# πŸ›°οΈ One username, email or phone β€” everything public about it, one report, every line sourced **URL:** \ **Category:** Tools & Scripts\ **Tags:** hacking, privacy\ **Created:** [Agosto 4, 2026, 11:20am UTC](https://onehack.st/t/one-username-email-or-phone-everything-public-about-it-one-report-every-line-sourced/324410 "2026-08-04T11:20:25Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![Razza](https://onehack.st/user_avatar/onehack.st/razza/32/176458_2.png) [@Razza](https://onehack.st/u/Razza)\ **Post date:** [Agosto 4, 2026, 11:20am UTC](https://onehack.st/t/one-username-email-or-phone-everything-public-about-it-one-report-every-line-sourced/324410/1 "2026-08-04T11:20:25Z")
### Everything public about one person, one network and one history β€” one case file where every line names its source 🧭 You are holding one fragment about one person β€” a username, an email address, a phone number, a real name. You want to know what it connects to. **Command One** is one console that works that fragment through the public sources for you, then hands back a single case file: the accounts it is registered on, the servers and domains behind it, and what the target looked like years ago. Every line prints the source that produced it, so anyone you show the file to can check the same line themselves. ⭐ **The first move is on yourself.** Type one of your own usernames, watch every place it is registered come back, then go close the ones you forgot about. Two minutes, nothing installed, no card asked for. πŸ”— **[com1.cloud](https://www.com1.cloud)** β€” free account Β· 50 credits a day Β· public sources only **What one identifier turns into** ```auto username β†’ every site it is registered on 165 probed in-console email β†’ where it is signed up Β· disposable? Β· Gravatar phone β†’ country Β· line type Β· the apps that use it real name β†’ ranked guesses at the handles behind it domain β†’ subdomains Β· DNS Β· live hosts Β· TLS IP address β†’ live hosts Β· services Β· the network owner CIDR range β†’ the same picture across a whole block ASN β†’ the owner and the address ranges it announces ``` **Three families, one case file** digraph Case { rankdir=LR; bgcolor="#fbfcfc"; node [shape=box, style="rounded,filled", fillcolor="#eef2f5", color="#1f3a52", fontcolor="#1f3a52", fontname="Helvetica"]; edge [color="#6f8f7a", penwidth=1.4]; ident [label="one identifier\nusername Β· email Β· phone\nname Β· domain Β· IP Β· ASN", fillcolor="#1f3a52", fontcolor="#ffffff"]; idm [label="identity sweep\n165 platforms in-console\n+ 3,000+ via the fleet"]; infra [label="infrastructure\n12 ordered stages\nsubdomains β†’ DNS β†’ live hosts β†’ ASN"]; hist [label="archived web\nwhat the target\nlooked like before"]; casef [label="one case file\nevery line names\nits source", fillcolor="#6f8f7a", fontcolor="#ffffff"]; ident -\> idm; ident -\> infra; ident -\> hist; idm -\> casef; infra -\> casef; hist -\> casef; } Matching hits from independent modules merge and lift in confidence; a lone hit stays flagged as a lead instead of being quietly dressed up as a fact. Export the whole file as a PDF case report or CSV, or hand someone a revocable read-only link. > **What it checks β€” the eight targets you can type** > > | You type | What fires | What you hold afterwards | > | --- | --- | --- | > | username | the native sweep across 165 platforms, then the fleet catalogue | every site the handle is registered on | > | email | mail-record lookup, disposable check, Gravatar, registration checks | the services that address signed up to | > | phone | number format, country, line type, registration checks | the country, the carrier and the apps using it | > | real name | handle ranking plus public profile artefacts | ranked candidates for the handles behind a name | > | domain | subdomains, DNS records, live hosts, TLS, technologies | the estate standing behind one domain | > | IP address | live hosts, services, network ownership | what answers on an address, and who owns it | > | CIDR range | the same checks across a whole block | the reachable surface of a netblock | > | ASN | owner and announced address ranges | a network’s footprint | > > Native checks answer straight away; heavier fleet tools are dispatched to a worker and land in the same case file. > **What runs under it β€” the free tools it is built on** > > The console is a front end, not a black box. Its worker fleet runs these open-source projects, each under its own licence, and the native sweeps are informed by them: > > - **sherlock** β€” [github.com/sherlock](https://github.com/sherlock-project/sherlock) Β· one username across 400+ sites > - **maigret** β€” [github.com/maigret](https://github.com/soxoj/maigret) Β· the same hunt across 3000+ sites, with a report > - **snoop** β€” [github.com/snoop](https://github.com/snooppr/snoop) Β· username sweep with extra regional coverage > - **blackbird** β€” [github.com/blackbird](https://github.com/p1ngul1n0/blackbird) Β· fast username and email search > - **socialscan** β€” [github.com/socialscan](https://github.com/iojw/socialscan) Β· registration checks against the platforms’ own signup endpoints > - **WhatsMyName** β€” [github.com/WhatsMyName](https://github.com/WebBreacher/WhatsMyName) Β· the community account-discovery dataset > - **holehe** β€” [github.com/holehe](https://github.com/megadose/holehe) Β· an email address to the accounts it registered > - **ignorant** β€” [github.com/ignorant](https://github.com/megadose/ignorant) Β· a phone number to the accounts it registered > - **theHarvester** β€” [github.com/theHarvester](https://github.com/laramies/theHarvester) Β· emails, hosts