How To Find Someone's Domain_6 By Phone Number

Phone numbers often contain clues to the owner's identity and tin bring up a lot of information during an OSINT investigation. Starting with a phone number, we can search through a large number of online databases with but a few clicks to discover data about a phone number. It can include the carrier, the possessor's name and address, and fifty-fifty connected online accounts.

While a phone number may not seem like much information to give out, an OSINT researcher can quickly discover information that ties a telephone number to a variety of other clues. The data can be used to find whether a telephone number is a throwaway VoIP number used to hide the owner's identity or a cell phone belonging to a real person. In the event of buying something online or replying to an apartment advertising, this data is incredibly useful to know.

For a hacker, the ability to plow a phone number into multiple continued online accounts, email addresses, or screen names makes it a perfect starting bespeak for bigger things to come. A quick scan to discover the carrier of a phone number tin provide everything a hacker needs for a well-crafted phishing email pretending to be from the victim's carrier. Once a hacker tin identify other details almost the target that may exist attached to the phone number, it's easy to place the weakest link and attack the target using whatever data that'south dug up.

• Don't Miss: Use Facial Recognition for OSINT on Individuals & Companies

Editor's note: The OSINT Tools by Mike Bazzel featured in this article was taken down from his website due to increased DDoS-style attacks, as well equally DMCAs and cease-and-desists from some of the tools included. Phoneinfoga will still work in this guide, only for the others, you can try using each company's individual tool instead. You can encounter how information technology used to work, nevertheless, in the video and text beneath.

OSINT Tools for Phone Numbers

For chop-chop searching through phone numbers, nosotros tin employ both command-line and browser-based tools. Command line tools give the advantage of elementary operation and greater customization just require you to have Python installed and updated. Today, nosotros'll exist using a tool chosen Phoneinfoga to speedily determine if the number is associated with a dispensable telephone number.

            ___ _                       _____        __    / _ \ |__   ___  _ __   ___  \_   \_ __  / _| ___   __ _  __ _   / /_)/ '_ \ / _ \| '_ \ / _ \  / /\/ '_ \| |_ / _ \ / _` |/ _` |  / ___/| | | | (_) | | | |  __/\/ /_ | | | |  _| (_) | (_| | (_| |  \/    |_| |_|\___/|_| |_|\___\____/ |_| |_|_|  \___/ \__, |\__,_|                                                       |___/  PhoneInfoga Ver. v1.6.4  Coded by Sundowndev          

Ane of the best resources for OSINT is Mike Bazzel's IntelTechniques website, which we'll as well be focusing on here. This website contains several custom tools that Bazzel had organized to exist useful for researchers. Many of these tools are already in Buscador OS, a virtual machine that tin can exist run to provide an operating system geared towards OSINT investigations.

• Don't Miss: Use the Buscador OSINT VM for Conducting Online Investigations

The Scenario

Equally an instance, nosotros'll take a sample business organisation listing from a classified ad. How would nosotros verify this? If the advertizing claims to be from a licensed professional, could nosotros track down a license attached to the phone number? A simple reverse phone number lookup may find something, but to come across the real information, you have to dig deeper and apply more than merely one reverse number lookup tool.

Step i: Install Phoneinfoga

To supplement the data you detect online afterward, you lot tin apply a Python tool called Phoneinfoga, which allows you to search for details about phone numbers from the command line. To use Phoneinfoga, open a terminal window and enter the following four commands one past 1 or at the same time.

