Everything public about one person, one network and one history — one case file where every line names its source 
You are holding one fragment about one person — a username, an email address, a phone number, a real name. You want to know what it connects to.
Command One is one console that works that fragment through the public sources for you, then hands back a single case file: the accounts it is registered on, the servers and domains behind it, and what the target looked like years ago. Every line prints the source that produced it, so anyone you show the file to can check the same line themselves.
The first move is on yourself. Type one of your own usernames, watch every place it is registered come back, then go close the ones you forgot about. Two minutes, nothing installed, no card asked for.
com1.cloud — free account · 50 credits a day · public sources only
What one identifier turns into
username → every site it is registered on 165 probed in-console
email → where it is signed up · disposable? · Gravatar
phone → country · line type · the apps that use it
real name → ranked guesses at the handles behind it
domain → subdomains · DNS · live hosts · TLS
IP address → live hosts · services · the network owner
CIDR range → the same picture across a whole block
ASN → the owner and the address ranges it announces
Three families, one case file
Matching hits from independent modules merge and lift in confidence; a lone hit stays flagged as a lead instead of being quietly dressed up as a fact. Export the whole file as a PDF case report or CSV, or hand someone a revocable read-only link.
What it checks — the eight targets you can type
| You type | What fires | What you hold afterwards |
|---|---|---|
| username | the native sweep across 165 platforms, then the fleet catalogue | every site the handle is registered on |
| mail-record lookup, disposable check, Gravatar, registration checks | the services that address signed up to | |
| phone | number format, country, line type, registration checks | the country, the carrier and the apps using it |
| real name | handle ranking plus public profile artefacts | ranked candidates for the handles behind a name |
| domain | subdomains, DNS records, live hosts, TLS, technologies | the estate standing behind one domain |
| IP address | live hosts, services, network ownership | what answers on an address, and who owns it |
| CIDR range | the same checks across a whole block | the reachable surface of a netblock |
| ASN | owner and announced address ranges | a network’s footprint |
Native checks answer straight away; heavier fleet tools are dispatched to a worker and land in the same case file.
What runs under it — the free tools it is built on
The console is a front end, not a black box. Its worker fleet runs these open-source projects, each under its own licence, and the native sweeps are informed by them:
- github.com/sherlock-project/sherlock — one username across 400+ sites
- github.com/soxoj/maigret — the same hunt across 3000+ sites, with a report
- github.com/snooppr/snoop — username sweep with extra regional coverage
- github.com/p1ngul1n0/blackbird — fast username and email search
- github.com/iojw/socialscan — registration checks against the platforms’ own signup endpoints
- github.com/WebBreacher/WhatsMyName — the community account-discovery dataset
- github.com/megadose/holehe — an email address to the accounts it registered
- github.com/megadose/ignorant — a phone number to the accounts it registered
- github.com/laramies/theHarvester — emails, hosts and names from public sources
- github.com/aboul3la/Sublist3r — subdomain enumeration
- github.com/mxrch/GHunt — public artefacts tied to a Google account
- github.com/smicallef/spiderfoot — the correlation engine behind the merge
Every one of them runs free on your own machine. What the console adds is the wiring — one target, one output format, one case file, with the source kept on each line. Command One does not redistribute their code.
Identity sweep — what comes back
One handle or one address, and the sweep returns the accounts it can tie together:
- Registered accounts — the platform, the profile URL, and the module that found it
- Email signals — where the address is signed up, whether the domain is disposable, and the Gravatar behind it
- Phone signals — country, number format, line type and the services that use it
- Social footprint — public profile detail and posting activity on the accounts the sweep turned up
- Ranked handles — candidate usernames behind a real name, strongest first
Findings from different modules that describe the same entity are merged into one record and scored together. Single-source hits stay visible as leads, never mixed in with the corroborated ones. Every record keeps the raw payload, the module it came from and the time it was collected.
Infrastructure + archived web — the 12 ordered stages
A domain, a host, an address block or an ASN runs as a pipeline where each stage feeds the next, instead of firing blind:
01 username sweep handles across the platforms
02 account & email where an address is registered
03 phone intel carrier · line format · registration signals
04 social footprint public profile detail and activity
05 subdomain discovery passive, across certificate logs and indexes
06 DNS resolution A · AAAA · CNAME · MX · NS · TXT · PTR
07 live hosts status · title · server · TLS · tech · CDN
08 ports & services authorised targets only
09 ASN & network owner and announced prefixes
10 Shodan enrichment previously observed services and versions
11 historical web archived URLs · paths · parameters · assets
12 cross-source identity and infrastructure tied together
Discovered hosts become resolution input, resolved addresses become probe input, and everything lands in one connected model you can pivot around. Stage 11 reads the archived web, so a domain shows what it used to be long before today.
Free vs paid — the real numbers
| Free account | Premium Unlimited | |
|---|---|---|
| Cost |  £0 |
£49.99 per month |
| Daily allowance | 50 credits a day, refreshed daily |
every module, 50 searches a day fair use |
| Modules | the native checks and the standard fleet | every module, including the paid data sources |
| Future modules | added over time | included the day each one ships |
| Exports | PDF case report and CSV |
PDF case report and CSV |
| Card required | none |
monthly subscription, cancel anytime |
A handful of premium data sources bill in gold credits instead of the daily allowance: 50 gold credits for £4.99, and they stay on your account rather than resetting each day.
com1.cloud/premium-unlimited — what the subscription covers
Run it on yourself — the two-minute footprint audit
- Sign in with Google — it creates the account only, using your name, email and picture
- Drop in a username you use
- Read the case file: every site that handle is registered on
- Run it again with your main email address
- Open the accounts you had forgotten about — and close or tidy the ones you no longer want
The same two minutes tell you exactly what a stranger can assemble about you from public sources, which is the part most people never get to see.
The lines that keep it honest
- Public sources only — nothing behind a login, no paid data brokers, no archives sold on the side
- Google sign-in creates your account and nothing else: your name, your email, your picture. The console never reads your mail, your files or your contacts
- Every scan is written to an audit trail on your own account
- Results are leads — check them before you rely on them. Harassment and unlawful profiling end an account
One box, every answer carrying its source — the twenty terminal windows were never the point.
Command One — Major Update
Launch Command One
What’s New?
New Credit System
Free
Credit Top-Up
The Core Workflow
Public Sources & Responsible Use
Current Platform
Feedback
What’s New
Identity & People Investigation
47 Live Investigation Modules
Historical Web Intelligence
Cross-Source Correlation
Interactive Intelligence Map
Watchlists & Monitoring
Notifications
Cases, Evidence & Reports
AI Agent Integration
Current Platform
The Direction
The Core-Community team has rebuilt the topic above — one plain front door: what the console takes, what comes back, and every source named on the line it produced.
!