Type an email, phone number, or username below and see what comes back.
A field is either stamped verified, or it is honestly marked not found, never filled in to look complete. How we verify that →
One request in, one shape of answer out - whether you are scoring a signup, running KYC, or investigating an account.
POST /v2/lookup with one query. The type is detected for you. See running a lookup.
Social profiles, developer accounts, shopping, finance and community sites - the full platform list - plus breach history and public web mentions.
Results arrive as they land over server-sent events, each stamped with the moment it was established. A platform we could not confirm is left out, never guessed.
One POST to api.digifootprint.dev, one bearer key, one JSON body. No SDK to install and no callback to host - add ?wait=true and the answer comes back on the same request.
curl -X POST "https://api.digifootprint.dev/v2/lookup?wait=true" \
-H "Authorization: Bearer dfp_your_key" \
-H "Content-Type: application/json" \
-d '{"query": "someone@example.com"}'Every result carries the method that established it and the moment it was checked. A platform that blocked the check or timed out is absent from footprint.results rather than reported as false.
{
"lookupId": "4b6bbfec-e59d-45c5-961d-bc625b921db1",
"input": { "email": "someone@example.com", "phone": null, "username": null, "ip": null },
"risk": null,
"footprint": {
"platformsChecked": 886,
"matches": 3,
"hits": ["github", "spotify", "instagram"],
"results": [
{ "platform": "github", "registered": true, "method": "public_api", "checkedAt": "2026-09-25T09:12:04.377Z", "identity": "email" },
{ "platform": "spotify", "registered": true, "method": "public_api", "checkedAt": "2026-09-25T09:12:04.201Z", "identity": "email" },
{ "platform": "instagram", "registered": true, "method": "public_api", "checkedAt": "2026-09-25T09:12:04.118Z", "identity": "email" },
{ "platform": "twitter", "registered": false, "method": "public_api", "checkedAt": "2026-09-25T09:12:04.402Z", "identity": "email" }
],
"breaches": [{ "name": "Collection1", "date": "2019-01-07" }],
"webMentions": []
},
"email": null,
"phone": null,
"ip": null
}Every lookup checks all of these - and 862+ more - from one email, phone number or username.
Run the footprint alone or add email, phone and IP intelligence to the same request. Every module comes back with its own 0-100 risk score, and the request with an overall one.
Which of 800+ platforms an email, phone or username is registered on, plus breach history and web mentions. Verified or omitted, never guessed.
Deliverability over SMTP, disposable, webmail and role addresses, and the domain behind it: age, registrar, MX, SPF and DMARC, with a breach summary.
Validity, E.164 and national format, carrier, line type, and fixed versus app-minted VOIP detection. SIM-swap and call-forwarding risk detection on higher plans.
VPN, proxy, Tor, residential proxy, datacenter and compromised hosts, with ASN, ISP and location. Sub-second.
The overall score is the total of the named signals that fired, capped at 100. Tune any default rule, or write your own.
Measured, not promised. Pick the trade between speed and completeness per request.
A latency-bounded sweep of the highest-value platforms. Whatever answered in time comes back; nothing is guessed to fill the rest.
Answers with the first real profiles and every module you asked for, while the full sweep completes the same lookup in the background.
Server-sent events, one per result as it lands - email and phone together in one stream.
White-label and resale arrangements are available to established accounts by written agreement, reviewed case by case.
The same lookup, read differently by each team. Pick the one that looks like your problem.
Get social profile information for an email, username or phone number: which profiles exist, verified or omitted - never guessed.
Email fraud detection API: check a signup by which accounts exist for the address, breach history and web mentions. Verified or omitted, never guessed.
Digital footprint KYC: an AML identity verification API reporting which accounts exist for an applicant’s email, with method and timestamp on every fact.
Fake account detection API for marketplaces and communities: see whether a new member’s email or handle exists anywhere else before they post or sell.
OSINT email lookup and username search API: which accounts exist for an identifier across hundreds of platforms, plus breach history and web mentions.
Candidate email verification and pre-employment digital footprint checks that confirm what a candidate supplied - with consent, never a background check.
An email enrichment API that returns verified facts: which platforms an email address is registered on, its breach history and public web mentions. Verified or omitted, never guessed.
Detect mule accounts at onboarding by checking whether an applicant’s email or phone has any registration history at all - the signal a genuine document cannot supply.
Start with 15 free lookups, shared across your team. No card required.
The questions every fraud, compliance and OSINT team asks before the first request.