            ~$ git clone https://github.com/sundowndev/PhoneInfoga ~$ cd PhoneInfoga/ ~/PhoneInfoga$ python3 -m pip install -r requirements.txt ~/PhoneInfoga$ cp config.example.py config.py  Cloning into 'PhoneInfoga'... remote: Enumerating objects: 85, done. remote: Counting objects: 100% (85/85), washed. remote: Compressing objects: 100% (79/79), done. remote: Full 886 (delta 43), reused 12 (delta half-dozen), pack-reused 801 Receiving objects: 100% (886/886), 247.47 KiB | 550.00 KiB/s, done. Resolving deltas: 100% (461/461), done.  Requirement already satisfied: requests==2.21.0 in /usr/lib/python3/dist-packages (from -r requirements.txt (line i)) (2.21.0) Collecting bs4==0.0.one (from -r requirements.txt (line 2))   Downloading https://files.pythonhosted.org/packages/x/ed/7e8b97591f6f456174139ec089c769f89a94a1a4025fe967691de971f314/bs4-0.0.ane.tar.gz Requirement already satisfied: html5lib==1.0.1 in /usr/lib/python3/dist-packages (from -r requirements.txt (line iii)) (1.0.1) Collecting phonenumbers==8.ten.2 (from -r requirements.txt (line 4))   Downloading https://files.pythonhosted.org/packages/d9/62/a176cfaf6edb90b68ae3426cf4fb8fd98189df550e2143cafc66bb2c1b82/phonenumbers-eight.10.2-py2.py3-none-any.whl (3.2MB)     100% |████████████████████████████████| three.2MB 381kB/s Collecting argparse==ane.ii.1 (from -r requirements.txt (line 5))   Downloading https://files.pythonhosted.org/packages/6f/advertizing/86448942ad49c5fe05bfdf7ebc874807f521dfcca5ee543afaca2974ad5a/argparse-1.2.1.tar.gz (69kB)     100% |████████████████████████████████| 71kB 5.8MB/s Collecting urllib3==1.24.2 (from -r requirements.txt (line 6))   Downloading https://files.pythonhosted.org/packages/df/1c/59cca3abf96f991f2ec3131a4ffe72ae3d9ea1f5894abe8a9c5e3c77cfee/urllib3-1.24.ii-py2.py3-none-whatsoever.whl (131kB)     100% |████████████████████████████████| 133kB 7.4MB/s Collecting colorama==0.4.1 (from -r requirements.txt (line 7))   Downloading https://files.pythonhosted.org/packages/4f/a6/728666f39bfff1719fc94c481890b2106837da9318031f71a8424b662e12/colorama-0.4.1-py2.py3-none-whatsoever.whl Requirement already satisfied: beautifulsoup4 in /usr/lib/python3/dist-packages (from bs4==0.0.1->-r requirements.txt (line 2)) (4.seven.i) Building wheels for collected packages: bs4, argparse   Running setup.py bdist_wheel for bs4 ... done   Stored in directory: /root/.enshroud/pip/wheels/a0/b0/b2/4f80b9456b87abedbc0bf2d52235414c3467d8889be38dd472   Running setup.py bdist_wheel for argparse ... done   Stored in directory: /root/.cache/pip/wheels/30/35/38/aa7be52cca01ed539bd6f3789edb8489691cc7d9a010cbc982 Successfully built bs4 argparse Installing collected packages: bs4, phonenumbers, argparse, urllib3, colorama   Constitute existing installation: urllib3 1.24.1     Not uninstalling urllib3 at /usr/lib/python3/dist-packages, outside environment /usr     Tin't uninstall 'urllib3'. No files were found to uninstall.   Institute existing installation: colorama 0.3.7     Not uninstalling colorama at /usr/lib/python3/dist-packages, outside environment /usr     Can't uninstall 'colorama'. No files were plant to uninstall. Successfully installed argparse-one.ii.one bs4-0.0.one colorama-0.4.1 phonenumbers-8.ten.2 urllib3-1.24.two          

Next, you can run the program with the options displayed in the help file.

            ~/PhoneInfoga$ python3 phoneinfoga.py -h  usage: phoneinfoga.py -n <number> [options]  Advanced information gathering tool for phone numbers (https://github.com/sundowndev/PhoneInfoga) version v1.6.4  optional arguments:   -h, --aid            evidence this aid bulletin and get out   -n number, --number number                         The phone number to scan (E164 or international                         format)   -i input_file, --input input_file                         Phone number listing to browse (ane per line)   -o output_file, --output output_file                         Output to save scan results   -s scanner, --scanner scanner                         The scanner to use   --recon               Launch custom format reconnaissance   --no-ansi             Disable colored output   -v, --version         Show tool version          

Step ii: Search a Telephone Number with Phoneinfoga

To search for a phone number, we just need to add the -n flag and and then any number nosotros desire to search for. If you lot utilise the --recon argument, information technology will perform an avant-garde search.