and names from public sources > - **Sublist3r** β€” [github.com/Sublist3r](https://github.com/aboul3la/Sublist3r) Β· subdomain enumeration > - **GHunt** β€” [github.com/GHunt](https://github.com/mxrch/GHunt) Β· public artefacts tied to a Google account > - **spiderfoot** β€” [github.com/spiderfoot](https://github.com/smicallef/spiderfoot) Β· the correlation engine behind the merge > > Every one of them runs free on your own machine. What the console adds is the wiring β€” one target, one output format, one case file, with the source kept on each line. Command One does not redistribute their code. > **Identity sweep β€” what comes back** > > One handle or one address, and the sweep returns the accounts it can tie together: > > - **Registered accounts** β€” the platform, the profile URL, and the module that found it > - **Email signals** β€” where the address is signed up, whether the domain is disposable, and the Gravatar behind it > - **Phone signals** β€” country, number format, line type and the services that use it > - **Social footprint** β€” public profile detail and posting activity on the accounts the sweep turned up > - **Ranked handles** β€” candidate usernames behind a real name, strongest first > > Findings from different modules that describe the same entity are merged into one record and scored together. Single-source hits stay visible as leads, never mixed in with the corroborated ones. Every record keeps the raw payload, the module it came from and the time it was collected. > **Infrastructure + archived web β€” the 12 ordered stages** > > A domain, a host, an address block or an ASN runs as a pipeline where each stage feeds the next, instead of firing blind: > > ```auto > 01 username sweep handles across the platforms > 02 account & email where an address is registered > 03 phone intel carrier Β· line format Β· registration signals > 04 social footprint public profile detail and activity > 05 subdomain discovery passive, across certificate logs and indexes > 06 DNS resolution A Β· AAAA Β· CNAME Β· MX Β· NS Β· TXT Β· PTR > 07 live hosts status Β· title Β· server Β· TLS Β· tech Β· CDN > 08 ports & services authorised targets only > 09 ASN & network owner and announced prefixes > 10 Shodan enrichment previously observed services and versions > 11 historical web archived URLs Β· paths Β· parameters Β· assets > 12 cross-source identity and infrastructure tied together > > ``` > > Discovered hosts become resolution input, resolved addresses become probe input, and everything lands in one connected model you can pivot around. Stage 11 reads the archived web, so a domain shows what it used to be long before today. > **Free vs paid β€” the real numbers** > > | | Free account | Premium Unlimited | > | --- | --- | --- | > | Cost | βœ… Β£0 | Β£49.99 per month | > | Daily allowance | βœ… 50 credits a day, refreshed daily | every module, 50 searches a day fair use | > | Modules | the native checks and the standard fleet | every module, including the paid data sources | > | Future modules | added over time | βœ… included the day each one ships | > | Exports | βœ… PDF case report and CSV | βœ… PDF case report and CSV | > | Card required | βœ… none | monthly subscription, cancel anytime | > > A handful of premium data sources bill in gold credits instead of the daily allowance: **50 gold credits for Β£4.99** , and they stay on your account rather than resetting each day. > > πŸ”— **[com1.cloud/premium-unlimited](https://www.com1.cloud/premium-unlimited)** β€” what the subscription covers > **Run it on yourself β€” the two-minute footprint audit** > > 1. Sign in with Google β€” it creates the account only, using your name, email and picture > 2. Drop in a username you use > 3. Read the case file: every site that handle is registered on > 4. Run it again with your main email address > 5. Open the accounts you had forgotten about β€” and close or tidy the ones you no longer want > > The same two minutes tell you exactly what a stranger can assemble about you from public sources, which is the part most people never get to see. **The lines that keep it honest** - **Public sources only** β€” nothing behind a login, no paid data brokers, no archives sold on the side - Google sign-in creates your account and nothing else: your name, your email, your picture. The console never reads your mail, your files or your contacts - Every scan is written to an audit trail on your own account - Results are leads β€” check them before you rely on them. Harassment and unlawful profiling end an account One box, every answer carrying its source β€” the twenty terminal windows were never the point. ---
**Author:** ![Nat72883](https://onehack.st/user_avatar/onehack.st/nat72883/32/160283_2.png) [@Nat72883](https://onehack.st/u/Nat72883)\ **Post date:** [Agosto 16, 2026, 2:43pm UTC](https://onehack.st/t/one-username-email-or-phone-everything-public-about-it-one-report-every-line-sourced/324410/2 "2026-08-16T14:43:00Z")
Excellent tool set thank you ---
