phone-osint

Compare original and translation side by side

🇺🇸

Original

English

🇨🇳

Translation

Chinese

Phone OSINT

电话号码OSINT

A phone number links messaging apps, account recoveries, and public listings. Input: one or more phone numbers. Do not call or text the target as a technique.

电话号码关联着即时通讯应用、账户恢复渠道以及公开列表。输入：一个或多个电话号码。请勿以拨打或发送短信作为调查手段。

Step 1 — Authorized scope

步骤1 — 授权范围

Read ../../ETHICS.md. Note the objective. Done when noted.

阅读../../ETHICS.md文件，明确调查目标。确认完成则标记为已完成。

Step 2 — Normalize & classify

步骤2 — 标准化与分类

Put the number in E.164 (

+<country><number>

). Identify country, region, carrier, and line type (mobile / landline / VoIP):

bash

phoneinfoga scan -n "+15551234567"

VoIP numbers (Google Voice, TextNow) signal a possible burner/sockpuppet. Done when country, carrier, and line type are recorded.

将号码转换为E.164格式（

+<国家代码><号码>

），识别号码所属国家、地区、运营商以及线路类型（移动/固定电话/VoIP）：

bash

phoneinfoga scan -n "+15551234567"

VoIP号码（如Google Voice、TextNow）可能表明该号码是一次性号码或傀儡账户。当记录下国家、运营商和线路类型时，此步骤完成。

Step 3 — Messaging & app presence

步骤3 — 即时通讯应用关联情况

Check whether the number is registered on messaging platforms via their own "add contact" surfaces — WhatsApp, Telegram, Signal, Viber — which may expose a display name or profile photo. Run

reverse-image-search

on any avatar. Done when app presence and any exposed name/photo are noted.

通过各平台的“添加联系人”功能，检查该号码是否在WhatsApp、Telegram、Signal、Viber等即时通讯平台注册，这可能会暴露用户的显示名称或头像。对获取到的头像执行

reverse-image-search

。当记录下应用关联情况及暴露的名称/头像时，此步骤完成。

Step 4 — Linked accounts & listings

步骤4 — 关联账户与公开列表

Reverse-lookup and caller-ID services (Truecaller-style), business directories, and classified listings.
```
google-dorking
```
the number in multiple formats (with/without country code, spaces, dashes).
```
breach-data-analysis
```
— numbers appear in breach dumps tied to accounts.

Done when public listings and linked accounts are captured.

使用反向查询和来电识别服务（如Truecaller类工具）、商业目录以及分类信息列表进行查询。
以多种格式（带/不带国家代码、带空格/短横线）对号码执行
```
google-dorking
```
搜索。
```
breach-data-analysis
```
——数据泄露 Dump 中可能包含与账户绑定的电话号码。

当捕获到公开列表及关联账户信息时，此步骤完成。

Step 5 — Pivot

步骤5 — 拓展调查

Owner name →
```
person-osint
```
Recovered email/handle →
```
email-osint
```
/
```
username-osint
```
Business number →
```
company-osint
```

Done when recovered selectors are followed or ruled out.

所有者姓名 →
```
person-osint
```
恢复的邮箱/用户名 →
```
email-osint
```
/
```
username-osint
```
企业号码 →
```
company-osint
```

当跟进或排除所有获取到的调查线索时，此步骤完成。

Step 6 — Report

步骤6 — 生成报告

Run

osint-report

. State line type, carrier, app presence, and owner attribution with confidence and sources.

运行

osint-report

工具，在报告中注明线路类型、运营商、应用关联情况、所有者身份归属，并标注信息可信度及来源。