            ~/PhoneInfoga$ python3 phoneinfoga.py -due north 1717███9539 --recon      ___ _                       _____        __    / _ \ |__   ___  _ __   ___  \_   \_ __  / _| ___   __ _  __ _   / /_)/ '_ \ / _ \| '_ \ / _ \  / /\/ '_ \| |_ / _ \ / _` |/ _` |  / ___/| | | | (_) | | | |  __/\/ /_ | | | |  _| (_) | (_| | (_| |  \/    |_| |_|\___/|_| |_|\___\____/ |_| |_|_|  \___/ \__, |\__,_|                                                       |___/  PhoneInfoga Ver. v1.6.4  Coded by Sundowndev  [!] ---- Fetching informations for 1717███9539 ---- [!] [*] Running local scan... [+] International format: +1 717-███-9539 [+] Local format: 717███9539 [+] State establish: Us (+1) [+] City/Area: Pennsylvania [+] Carrier: [+] Timezone: America/New_York [i] The number is valid and possible. [*] Running Numverify.com scan... [!] Numverify.com is not available [*] Running OVH scan... [*] Running custom format reconnaissance... Footprint reconnaissance for 717███9539 [+] URL: https://www.reverse-lookup.co/717-███-9539 [+] URL: http://staging.thatsthem.com/phone/717-███-9539 [+] URL: https://www.revealname.com/717-███-9539 [+] URL: https://www.okcaller.com/717███9586 [+] URL: http://world wide web.ncsusigmanu.com/chiliad-i/717/ig/███/9 Footprint reconnaissance for 1 717███9539 Footprint reconnaissance for 1 717 ███9539 Footprint reconnaissance for 717 ███9539 [+] URL: http://phonelookupus.com/who-called-me/i/432███1704 Footprint reconnaissance for 717-███9539 [+] URL: http://phonelookupus.com/who-called-me/ane/432███1704 Footprint reconnaissance for 717-███-9539 [+] URL: http://www.buzzfile.com/business/Rauch-█████████-███-██-██-████ [+] URL: https://www.whitepages.com/phone/1-717-███-9539 [+] URL: https://safer.fmcsa.dot.gov/query.asp?query_type=queryCarrierSnapshot&query_param=USDOT&query_string=i███367 [+] URL: https://www.manta.com/c/mtmr6yw/rauch-█████████-███ [+] URL: https://www.kw.com/kw/amanuensis/██████rauch Footprint reconnaissance for +1 717-███-9539 [+] URL: https://phonescheck.com/717-███ [+] URL: https://mobphonescheck.com/717-███ [+] URL: http://uk.popularphotolook.com/717-███-95 [+] URL: https://ownertelephone.com/1717███7777 [+] URL: http://opencallerlistings.com/listing/717-███-95 Footprint reconnaissance for (+1)717-███-9539 [+] URL: https://www.whitepages.com/phone/one-717-███-9539 [+] URL: https://www.whitepages.com/phone/one-717-███-9XXX [+] URL: https://www.whitepages.ca/telephone/1-717-███-9538 [+] URL: http://www.google.comhttp://mrnumber.com/1-717-███%3Fpage%3D4%26thousand%3D9 [+] URL: http://www.google.comhttp://uk.popularphotolook.com/717-███-95 Footprint reconnaissance for +1/717-███-9539 [+] URL: https://www.whitepages.com/phone/1-717-███-9539 [+] URL: https://world wide web.whitepages.com/telephone/i-717-███-95XX [+] URL: https://world wide web.whitepages.ca/phone/1-717-███-9538 [+] URL: http://mrnumber.com/1-717-███%3Fpage%3D4%26thousand%3D9 [+] URL: http://great britain.popularphotolook.com/717-███-95 Footprint reconnaissance for (717) ███9539 [+] URL: http://phonelookupus.com/who-chosen-me/1/432███1704 Footprint reconnaissance for (717) ███-9539 [+] URL: http://www.buzzfile.com/business organization/Rauch-█████████-███-██-██-████ [+] URL: https://www.whitepages.com/telephone/1-717-███-9539 [+] URL: https://safer.fmcsa.dot.gov/query.asp?query_type=queryCarrierSnapshot&query_param=USDOT&query_string=1███367 [+] URL: https://www.manta.com/c/mtmr6yw/rauch-█████████-███ [+] URL: https://world wide web.kw.com/kw/agent/██████rauch Footprint reconnaissance for (717) ███.9539 Footprint reconnaissance for (717)███9539 [+] URL: http://phonelookupus.com/who-called-me/i/432███1704 Footprint reconnaissance for (717)███-9539 [+] URL: http://world wide web.buzzfile.com/business organization/Rauch-█████████-███-██-██-████ [+] URL: https://world wide web.whitepages.com/phone/1-717-███-9539 [+] URL: https://safer.fmcsa.dot.gov/query.asp%3Fquery_type%3DqueryCarrierSnapshot%26query_param%3DUSDOT%26query_string%3D1███367 [+] URL: https://www.manta.com/c/mtmr6yw/rauch-█████████-███ [+] URL: https://www.kw.com/kw/agent/██████rauch Footprint reconnaissance for (717)███.9539 [*] Running OSINT footprint reconnaissance... [i] Generating scan URL on 411.com... [+] Browse URL: https://world wide web.411.com/phone/ane-717-███-9539          

