Validate the address
Syntax, mail-exchange records and disposable-provider detection tell you whether the address is deliverable and whether it was made to be thrown away.
email module
Reverse email lookup and social account discovery
Give Command One one address and it validates the mail exchange, flags disposable providers, derives candidate handles, then queries official signup and reset endpoints across hundreds of services to find the social media accounts registered to that email — merged into a single case file with the source behind every hit.
public sources only · free registration
how the workup runs
One address in, an account map out
Check registrations
Holehe and socialscan query official endpoints across hundreds of services, while Gravatar and Google artefact checks add avatar and account metadata.
Pivot to handles
The local part of the address becomes ranked handle candidates that feed straight into the username sweep, widening a single address into a footprint.
Correlate and report
Findings merge into unified entities, then export as CSV or a branded PDF with per-source evidence and an audit trail.
engines behind it
Four signal families, one findings schema
Every engine writes into the same normalised schema, so you compare platforms rather than output formats. Agreement between independent tools is what lifts a lead to a corroborated finding.
Native email recon
Format checks, MX resolution, disposable and role-address detection, plus Gravatar presence — instant, no setup, one credit.
Holehe
Registration checks against 120+ services using their own password-reset and signup responses rather than scraping.
socialscan
Fast second-opinion existence checks on official endpoints, useful for filtering false positives out of a busy result set.
GHunt
Resolves Google account artefacts from an address: profile data, review and photo surfaces, and linked service traces.
Hunter.io
Corporate email pattern discovery, so one work address suggests the format used across the rest of the organisation.
Breach index & DeHashed
Optional exposure lookups that tell you where an address has previously appeared, for account-security assessments.
questions
Reverse email lookup FAQ
What is a reverse email lookup?
A reverse email lookup starts from an email address instead of a name and asks which public services, profiles and infrastructure that address is attached to. Command One validates the address, derives likely handles from it, and checks registration signals across hundreds of platforms.
Can you really find social media accounts by email?
Often, yes — many platforms leak registration state through password-reset or signup endpoints. Command One queries those official endpoints through Holehe and socialscan, checks Gravatar, and resolves Google account artefacts with GHunt. Each result records the exact source that produced it.
Do you use breach dumps or data brokers?
Native email recon uses public infrastructure and official platform endpoints only. Optional premium modules such as Intelligence X and DeHashed query breach indexes, and they run only when you explicitly enable them on purchased credits.
How accurate is the result?
Existence checks are strong signals but not proof of identity. Independent modules that agree on the same entity merge and gain confidence; single-source hits stay flagged as leads for manual verification through the Verify Link Pack.
Is it free?
Registration is free and every account receives a daily credit allowance. Email recon is one of the cheapest modules, so a full address workup costs very little of the daily budget.
Work up your first address in minutes
Create a free account, paste an email and watch registrations, avatars and handle pivots stream in. Lawful research and due-diligence use only.