks are the useful part. Run the domain through a free backlink check to see whether anyone credible links to it, and a site audit to see whether the site is a real publication or a thin shell built for outbound links. Two minutes, and you've qualified a prospect properly instead of trusting an email that was written to be trusted.

The same sequence works in reverse, for outbound. Before pitching a site, resolve the address you found and check the company is still operating — plenty of outreach lists point at domains whose owners moved on years ago.

Business email fraud is not a small problem. The FBI's Internet Crime Complaint Center puts global exposed losses from business email compromise at $55.49 billion between October 2013 and December 2023, across domestic and international incidents reported to it, law enforcement and financial institutions. That's the category this tool sits adjacent to, so it's worth being exact about which parts of it a domain lookup can see.

It sees the common case. Someone claims to be from a company, and the domain they wrote from resolves to a different company, or to none. That mismatch is visible in seconds, and it's the shape most low-effort impersonation takes.

It does not see a lookalike domain. If a scammer registers a domain one character away from a real one, the lookup on that domain returns an empty result, because the domain genuinely has no company behind it. Empty, not "warning" — you have to notice the character yourself, by reading the domain next to the real one rather than glancing at it.

It does not see a compromised mailbox. When an attacker sends from a real account at the real company, the domain is the real domain and the lookup returns the real company, correctly. Nothing about the address is wrong. This is the expensive version of the attack and no domain-level check will ever catch it, which is why the standing advice about payment details holds regardless: confirm changes on a channel that isn't email, using a number you already had.

And it does not tell you whether a real company is trustworthy. It reports that an organisation exists and gives you its public facts. Plenty of real companies with real offices send terrible outreach.

Technical spoofing is a separate question with a separate answer. Whether a message genuinely came from the domain it claims is settled by SPF, DKIM and DMARC, and you read that in the raw message headers, not here.

Every field on the card can be assembled by hand, which is worth knowing both for the times you want to verify something and for the times you're offline.

Open the domain in a browser first. Most companies put their legal entity name, registered address and often a company number in the footer or on an imprint page — in some jurisdictions they're legally required to. That single page frequently answers more than the rest of the process combined.

Then confirm the entity in a business registry: Companies House in the UK, the Handelsregister in Germany, the relevant state's Secretary of State in the US. Registries give you incorporation date and registered address, which is where the "founded" and "location" fields ultimately come from.

Search the company on LinkedIn for the headcount and to check whether your sender appears among the employees. This is the step that gets closest to person-level confirmation, and it's the one the tool hands you a shortcut to rather than doing for you.

For the domain itself, a WHOIS query shows registration and expiry dates, though most consumer domains now have registrant details redacted by privacy services, so expect the dates and little else. A recent registration date on a domain claiming a long history is a genuine signal.

That's ten to fifteen minutes per address, longer when sources contradict each other. The tool exists to collapse it to one paste — not because the manual route is unreliable, but because nobody runs a fifteen-minute check on an email they weren't already suspicious about, and the useful checks are the ones you actually run.

A reverse email lookup answers a narrow question well. When the answer points at something bigger:

• Seeing what the company's site is built on → website technology checker
• Judging whether a link from that domain is worth having → free backlink checker
• Checking whether the site itself is any good → free SEO audit
• Everything else in the toolkit → 39 free SEO tools