**Author:** ![Razza](https://onehack.st/user_avatar/onehack.st/razza/32/176458_2.png) [@Razza](https://onehack.st/u/Razza)\ **Post date:** [Agosto 16, 2026, 6:27pm UTC](https://onehack.st/t/one-username-email-or-phone-everything-public-about-it-one-report-every-line-sourced/324410/3 "2026-08-16T18:27:26Z")
# πŸš€ Command One β€” Major Update ### 26 OSINT Modules β€’ 3,000+ Platforms β€’ Intel Maps β€’ Watchlists Command One has grown considerably since the original release. What started as a unified people-search console has now expanded into a full OSINT investigation workspace β€” combining native modules, open-source tools, API feeds, correlation, visual intelligence, case sharing and scheduled monitoring. **[🌐 Launch Command One](https://www.com1.cloud)** `FREE DAILY ALLOWANCE` `26 MODULES` `3,000+ PLATFORMS` `PUBLIC SOURCES` * * * ## πŸ›° What’s New? > **πŸ†• 26 Investigation Modules** > > Command One now has **26 live modules** across three execution types: > > **Native β€” instant** > > - Username Sweep > - Email Recon > - Phone Recon > - Name Expander > - Domain Recon > - Verify Link Pack > - DeHashed > - Intelligence X > - Phone Intelligence > > **Worker Fleet** > > - Sherlock > - Maigret > - Snoop > - WhatsMyName > - Blackbird > - socialscan > - Holehe > - Ignorant > - GHunt > - Sylva > - Social Analyzer > - CupidCr4wl > - SpiderFoot > - theHarvester > - Sublist3r > > **API Feeds** > > - Breach Index > - [Hunter.io](http://Hunter.io) > > Native modules run immediately, while fleet tools are dispatched to the self-hosted worker infrastructure. * * * > **🌐 3,000+ Platforms Across Username Modules** > > Username investigations have been expanded significantly. > > Command One now reaches **3,000+ platforms across its username modules** , combining native platform probing with tools such as Maigret, Sherlock, Snoop, WhatsMyName and other specialised integrations. > > Results are brought back into the same unified findings system and confidence scored. * * * > **πŸ—ΊοΈ Interactive Intelligence Map** > > Cases can now be viewed as an interactive relationship graph. > > The target sits at the centre while related intelligence is displayed as connected nodes. > > You can: > > - Drag findings and hubs > - Rearrange the graph > - Follow relationships > - View confidence visually > - Inspect source details > - Reset the layout > - Switch between list and map views > > The map also follows the filters applied to the investigation results. * * * > **πŸ”— Multi-Source Correlation** > > Command One now goes further than simply collecting results. > > Independent modules can corroborate the same entity and merge their findings into a unified record. > > Corroborated findings increase in confidence, while single-source results remain identifiable as leads. > > New correlation tooling includes: > > - Sylva > - Social Analyzer > - CupidCr4wl > - SpiderFoot * * * > **πŸ”Ž Verify Link Pack** > > A new native verification toolbox provides quick access to manual verification resources. > > It includes links for: > > - Facebook > - X > - Instagram > - TikTok > - LinkedIn > - Reddit > - Telegram > - WhatsApp > - Search dorks > - Wayback Machine > - WHOIS > - Company registers > > The idea is simple: automate the discovery where possible, then make manual verification easy when required. * * * > **πŸ‘οΈ Premium Intelligence Sources** > > Command One now supports additional paid-source intelligence through purchased credits. > > ### Intelligence X > > Search leak, darknet and archive collections. > > ### Phone Intelligence > > Provides additional phone intelligence including: > > - Carrier information > - Line type > - Risk scoring > - SMS gateway data > > Premium sources consume purchased credits rather than the standard daily allowance. * * * > **πŸ‘€ Watchlists & Scheduled Monitoring** > > You can now save targets that you want to monitor. > > Watchlists can re-sweep targets on a schedule and surface new findings as changes against the previous investigation. > > Instead of repeatedly checking the same target manually, Command One can highlight what has changed. * * * > **πŸ”” Scan Notifications** > > Long-running investigations no longer need to be watched manually. > > Command One now provides: > > - In-app completion notifications > - Email summaries > - Worker-job notifications > > Start a scan and come back when it’s finished. * * * > **πŸ”— Shareable Case Files** > > Cases can now be shared using a read-only link. > > A colleague or client can review the investigation and evidence without needing their own Command One account. > > Links can also be revoked when access is no longer required. * * * > **πŸ€– AI Agent Integration** > > Command One includes a read-only OAuth-secured agent endpoint. > > Your own AI tooling can: > > - List cases > - Search findings > - Access investigation data under your account > > This allows Command One to become part of a larger AI-assisted investigation workflow without giving the agent unrestricted access. * * * > **πŸ“Š Better Investigation Results** > > The investigation feed now supports extensive filtering, grouping and sorting. > > Filter by: > > - Category > - Module > - Execution mode > - Target type > - Case > - Confidence > - Recency > > Group by: > > - Category > - Module > - Target > - Case > - Confidence > > Sort by: > > - Confidence > - Corroboration > - Recency > - Platform * * * > **πŸ“„ Reports, Evidence & Sharing** > > Every finding retains its source module, raw payload and timestamps. > > Investigations can be exported as: > > **CSV** > > Export the visible findings set. > > **PDF** > > Generate a branded case file containing an executive summary and findings register. > > **Shareable Case** > > Create a revocable read-only case link for handover or review. * * * ## πŸ’³ New Credit System Command One is now free to use every day with a daily allowance. ### πŸ†“ Free **$0 β€” Forever** - 50 credits refreshed every day - Standard OSINT modules - Unified intelligence feed - CSV exports - PDF case files - Watchlists - Shareable read-only cases ### πŸ’° Credit Top-Up **$5 / 50 credits** - One-off purchase - Credits do not expire daily - Unlocks premium paid-source modules - Up to 10 packs can be purchased at once - 30-day money-back guarantee A premium