S
Social Media Scanner
Published byOSINT TRACE
10/22/2025
# Social Media Scanner API (6-in-1 OSINT Sweep)
## ⚡ 100% Real-Time Live Intelligence (Zero Stale Databases)
The **Social Media Scanner API** enables security engineers, fraud analysts, and intelligence teams to verify the digital presence of an email address, username, or phone number across **6 major social media networks simultaneously** in a single asynchronous request.
Instead of making 6 separate API calls and managing individual network rate limits, the Social Media Scanner executes concurrent distributed queries across **Google, Microsoft, Facebook, Instagram, Snapchat, and X (Twitter)** in under **2 seconds**, returning a normalized composite intelligence report.
> [!IMPORTANT]
> **Real-Time Verification Guarantee:** Every query executes live protocol probes directly against target authentication gateways. We **never** rely on cached dumps, leaked records, or stale third-party databases.
For direct web access, interactive visual reports, and high-volume bulk CSV processing, visit **[OSINT Trace](https://osinttrace.com)** at [https://osinttrace.com](https://osinttrace.com).
---
## 🔗 Quick Links
* **Official Web Platform & Bulk CSV Scanner**: [OSINT Trace — https://osinttrace.com](https://osinttrace.com)
---
## 🌐 Supported 6-Network Coverage
| Network | Target Parameter | Extracted Intelligence & Presence Checks |
| --- | --- | --- |
| 🌐 **Google** (`google`) | Email / Username | Account existence & Gmail / Google Workspace inbox deliverability status. |
| 💼 **Microsoft** (`microsoft`) | Email / Username / Phone | Personal MSA & Azure AD presence, tenant classification, SSO SAML URLs, masked phone/email (when available). |
| 👥 **Facebook** (`facebook`) | Email / Username / Phone | Profile existence, numerical profile ID, HD avatar URL, custom avatar flag, Meta Accounts Center links (when available). |
| 📸 **Instagram** (`instagram`) | Username / Email / Phone | Account existence, numerical user ID, follower/following/post counts, verified badge, bio link (when available). |
| 👻 **Snapchat** (`snapchat`) | Username / Email / Phone | Account existence, display name, 3D Bitmojis, subscriber metrics, official star badge, Snapcode URL (when available). |
| 🐦 **X (Twitter)** (`x`) | Username / Email | Account existence, join date (month/year), follower metrics, avatar flags, verified checkmarks (when available). |
---
## ⚠️ Important Scope & Metadata Rules ("No False Hopes")
> [!WARNING]
> **Metadata Is Not Always Included (`No False Hopes`):** Receiving `"live": true` on any of the 6 networks confirms that the account is registered and active on that platform, but **the `metadata` object is not guaranteed on every hit**. Whether rich metadata is included for a given platform depends on two factors:
> 1. **The Target Account Itself:** Account privacy settings, security configurations, recovery visibility, and public profile state on each individual network determine whether extended fields are exposed.
> 2. **The Input Type (`email`, `username`, or `phone`):** Different identifier types trigger different verification probes on each network. For example, querying a `@username` on Instagram, Snapchat, or X typically extracts rich public profile metadata (`followers`, `avatar_url`, `created_at`), whereas querying an `email` or `phone` on certain platforms may return presence-only confirmation (`{"live": true}`) without a `metadata` object.
>
>
> [!NOTE]
> * **Included 6 Networks:** This scanner is specifically engineered for the 6 social media networks listed above (**Google, Microsoft, Facebook, Instagram, Snapchat, X**).
> * **Dedicated Single Checkers:** Specialized standalone platforms like **WhatsApp** (phone-only business verification) and **Amazon** (e-commerce customer & author storefront verification) are offered as dedicated standalone checker APIs.
> * **Selective Filtering:** By default, all 6 networks are scanned concurrently. You can optionally pass the `programs` array in the request body to scan only a chosen subset of the 6 networks (e.g. `["instagram", "x"]`).
>
>
---
## 🎯 Use Cases
1. **Fraud Prevention & Account Takeover Defense:** Instantly verify if a new user signup email has a legitimate, established footprint across multiple social networks.
2. **KYC & Security Investigations:** Correlate suspect usernames or emails across the top 6 networks to discover connected identities and numerical profile IDs.
3. **Sybil & Bot Detection:** Filter out disposable accounts and programmatic botnets that lack multi-platform social history.
4. **Lead Enrichment:** Enrich CRM leads and prospect contacts with live social media handles, avatar pictures, and follower metrics.
