loading
Loading content
loading
OSINT
Accurate and fast checks for email and username usage across online platforms.
overview
socialscan takes an email address or username and reports, for each supported platform, whether the value is available, already taken, or invalid. It queries each platform's real registration and login logic instead of guessing from a profile page, so a 'taken' verdict means the account already exists and an 'available' verdict means the handle is free to register.
It runs one lookup or a whole file of them. Restrict the check to named platforms with -p, filter to only the free handles with -a, route requests through a proxy list to spread load, and cache tokens with -c for platforms that need several HTTP calls so a bulk run sends fewer requests.
Reach for it during an OSINT investigation to confirm where an email is already registered, to vet a set of candidate usernames, or to check brand-handle availability across platforms in one pass. In a Trickest workflow it takes an input value or a query file and writes the verdicts as a file and a folder for downstream nodes.
source github.com/iojw/socialscan
use cases
Query an email address across supported platforms to see which services already hold an account for it, a fast OSINT pivot from an address to online presence.
Pass a file of candidate handles with -i and add -a to keep only the ones still free, useful for an investigation or for picking a new brand handle.
Use -p to limit the run to the platforms an investigation cares about, which cuts request volume and run time.
Supply --proxy-list so a big query file spreads across addresses and avoids per-IP rate limits, and cache tokens with -c to send fewer requests per platform.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| input | STRING | · | Single username or email address to query (positional; supply several to check at once). |
| input-file | FILE | -i | File containing a list of queries to execute, one per line. |
| platform | STRING | -p | List of platforms to query (default: all platforms). |
| only-available-and-not-used | BOOLEAN | -a | Print only values that are available and not in use. |
| show-urls | BOOLEAN | --show-urls | Display profile URLs for usernames on supported platforms. |
| sort-results | STRING | --view-by | Sort results by platform or by query (default: query). |
| proxy-list | FILE | --proxy-list | File of HTTP proxy servers to route queries through. |
Showing key inputs. socialscan exposes 8 inputs in total.
| Name | Type | Flag | Description |
|---|---|---|---|
| input | STRING | · | Single username or email address to query. |
| platform | STRING | -p | List of platforms to query (default: all platforms). |
| show-urls | BOOLEAN | --show-urls | Display profile URLs for usernames on supported platforms; profiles may be absent for reserved, deleted, or banned accounts. |
| input-file | FILE | -i | File containing a list of queries to execute, one per line. |
| proxy-list | FILE | --proxy-list | File of HTTP proxy servers to route queries through. |
| cache-tokens | STRING | -c | Cache tokens for platforms that need several requests (Snapchat, GitHub, Instagram, Last.fm, Tumblr), cutting total request count. |
| sort-results | STRING | --view-by | Sort results by platform or by query (default: query). |
| only-available-and-not-used | BOOLEAN | -a | Print only values that are available and not in use. |
example
# check a username and an email across all platforms, showing profile URLssocialscan jdoe jdoe@example.com --show-urlsjdoe--------------------------------------------------Instagram availableGitHub takenTwitter takenLastfm availableTumblr takenReddit availablePinterest invalidguidance
Use socialscan to check whether an email or username is available, taken, or invalid across platforms with accurate registration-logic queries. For mapping where a handle already exists across hundreds of sites, use sherlock instead.
Enumerates where a username exists across hundreds of sites. socialscan adds availability and validity for emails and usernames.
Crawls a site for hijackable broken social links rather than checking a handle's status.
Device and service intelligence. A different OSINT axis from identity checks.
faq
related
Look up DNS records on DNSDumpster.
Look up a host on DNSDumpster.
Find lookalike domains adversaries use for typosquatting, phishing, and brand impersonation.
List all public repositories for valid GitHub usernames.
Look up the real IP of a host starting from its favicon and using Shodan.
Gather email account intelligence from public sources and check it against breach data.
An email or handle feeds socialscan, which checks availability across platforms and writes the verdicts as a queryable output.
Facts on this page come from the live Trickest tool library.