            Would yous like to utilise an boosted format for this number ? (y/N)  northward  [i] ---- Web pages footprints ---- [i] Searching for footprints on web pages... (limit=10) [+] Result found: https://www.reverse-lookup.co/717-███-9539 [+] Result plant: https://www.revealname.com/717-███-9539 [+] Result establish: https://who-called.biz/country/pennsylvania/phones/1717███0000 [+] Event establish: http://five-postal-cn.com/phones/note_17172780000_1717███9999_all2.htm [+] Result found: http://www.jihaoba.com/haoduan/xiaogan/1717███.htm [+] Result found: http://sm.cidu.internet/gujialogall.asp?hm=1717███ [+] Upshot found: https://review-call.com/1717███0000 [+] Consequence plant: https://number-review.com/1717███0000 [+] Result establish: https://fast-scan.com/1717███0000 [i] Searching for documents... (limit=10) [i] ---- Reputation footprints ---- [i] Searching for reputation report on whosenumber.info... [i] Searching for phone fraud footprints... [i] Searching for reputation report on findwhocallsme.com... [i] Searching for reputation report on yellowpages.ca... [i] Searching for reputation report on phonenumbers.ie... [i] Searching for reputation report on who-calledme.com... [i] Searching for reputation report on usphonesearch.net... [i] Searching for reputation report on whocalled.u.s.a.... [i] Searching for reputation written report on quinumero.info... [i] Searching for reputation report on uk.popularphotolook.com... [i] Generating URL on scamcallfighters.com... [+] http://www.scamcallfighters.com/search-phone-1717███9539.html          

            Would you like to search for temporary number providers footprints ? (Y/northward) due north  [i] ---- Social media footprints ---- [i] Searching for footprints on facebook.com... [i] Searching for footprints on twitter.com... [i] Searching for footprints on linkedin.com... [i] Searching for footprints on instagram.com... [i] ---- Phone books footprints ---- [i] Generating URL on True People... [+] https://www.truepeoplesearch.com/results?phoneno=+1717-███-9539 [i] Searching for footprints on numinfo.net... [i] Searching for footprints on sync.me... [i] Searching for footprints on whocallsyou.de... [i] Searching for footprints on pastebin.com... [i] Searching for footprints on whycall.me... [i] Searching for footprints on locatefamily.com... [i] Searching for footprints on spytox.com...  Would y'all like to rerun OSINT scan ? (e.yard to use a different format) (y/North) n  [i] Scan finished.          

Sometimes, this tool can get you temporarily blacklisted from Google searches because of the way it'due south programmed. It'south annoying but easily resolved with a Google abuse exemption, detailed at the end of the video above.