---
## 💻 Request & Response Payload Examples
### Endpoint
`POST /check`
### Request Body
```json
{
"input": "[email protected]"
}
```
*Optional selective scan:*
```json
{
"input": "johndoe",
"programs": ["instagram", "x", "snapchat"]
}
```
### Full Response Example (`200 OK`)
*Note: Some platforms in a response may return presence-only (`{"live": true}`) while others include `metadata`, depending on the target account's settings and whether the input is an `email`, `username`, or `phone`.*
```json
{
"google": {
"live": true
},
"microsoft": {
"live": true,
"metadata": {
"account_type": "Personal (MSA)",
"name": "John Doe",
"masked_phone": "+1 *******71",
"tenant_type": "Managed",
"auth_methods": ["password", "fido2_or_authenticator"]
}
},
"facebook": {
"live": true,
"metadata": {
"name": "John Doe",
"user_id": "100084729103847",
"avatar_url": "https://scontent.facebook.com/v/t1.30497-1/...",
"has_custom_avatar": true,
"profile_url": "https://www.facebook.com/profile.php?id=100084729103847",
"linked_accounts": [
{
"name": "johndoe_official",
"avatar_url": "https://scontent.cdninstagram.com/...",
"account_type": "INSTAGRAM"
}
]
}
},
"instagram": {
"live": true,
"metadata": {
"user_id": "5839201948",
"username": "johndoe",
"name": "John Doe | Cyber Security",
"bio": "OSINT Researcher & Security Enthusiast",
"avatar_url": "https://scontent.cdninstagram.com/...",
"followers": 14200,
"following": 320,
"posts": 87,
"is_private": false,
"is_verified": true,
"is_business": true,
"category": "Entrepreneur",
"external_url": "https://osinttrace.com",
"profile_url": "https://www.instagram.com/johndoe/"
}
},
"snapchat": {
"live": true,
"metadata": {
"username": "johndoe",
"name": "John D.",
"bio": "Building the future of OSINT",
"avatar_url": "https://images.snapchat.com/avatar/...",
"banner_url": "https://images.snapchat.com/bg/...",
"followers": 4800,
"is_verified": false,
"snapcode_url": "https://feelinsonice-hrd.appspot.com/web/deeplink/snapcode?username=johndoe&type=SVG",
"profile_url": "https://www.snapchat.com/add/johndoe"
}
},
"x": {
"live": true,
"metadata": {
"username": "johndoe",
"name": "John Doe",
"bio": "Information Security & OSINT Investigations",
"avatar_url": "https://pbs.twimg.com/profile_images/...",
"followers": 28400,
"following": 510,
"created_at": "Joined April 2018",
"is_verified": true,
"has_custom_avatar": true,
"profile_url": "https://x.com/johndoe"
}
}
}
```
---
## 🚀 Implementation Guide
### Python (`requests`)
```python
import requests
API_KEY = "YOUR_JOJAPI_KEY"
URL = "https://social-media-scanner.jojapi.net/check"
def scan_social_footprint(identifier: str):
headers = {
"Content-Type": "application/json",
"x-jojapi-key": API_KEY
}
payload = {"input": identifier}
response = requests.post(URL, headers=headers, json=payload)
if response.status_code == 200:
results = response.json()
print(f"=== 6-in-1 Scan Results for {identifier} ===")
for platform, res in results.items():
is_live = res.get("live", False)
has_meta = " (with metadata)" if res.get("metadata") else ""
print(f"[{platform.upper()}]: {'FOUND ✅' + has_meta if is_live else 'NOT FOUND ❌'}")
return results
else:
print(f"Error {response.status_code}: {response.text}")
return None
scan_social_footprint("[email protected]")
```
### cURL
```bash
curl -X POST \
'https://social-media-scanner.jojapi.net/check' \
-H 'Content-Type: application/json' \
-H 'x-jojapi-key: YOUR_JOJAPI_KEY' \
-d '{"input": "[email protected]"}'
```
---
## 🚦 Status Codes & Error Reference
| Status Code | Reason | Description |
| --- | --- | --- |
| **`200 OK`** | Success | Query completed. Returns composite 6-network scan dictionary. |
| **`400 Bad Request`** | Validation Error | Malformed JSON or invalid input parameter. |
| **`401 Unauthorized`** | Auth Failure | Missing or invalid `x-jojapi-key` header. |
| **`403 Forbidden`** | Quota Exceeded | Monthly subscription quota exhausted. Upgrade your plan. |
| **`408 Request Timeout`** | Timeout | Upstream platforms did not respond within 35 seconds. |
| **`429 Too Many Requests`** | Rate Limit | Exceeded allowable requests/second (1 req/s). |
| **`500 / 503`** | Gateway Error | Temporary upstream network error. |
---
## ❓ Frequently Asked Questions
**Q: Why is the `metadata` field not always included for every platform when `live` is `true`?**
A: Metadata availability depends on **the target account itself** (its privacy settings, security configuration, or public profile visibility on each individual network) and **whether your input is an `email`, `username`, or `phone` number**. For example, an email lookup may confirm registration presence (`{"live": true}`) on Google, Instagram, or X without exposing public profile metadata, whereas a username lookup on those same platforms extracts rich profile details when publicly accessible. Always check whether `metadata` is present on each platform object before accessing nested fields.
**Q: Which networks are scanned in a single call?**
A: A single request checks Google, Microsoft, Facebook, Instagram, Snapchat, and X (Twitter) concurrently.
**Q: Can I scan only 2 or 3 networks instead of all 6?**
A: Yes, pass the optional `programs` array in the request body (e.g. `{"input": "johndoe", "programs": ["instagram", "x"]}`).
**Q: Does scanning all 6 platforms consume 1 API call or 6 API calls?**
A: On the Social Media Scanner API, a single `POST /check` consumes **1 API call credit** from your monthly quota.
**Q: Where can I run interactive web searches or bulk CSV scans?**
A: Bulk checks are available directly on **[OSINT Trace](https://osinttrace.com)** (`[https://osinttrace.com](https://osinttrace.com)`), where you can use our interactive web workspace and asynchronous bulk CSV scanner.
Last updated 2026-10-16