monthly tier is also planned. * * * ## βš™ The Core Workflow **01 β€” Acquire** Enter a username, email, phone number, real name or domain. **02 β€” Run** Command One selects the modules capable of working with the identifier. **03 β€” Correlate** Raw results are normalised into accounts, identities, infrastructure and media. **04 β€” Investigate** Filter, group, sort, corroborate and explore the relationship map. **05 β€” Report** Export the investigation as PDF, CSV or a shareable read-only case. * * * ## πŸ›‘ Public Sources & Responsible Use Command One is designed around publicly accessible intelligence. **No:** - Breach dumps - Paid data brokers - Scraping behind logins - Authentication bypass Every scan is tied to the account that launched it and written to an audit trail. Results are signals, not proof. A finding should be treated as a lead and independently verified before being relied upon. Harassment, stalking and unlawful profiling are prohibited. * * * ## πŸ“ˆ Current Platform | | | | --- | --- | | Live Modules | **26** | | Username Platforms | **3,000+** | | Native Modules | **9** | | Fleet Tools | **15** | | API Feeds | **2** | | Findings Schema | **1 Unified Format** | | Reports | **PDF + CSV** | | Case Sharing | **Read-only Links** | | Monitoring | **Watchlists** | | Visualisation | **Interactive Intel Map** | * * * # πŸš€ Try Command One Create a free account and start with the daily allowance. **[🌐 Open Command One](https://www.com1.cloud)** `OSINT` β€’ `PEOPLE SEARCH` β€’ `DUE DILIGENCE` β€’ `FRAUD RESEARCH` β€’ `JOURNALISM` β€’ `SECURITY RESEARCH` * * * ### πŸ’¬ Feedback Command One is actively being developed. If you’ve used the platform, I’d be interested in hearing what modules, integrations or investigation features you’d like to see next. ---
**Author:** ![Nat72883](https://onehack.st/user_avatar/onehack.st/nat72883/32/160283_2.png) [@Nat72883](https://onehack.st/u/Nat72883)\ **Post date:** [Setembro 2, 2026, 12:53pm UTC](https://onehack.st/t/one-username-email-or-phone-everything-public-about-it-one-report-every-line-sourced/324410/4 "2026-09-02T12:53:52Z")
Nice update ---
**Author:** ![Razza](https://onehack.st/user_avatar/onehack.st/razza/32/176458_2.png) [@Razza](https://onehack.st/u/Razza)\ **Post date:** [Setembro 2, 2026, 12:54pm UTC](https://onehack.st/t/one-username-email-or-phone-everything-public-about-it-one-report-every-line-sourced/324410/5 "2026-09-02T12:54:22Z")
# πŸš€ Command One β€” Major Update: OSINT Investigation Workspace A major update to Command One since the original post. Command One has evolved from a simple people-search console into a full **OSINT identity, infrastructure and historical investigation workspace**. 🌐 **Command One:** [https://www.com1.cloud/](https://www.com1.cloud/) * * * ## πŸ†• What’s New ### πŸ§‘ Identity & People Investigation Command One now accepts multiple starting points: - Username - Email - Phone number - Real name - Domain - IP address - CIDR range - ASN Results from multiple investigation modules are brought back into one workspace and can be correlated within the same case. Username investigations can now reach **3,000+ platforms** through the worker fleet, with **165 platforms probed directly**. * * * ## πŸ”Ž 47 Live Investigation Modules Command One now combines native modules, API intelligence and a worker fleet. ### Native - Username Sweep - Email Recon - Phone Recon - Name Expander - Domain Recon - Verify Link Pack - Intelligence X - BreachDirectory - Phone Intelligence ### OSINT Worker Fleet - Sherlock - Maigret - Snoop - WhatsMyName - Blackbird - socialscan - Holehe - Ignorant - GHunt - Sylva - Social Analyzer - CupidCr4wl - SpiderFoot - theHarvester - Sublist3r - Toutatis - Osintgram - snscrape - mosint - email2phonenumber - PhoneInfoga - marple - NetSoc OSINT - OWASP Amass - recon-ng - bbot - xnLinkFinder - git-hound - ExifTool - sn0int ### Infrastructure & Historical Recon - subfinder - dnsx - httpx - naabu - asnmap - Shodan - waybackurls - gau * * * ## 🌐 Infrastructure Recon Command One now goes beyond people and usernames. The infrastructure workflow can move through: **Domain β†’ Subdomains β†’ DNS β†’ Live Hosts β†’ Ports/Services β†’ ASN β†’ Shodan β†’ Historical Web** It can investigate: - Subdomains - DNS records - Live hosts - Ports and services - ASN / network ownership - Internet exposure - Shodan enrichment - Historical URLs - Archived endpoints - Paths and parameters The aim is to keep the infrastructure investigation inside the same case rather than jumping between separate tools. * * * ## πŸ•° Historical Web Intelligence Command One now includes historical web reconnaissance using: **Wayback + gau** Investigate previously indexed URLs, including: - Old URLs - Paths - Extensions - Parameters - Archived endpoints - Historical changes This adds the **history** layer alongside identity and infrastructure. * * * ## 🧠 Cross-Source Correlation Results from different modules are normalised into a unified findings structure. Command One can correlate information across sources and highlight: - Related entities - Supporting sources - Corroborated findings - Confidence - Evidence - Source provenance The goal is not simply to return more results, but to make the relationships between results easier to investigate. * * * ## πŸ—Ί Interactive Intelligence Map Investigations can be explored through an interactive relationship graph. Entities can include: - People - Accounts - Usernames - Emails - Phones - Domains - Hosts - Infrastructure - Related findings Move from an initial identifier into the wider network of connected information. * * * ## πŸ‘€ Watchlists & Monitoring