• Don't Miss: Uncover Subconscious Subdomains to Reveal Internal Services

As y'all can come across above, there are lots of links to dive into, and right abroad the name and business organisation associated with the telephone number are available in the output.

Step 3: Access the IntelTechniques OSINT Portal

At present, permit's concentrate on the web tools that are free on Bazzel's website since they're a little bit easier to piece of work with than with the command line tool to a higher place. To follow along, you can go to inteltechniques.com/menu.html, then click on the "Telephone Number" tab.

A submenu appears when you click on "Telephone Number," and you'll need to select the "Telephone Search Tool" to bring up the folio that will permit us to search many tools at once.

As yous tin can run into, it's a healthy mix of people-searching tools, phonebook directories, scam reporting websites, and social media connections. These are gratuitous, public resources combined into one like shooting fish in a barrel-to-employ search tool, allowing anyone with a browser and internet connection to brainstorm researching who is on the other stop of a phone number.

We can input a number into each tool one past 1, but the easiest way is to enter the number into the field at the top, and click "Populate All."

• Don't Miss: Use SpiderFoot for OSINT Gathering

Footstep 4: Search a Telephone Number on IntelTechniques

In the search tool, enter the number into the field next to the "Populate All" button, then click the button to auto-populate the number into the balance of the fields. Side by side, select "Submit All" nether the list of services to run all searches on the telephone number. All of the services volition open up in different tabs or popular-ups with the search already submitted (you may need to allow pop-ups in your browser).

Step 5: Search Results for Clues & Patterns

Now, check out some of the resources loaded from the search. Here, some of the people searching services accept turned our telephone number into a name.

Forth with the person's proper name is a startling amount of data, the nigh important of which is a location and address for us to tie together farther details. We found a lot of results with the proper noun, making a pretty strong likelihood that this is the person behind our ad. And then how would we prove they are a licensed professional?

Step 6: Locate Information That Can Exist Verified

On another search site issue, nosotros tin can see the name of a business associated with the telephone number, which is what we're looking for! If we can tie the name of a visitor and the proper noun we've found associated with the number, nosotros tin look up a source we trust, like a state listing of agile businesses, to determine whether this is a real business. Here, we have a name, address, and business proper name; everything we need to verify whether a business exists.

Step vii: Verify with Master Source Data

To check out the data we found, we should look for some primary source information that backs up our discovery. In our case, the best database to search is the Department of Country business database for the country we discovered the business concern in. Here, we were able to pull a valid business listing, one which matches the address nosotros previously found. It appears the person behind the online advertisement is honest — they are a licensed professional person after all.

Phone Numbers Can Tie Everything Together

As a starting bespeak, a phone number can provide everything you need to locate information almost a target. With tools like Phoneinfoga, you lot can rapidly find whether a phone number is a throwaway or a legitimate number. If the number is real, the IntelTecniques website tools can piece together clues to build a picture show of the person backside the phone number, sometimes quite literally.

With the right tools, a single telephone number can lead you lot from clue to clue, piecing together everything you need to larn about a target.

I hope you enjoyed this guide to using phone numbers in an OSINT investigation! If y'all accept any questions almost this tutorial on phone number recon, or if you take a annotate, inquire below or feel gratuitous to reach me on Twitter @KodyKinzie.

Want to start making money as a white hat hacker? Jump-beginning your hacking career with our 2020 Premium Ethical Hacking Certification Training Bundle from the new Null Byte Shop and go over 60 hours of training from cybersecurity professionals.

Buy Now (90% off) >

Other worthwhile deals to bank check out:

• 97% off The Ultimate 2021 White Hat Hacker Certification Bundle
• 99% off The 2021 All-in-One Information Scientist Mega Package
• 98% off The 2021 Premium Learn To Lawmaking Certification Packet
• 62% off MindMaster Listen Mapping Software: Perpetual License

Cover photo by Justin Meyers/Null Byte; Screenshots by Kody/Cypher Byte

How To Find Someone's Domain_6 By Phone Number,

Source: https://null-byte.wonderhowto.com/how-to/find-identifying-information-from-phone-number-using-osint-tools-0195472/

Posted by: brownbarromempose.blogspot.com

Share this post