OSINT Social Footprint Scanner

Passive reconnaissance tool — drop in a username or email and discover every associated online profile. Zero aggressive scanning. No brute-forcing. Just clean OSINT data.

---

🔍 How It Works

Enter a username or email → the Actor probes 20+ platforms in parallel → results stream to the dataset in real time.

Scanned Platforms (Username)

Category	Platforms
Code / Dev	GitHub, GitLab, Bitbucket, Hacker News, Dev.to, Medium, Replit, Stack Overflow
Social	Reddit, X/Twitter, Instagram, TikTok, Pinterest, Tumblr, Behance, Keybase
Messaging / Community	Telegram, Pastebin, Steam, Spotify, Patreon
Professional	LinkedIn

Scanned Platforms (Email)

Service	What It Finds
Gravatar	Profile name, avatar, linked accounts
Have I Been Pwned (optional, needs API key)	List of data breaches the email appears in

---

📥 Input

Field	Required	Description
queryType	Yes	username, email, or both
username	If queryType is username/both	The username to search for
email	If queryType is email/both	The email to search for
hibpApiKey	No	Have I Been Pwned API key (get at hibp)
platforms	No	Leave empty to scan all. Or specify subset e.g. ["github", "reddit", "telegram"]

---

📤 Output

One row per platform check, streamed in real time:

{
  "platform": "GitHub",
  "queryType": "username",
  "queryValue": "jdoe",
  "found": true,
  "profileUrl": "https://github.com/jdoe",
  "displayName": "John Doe",
  "followers": 142,
  "source": "http_probe",
  "error": null
}

For email + HIBP:

{
  "platform": "Have I Been Pwned",
  "queryType": "email",
  "queryValue": "jdoe@example.com",
  "found": true,
  "breaches": ["LinkedIn", "Adobe", "Collection #1"],
  "source": "hibp_api_v3"
}

---

🐍 API Usage

from apify_client import ApifyClient

client = ApifyClient("YOUR_TOKEN")

run = client.actor("YOUR_USERNAME/social-footprint-scanner").call(
    run_input={
        "queryType": "username",
        "username": "jdoe",
    }
)

dataset = client.dataset(run["defaultDatasetId"]).list_items()
for item in dataset.items:
    if item["found"]:
        print(f"{item['platform']}: {item['profileUrl']}")

---

🔐 Legality & Ethics

This Actor uses only passive, public data sources:

• Certificate Transparency logs (via Keybase)
• Public profile pages (same as visiting the site in a browser)
• Public APIs (GitHub, Reddit, HIBP, Gravatar)

It does not brute-force logins, scrape private data, or bypass any access controls. Use only for:

• Authorized security assessments
• Your own accounts
• Public interest research

---

💰 Pricing

Pay Per Event model:

• $0.02 / run start fee
• $0.001 / platform check (typical run: ~20 checks = $0.02)
• Average cost: $0.04 per full scan

---

🛟 Support

• Issues: GitHub Issues (link after publishing)
• Discord: Apify Developer Community

---

📄 License

MIT