Targets can now be added to watchlists. Command One can re-sweep targets and surface changes against previous investigations. Useful for: - Ongoing research - Due diligence - Infrastructure monitoring - Security research - Tracking changes to public footprints * * * ## πŸ”” Notifications Long-running investigations no longer require you to keep the console open. Command One supports investigation/job notifications including: - In-app notifications - Email summaries - Worker-job notifications * * * ## πŸ“ Cases, Evidence & Reports Investigations can be saved as cases with an audit trail. Findings retain information such as: - Source module - Source information - Raw payload - Timestamp - Confidence - Corroboration Cases can be exported as: **PDF** β€” investigation reports **CSV** β€” investigation data **Shareable Case** β€” read-only case sharing for review or collaboration * * * ## πŸ€– AI Agent Integration Command One now includes a read-only OAuth-protected agent endpoint. This allows authorised AI tooling to work with Command One investigation data, including: - Listing cases - Searching findings - Retrieving investigation data The endpoint is read-only and tied to the user’s authorised account. * * * ## πŸ”Ž Investigation Feed The investigation feed has also been expanded with filtering, grouping and sorting across areas such as: - Category - Module - Execution mode - Target type - Case - Confidence - Recency - Corroboration - Platform This makes larger investigations easier to navigate. * * * ## πŸ†“ Free Access Command One remains available with a free daily allowance for standard OSINT modules. The current free allowance provides **50 credits refreshed daily**. Standard modules can be run directly from the investigation workspace without needing separate installations or command-line setup. * * * ## πŸ›‘ Responsible OSINT Command One is designed around lawful investigation using publicly accessible sources. The platform is not intended for: - Harassment - Stalking - Unlawful profiling - Circumventing authentication - Accessing private accounts - Obtaining breach dumps Results should be treated as **leads and signals, not proof** , and important findings should be independently verified. * * * ## πŸ“Š Current Platform | Feature | Current | | --- | --- | | Live modules | **47** | | Platforms probed directly | **165** | | Platforms reachable via fleet | **3,000+** | | Unified findings | βœ… | | Interactive intelligence map | βœ… | | Infrastructure recon | βœ… | | Historical web recon | βœ… | | Watchlists | βœ… | | Notifications | βœ… | | PDF reports | βœ… | | CSV export | βœ… | | Shareable cases | βœ… | | AI agent endpoint | βœ… | * * * ## 🎯 The Direction The original idea was: > **One search box instead of twenty terminal windows.** That is still the goal. But Command One is now becoming a complete investigation workspace: **Find the person.** **Map the network.** **Recover the history.** **Correlate the evidence.** **Monitor what changes.** **Keep the investigation in one case.** * * * ## πŸš€ Try Command One Command One is free to use for standard OSINT investigations. 🌐 **[https://www.com1.cloud/](https://www.com1.cloud/)** Feedback, feature requests and suggestions for additional tools/integrations are welcome. The project is actively being developed. ---
**Author:** ![MansHot](https://onehack.st/user_avatar/onehack.st/manshot/32/178266_2.png) [@MansHot](https://onehack.st/u/MansHot)\ **Post date:** [Setembro 20, 2026, 8:58pm UTC](https://onehack.st/t/one-username-email-or-phone-everything-public-about-it-one-report-every-line-sourced/324410/6 "2026-09-20T20:58:56Z")
Thanks dude ---
**Author:** ![Brian\_Getsy](https://onehack.st/user_avatar/onehack.st/brian_getsy/32/178273_2.png) [@Brian\_Getsy](https://onehack.st/u/Brian_Getsy)\ **Post date:** [Setembro 21, 2026, 12:33am UTC](https://onehack.st/t/one-username-email-or-phone-everything-public-about-it-one-report-every-line-sourced/324410/8 "2026-09-21T00:33:03Z")
Fire Fire tools bro ---
**Author:** ![Razza](https://onehack.st/user_avatar/onehack.st/razza/32/176458_2.png) [@Razza](https://onehack.st/u/Razza)\ **Post date:** [Setembro 21, 2026, 12:33am UTC](https://onehack.st/t/one-username-email-or-phone-everything-public-about-it-one-report-every-line-sourced/324410/9 "2026-09-21T00:33:30Z")
### What you can run today β€” one identifier in, one sourced case file out 🧾 For anyone who already has the console open: this is the part to put to work now, in five moves. **1.** Sign in at com1.cloud β€” Google sign-in creates the account and nothing else. **2.** Drop in one identifier: a username, an email address, a phone number, a real name, a domain, an address or an ASN. **3.** Pick the modules. The native checks answer straight away; the heavier fleet tools are dispatched to a worker and land in the same case. **4.** Read the case file β€” every line carries the module that found it, the raw payload and the time it was collected. **5.** Export a PDF case report or CSV, or hand someone a revocable read-only link. πŸ”— **[com1.cloud](https://www.com1.cloud)** β€” open the console πŸ”— **[com1.cloud/auth](https://www.com1.cloud/auth?mode=signup)** β€” create the free account > **What you can run today β€” modules and what each fires** > > | Family | What it fires | What lands in the case | > | --- | --- | --- | > | Username | the native sweep across 165 platforms, then the fleet catalogue | every site the handle is registered on | > | Email | mail records, disposable check, Gravatar, registration checks | the services that address signed up to | > | Phone | format, country, line type, registration checks | the country, the carrier and the apps using it | > | Name | handle ranking and public profile artefacts | ranked candidates for the handles behind a name | > | Domain | subdomains, DNS records, live hosts, TLS | the estate standing behind the domain | > | IP / CIDR | live hosts, services, network ownership | the reachable surface of a netblock | > | ASN | owner and announced address ranges | a network’s footprint | > | Archive + correlation | archived URLs and the cross-source sweep | the target over time, all in one graph | > > Matching hits from independent modules merge and lift in confidence; a lone hit stays flagged as a lead. Each record keeps the module it came from, so any single finding can be checked on its own. > **Costs β€” free tier, gold credits, Premium Unlimited** > > | | Free account | Premium Unlimited | > | --- | --- | --- | > | Cost | βœ… Β£0 | Β£49.99 per month | > | Runs | βœ… 50 credits a day, refreshed daily | every module, 50 searches a day fair use | > | Premium data sources | metered in gold credits | βœ… included | > | Future modules | added over time | βœ… included the day each one ships | > | Exports | βœ… PDF case report and CSV | βœ… PDF case report and CSV | > | Cancel | β€” | anytime, access runs to the end of the paid period | > > **Gold credits:** 50 for Β£4.99, and they stay on the account instead of resetting each day. They are what the handful of premium data sources bill against. Results are leads β€” check them before you rely on them, because every line already tells you where it came from. Drop one identifier, keep the case file, and let each source answer for itself. ---
**Author:** ![system](https://onehack.st/user_avatar/onehack.st/system/32/165705_2.png) [@system](https://onehack.st/u/system)\ **Post date:** [Setembro 21, 2026, 2:13am UTC](https://onehack.st/t/one-username-email-or-phone-everything-public-about-it-one-report-every-line-sourced/324410/10 "2026-09-21T02:13:47Z")
**⬆ The Core-Community team has rebuilt the topic above β€” one plain front door: what the console takes, what comes back, and every source named on the line it produced.** ---
**Author:** ![Lee6](https://onehack.st/user_avatar/onehack.st/lee6/32/178580_2.png) [@Lee6](https://onehack.st/u/Lee6)\ **Post date:** [Setembro 28, 2026, 6:33pm UTC](https://onehack.st/t/one-username-email-or-phone-everything-public-about-it-one-report-every-line-sourced/324410/12 "2026-09-28T18:33:21Z")
Love it bro ---
**Author:** ![Razza](https://onehack.st/user_avatar/onehack.st/razza/32/176458_2.png) [@Razza](https://onehack.st/u/Razza)\ **Post date:** [Setembro 28, 2026, 6:39pm UTC](https://onehack.st/t/one-username-email-or-phone-everything-public-about-it-one-report-every-line-sourced/324410/13 "2026-09-28T18:39:23Z")
🎁 Command One UPDATE β€” Identity + Infra + Archive (TLS Β· RDAP Β· InternetDB Β· Watchlists) Skip the twenty-terminal-window circus. Paste a target. Hit go. Person + network + history land in one case file. **What’s new in this drop** Infrastructure no longer stops at DNS / live hosts. The pipeline now adds **TLS certificate intel** , **RDAP ownership** , **RIPE routing** , **InternetDB exposure** , and **authorised service fingerprinting** β€” then folds it into the same graph as the identity sweep. Command One is an OSINT investigation platform. Drop a username Β· email Β· phone Β· real name Β· domain Β· IP Β· CIDR or ASN. The live registry routes it through **49 enabled modules** (native + our worker fleet + keyed providers). β”œβ”€ 165 platforms probed in-console β”œβ”€ 3,000+ reachable via fleet catalogues β”œβ”€ 39 fleet modules live β”œβ”€ 50 free credits / day (standard modules) └─ Premium Unlimited = Β£49.99/mo Β· every module Β· 50 searches/day fair use Google sign-in creates the account only (name, email, picture). No Gmail / Drive / contacts access. ━━━━━━━━━━━━━━━━━━━━━━━ ### ⚑ Grab-and-go β€” open the console > **Click to expand β€” ready-to-paste links** > > ```auto > https://www.com1.cloud > https://www.com1.cloud/auth?mode=signup > https://www.com1.cloud/premium-unlimited > https://www.com1.cloud/premium > https://www.com1.cloud/commanddeck-workspace > > ``` No terminal. Sign in β†’ drop the identifier β†’ pick modules β†’ watch the case file fill. That’s the starter kit. ━━━━━━━━━━━━━━━━━━━━━━━ ### 🎯 Paste one target type > **Click to expand β€” what each identifier fires** > > ```auto > username β†’ 165-site native sweep + fleet expansion > email β†’ MX Β· disposable Β· Gravatar Β· Holehe > phone β†’ E.164 Β· carrier Β· Ignorant / PhoneInfoga > real name β†’ ranked handles + GHunt > domain β†’ DNS Β· CT Β· subfinder β†’ dnsx β†’ httpx β†’ tlsx > IP / CIDR β†’ live host Β· ASN Β· RDAP Β· InternetDB Β· authorised ports > ASN β†’ owner + announced prefixes + RIPEstat > > ``` Infrastructure does **not** run blind. Each stage feeds the next. > **Click to expand β€” infrastructure chain (updated)** > > ```auto > subdomains β†’ DNS β†’ live hosts β†’ TLS/certs β†’ authorised ports > β†’ service fingerprint β†’ ASN/RDAP/RIPE β†’ InternetDB + indexes β†’ archived web > > ``` ━━━━━━━━━━━━━━━━━━━━━━━ ### πŸ—Ί Ordered pipeline β€” tick what you need (updated stages) > **Click to expand β€” all 12 stages** > > ```auto > 01 Username sweep β€” Sherlock Β· Maigret Β· Snoop Β· WhatsMyName Β· socialscan Β· Blackbird Β· marple Β· Sylva > 02 Account & email intel β€” Holehe Β· GHunt Β· mosint Β· email2phonenumber > 03 Phone intel β€” PhoneInfoga Β· Ignorant > 04 Social footprint β€” Social Analyzer Β· snscrape Β· Toutatis Β· NetSoc Β· CupidCr4wl > 05 Subdomain discovery β€” passive CT + indexes > 06 DNS β€” A Β· AAAA Β· CNAME Β· MX Β· NS Β· TXT Β· PTR > 07 Live hosts β€” status, title, server, TLS, tech, CDN > 08 TLS & certificates β€” subject/SAN Β· issuer Β· validity Β· version Β· fingerprint (tlsx, local, no API key) > 09 Ports β€” authorised targets only > 10 Service fingerprinting β€” product/version on found ports (authorised, version-light only) > 11 ASN & network β€” asnmap + keyless RDAP + RIPEstat > 12 Exposure β€” Shodan InternetDB (free, no key) + urlscan.io Β· VirusTotal Β· DeHashed where configured > > ``` ━━━━━━━━━━━━━━━━━━━━━━━ ### πŸ†• Findings since last post β€” what actually changed > **Click to expand β€” new infra intel** > > ```auto > tlsx β†’ cert SAN/subject, issuer, validity, TLS version, fingerprint > RDAP β†’ registry ownership, keyless > RIPEstat β†’ routing / allocation > InternetDB β†’ what public indexes already recorded (no Shodan key required) > Service fingerprint β†’ product + version on ports already found > β†’ authorised targets only Β· version-light Β· no scripts Β· no OS detect > > ``` > **Click to expand β€” new console features** > > ```auto > Watchlists β†’ save a target, re-sweep on a schedule, see what changed > Scan notifications β†’ in-app alert + email from notify.com1.cloud > Shareable case files β†’ read-only link for a colleague/client Β· revoke any time > Credits meter β†’ daily allowance + reset countdown + purchased gold, separate > Reliable exports β†’ PDF/CSV on web and mobile (share sheet) > CommandDeck β†’ dedicated workspace, not a panel stuffed inside a case > Agent endpoint β†’ read-only OAuth so your own AI tooling can search findings > > ``` ━━━━━━━━━━━━━━━━━━━━━━━ ### πŸ’³ Credit cheat-sheet > **Click to expand β€” Native (instant)** > > ```auto > Username Sweep 2 > Email Recon 1 > Phone Recon 1 > Name Expander 3 > Domain Recon 1 > Verify Link Pack 1 > > ``` > **Click to expand β€” Fleet (open-source tools on our worker fleet)** > > ```auto > Sherlock 3 Β· Maigret 5 Β· Snoop 4 Β· Holehe 1 Β· GHunt 4 > SpiderFoot 8 Β· Amass 4 Β· bbot 4 Β· git-hound 4 Β· sn0int 4 > Toutatis 4 Β· snscrape 3 Β· mosint 4 Β· Social Analyzer 4 > tlsx is local / free β€” no API key > > ``` > **Click to expand β€” Infra & archive** > > ```auto > subfinder 2 Β· dnsx 2 Β· httpx 3 Β· naabu 5 Β· asnmap 2 > Shodan 4 Β· waybackurls 2 Β· gau 3 Β· Wayback CDX 2 > urlscan.io 4 Β· VirusTotal 8 > InternetDB β€” free, no key > > ``` > **Click to expand β€” Premium / gold credits** > > ```auto > 50 gold credits = Β£4.99 (never expire) > Premium Unlimited = Β£49.99/mo Β· no credit burn Β· 50 searches/day Β· cancel anytime > > Intelligence X 20 leaks / pastes / darknet / docs > DeHashed 20 breach provenance only β€” passwords & hashes discarded > Hunter.io 10 professional email patterns + verification > BreachDirectory 15 corpora + hash hints > Phone Intelligence 15 carrier Β· line type Β· routing Β· portability > > Free daily 50 credits cover STANDARD modules only β€” not premium. > > ``` Confirm balances in-console β€” costs move as modules ship. ━━━━━━━━━━━━━━━━━━━━━━━ ### 🧩 What to click after the sweep > **Click to expand β€” post-run tools** > > ```auto > CommandDeck β†’ pan/zoom graph, clusters, confidence filter > Notes / flags / tags β†’ private to your account; raw hits never edited > Manual links β†’ visually distinct from collected sources > Watchlists β†’ schedule a re-sweep, diff against last run > Share link β†’ read-only, revocable > Verify Link Pack β†’ Facebook Β· X Β· Instagram Β· TikTok Β· LinkedIn Β· Reddit Β· Telegram Β· WhatsApp Β· dorks Β· Wayback Β· WHOIS > Export β†’ branded PDF or CSV > > ``` ━━━━━━━━━━━━━━━━━━━━━━━ ### πŸ‘₯ Who it’s for > **Click to expand** > > ```auto > Due diligence β†’ verify a counterparty before you sign > Fraud & trust-and-safety β†’ recycled handles + infra in one file > Journalism & research β†’ citable public-source footprint > Personal exposure audit β†’ run yourself, see the public surface > > ``` ━━━━━━━━━━━━━━━━━━━━━━━ ### πŸ›‘ Two honest notes Port discovery and service fingerprinting are **authorised targets only**. InternetDB / tlsx / RDAP / RIPEstat are keyless public indexes β€” still treat hits as leads. DeHashed keeps identifiers and breach provenance; passwords and hashes are discarded. Every scan is logged to your account. Public + licensed sources only. Harassment / stalking / unlawful profiling = instant ban. ━━━━━━━━━━━━━━━━━━━━━━━ The identifier was never the lock. Own the case file. β†’ Create free account: [https://www.com1.cloud/auth?mode=signup](https://www.com1.cloud/auth?mode=signup) β†’ Open the console: [https://www.com1.cloud](https://www.com1.cloud) β†’ Premium Unlimited: [https://www.com1.cloud/premium-unlimited](https://www.com1.cloud/premium-unlimited) ---
**Author:** ![Nightypop](https://onehack.st/user_avatar/onehack.st/nightypop/32/147501_2.png) [@Nightypop](https://onehack.st/u/Nightypop)\ **Post date:** [Outubro 5, 2026, 7:33pm UTC](https://onehack.st/t/one-username-email-or-phone-everything-public-about-it-one-report-every-line-sourced/324410/14 "2026-10-05T19:33:29Z")
# This site can’t be reached **www.com1.cloud** took too long to respond. Try: - Checking the connection - Checking the proxy and the firewall ---
**Author:** ![Razza](https://onehack.st/user_avatar/onehack.st/razza/32/176458_2.png) [@Razza](https://onehack.st/u/Razza)\ **Post date:** [Outubro 6, 2026, 4:19pm UTC](https://onehack.st/t/one-username-email-or-phone-everything-public-about-it-one-report-every-line-sourced/324410/15 "2026-10-06T16:19:22Z")
Site is working perfectly fine πŸ˜ƒ. 🎁 Command One UPDATE β€” free console, new pipeline, Android live Skip the twenty-terminal-window circus. This drop is about what changed on the free path β€” not a new product pitch. **What’s new** The ordered pipeline is now **15 stages**. Shodan enrichment and historical web are their own steps. TLS, RDAP, RIPEstat and InternetDB are in the free chain (keyless). The Android app is on Google Play. iOS is coming soon. Watchlists and shareable case files sit on the free account. Free accounts still get **50 credits/day** at 00:00 UTC. No card. Standard modules only. β”œβ”€ 49 modules Β· 39 on our worker fleet β”œβ”€ 165 platforms in-console Β· 3,000+ via fleet catalogues β”œβ”€ pipeline 12 β†’ 15 └─ Android live Β· same cases and CommandDeck ━━━━━━━━━━━━━━━━━━━━━━━ ### ⚑ Grab-and-go > **Click to expand β€” ready-to-paste links** > > ```auto > https://www.com1.cloud > https://www.com1.cloud/auth?mode=signup > https://play.google.com/store/apps/details?id=cloud.com1.app > > ``` Sign in β†’ drop the identifier β†’ the new stages are already in the sweep. Same case file on Android, pinch-to-zoom on the graph. ━━━━━━━━━━━━━━━━━━━━━━━ ### πŸ†• Update list β€” what actually moved > **Click to expand β€” this drop** > > ```auto > Pipeline β†’ 15 stages (was 12) > New stage 08 β†’ TLS & certificates (tlsx, local, no API key) > New stage 11 β†’ ASN + keyless RDAP + RIPEstat > New stage 12 β†’ InternetDB exposure (free, no key) > New stage 13 β†’ Shodan enrichment split out on its own > New stage 14 β†’ historical web split out on its own > New stage 15 β†’ cross-source correlation (identity + infra) > Android β†’ Google Play live (cloud.com1.app) > iOS β†’ coming soon > Mobile CommandDeck β†’ pinch-to-zoom, PDF/CSV saved to the device > Watchlists β†’ on the free account Β· re-sweep, diff against last run > Shareable cases β†’ on the free account Β· read-only link, revoke any time > Scan mail β†’ notify.com1.cloud when a long fleet job finishes > > ``` A paid tier still exists for licensed breach/email sources. This update is the free console. ━━━━━━━━━━━━━━━━━━━━━━━ ### πŸ—Ί The 15-stage pipeline (updated) > **Click to expand β€” all 15 stages** > > ```auto > 01 Username sweep β€” Sherlock Β· Maigret Β· Snoop Β· WhatsMyName Β· socialscan Β· Blackbird Β· marple Β· Sylva > 02 Account & email intel β€” Holehe Β· GHunt Β· mosint Β· email2phonenumber > 03 Phone intel β€” PhoneInfoga Β· Ignorant > 04 Social footprint β€” Social Analyzer Β· snscrape Β· Toutatis Β· Osintgram Β· NetSoc Β· CupidCr4wl > 05 Subdomain discovery β€” passive CT + indexes > 06 DNS β€” A Β· AAAA Β· CNAME Β· MX Β· NS Β· TXT Β· PTR > 07 Live hosts β€” status, title, server, TLS, tech, CDN > 08 TLS & certificates β€” NEW Β· subject/SAN Β· issuer Β· validity Β· fingerprint (tlsx) > 09 Ports β€” authorised targets only > 10 Service fingerprinting β€” authorised, version-light, no scripts, no OS detect > 11 ASN & network β€” UPDATED Β· asnmap + RDAP + RIPEstat > 12 Exposure β€” NEW Β· InternetDB (no key) + urlscan.io > 13 Shodan enrichment β€” split out Β· banners / products / versions > 14 Historical web β€” split out Β· archived URLs, paths, parameters > 15 Cross-source correlation β€” identity + infrastructure in one graph > > ``` > **Click to expand β€” infrastructure chain** > > ```auto > subdomains β†’ DNS β†’ live hosts β†’ TLS/certs β†’ authorised ports > β†’ service fingerprint β†’ ASN/RDAP/RIPE β†’ InternetDB > β†’ Shodan banners β†’ archived web β†’ cross-source correlation > > ``` ━━━━━━━━━━━━━━━━━━━━━━━ ### 🎯 What a free credit actually buys now > **Click to expand β€” target β†’ new stages** > > ```auto > username β†’ 165-site native sweep + fleet expansion > email β†’ MX Β· disposable Β· Gravatar Β· Holehe > phone β†’ E.164 Β· carrier Β· Ignorant / PhoneInfoga > real name β†’ ranked handles + GHunt > domain β†’ DNS Β· CT Β· subfinder β†’ dnsx β†’ httpx β†’ tlsx > IP / CIDR β†’ live host Β· RDAP Β· InternetDB Β· authorised ports > ASN β†’ owner + prefixes + RIPEstat > > ``` > **Click to expand β€” free credit cheat-sheet** > > ```auto > Username Sweep 2 Β· Email Recon 1 Β· Phone Recon 1 > Name Expander 3 Β· Domain Recon 1 Β· Verify Link Pack 1 > > Fleet on our worker fleet > Sherlock 3 Β· Maigret 5 Β· Snoop 4 Β· Holehe 1 Β· GHunt 4 > SpiderFoot 8 Β· Social Analyzer 4 Β· Toutatis 4 Β· snscrape 3 > > Infra (inside the daily 50) > subfinder 2 Β· dnsx 2 Β· httpx 3 Β· naabu 5 Β· asnmap 2 > waybackurls 2 Β· gau 3 Β· Wayback CDX 2 > tlsx / RDAP / RIPEstat / InternetDB β€” keyless > > ``` 50 credits/day. A username sweep plus email and domain recon still leaves room. ━━━━━━━━━━━━━━━━━━━━━━━ ### 🧩 After the sweep β€” new clicks > **Click to expand** > > ```auto > Watchlists β†’ schedule a re-sweep, see what changed since last run > Share link β†’ read-only, no account on the other side, revoke any time > Scan mail β†’ notify.com1.cloud > CommandDeck β†’ graph of the new infra entities, not just accounts > Verify Link Pack β†’ manual checks already in the free console > Export β†’ branded PDF or CSV, including the Android share sheet > > ``` ━━━━━━━━━━━━━━━━━━━━━━━ ### πŸ›‘ Two honest notes Port discovery and service fingerprinting are **authorised targets only**. tlsx / RDAP / RIPEstat / InternetDB are keyless public indexes β€” still treat hits as leads. Every scan is logged to your account. Harassment / stalking / unlawful profiling = instant ban. ━━━━━━━━━━━━━━━━━━━━━━━ The identifier was never the lock. Own the case file. β†’ Create free account: [https://www.com1.cloud/auth?mode=signup](https://www.com1.cloud/auth?mode=signup) β†’ Open the console: [https://www.com1.cloud](https://www.com1.cloud) β†’ Android: [https://play.google.com/store/apps/details?id=cloud.com1.app](https://play.google.com/store/apps/details?id=cloud.com1.app)