I endorse nothing you’ll do with this tool, use it at your own risks.

Phone number OSINT with Telnyx

Let’s say some scammer or aggressive dude is calling you a bunch of time, or you just need infos about a phone number, well it’s not the most funny part of OSINT.

Currently, I see 3 majors sources of recon:

  • Yellow pages
  • Spam lists
  • Breaches

They’re not always up-to-date, and sometimes limited by the amount of infos listed.

Well, Telnyx (VOIP Provider) has a great tool to recon a phone number, it’s free and no need for an account.

Normally, I find most phone books websites to be full of spam and inaccurate informations. Here, Telnyx provides a great way to get infos about the landline carrier, region, or event name of the person using it (which I find very complicated from other resources). And it technically works for a majority of countries (not always, such as Canada, we’ll see that later).

It also works with an API, and the results comes in JSON. Just be careful to choose the correct area code before the number.

The tool can be found at this URL:

From there, you can choose the type of info you’re looking for.

lookup

The “Canadian” problem

However, it seems Canadian numbers are not recognized (and automatically converted to US numbers), but it’s possible to use the +1 area code (similar between the US and Canada), and while choosing the country of origin to be the US, pasting the Canadian number can be accepted (for some numbers you also get accurate data, while others are not recognized, so it’s to be continued I guess…).

Major operators from most countries works, but it is interesting because privacy policies seem to influence the data collected during my tests. I could find more information for US numbers than for European numbers, but again, it depends on multiple factors.

In fact, Australian, German and Spanish numbers were not accurate, again, it depends on various factors.

Finally, VOIP and landline numbers are often less complete.

Here’s a result for a US number (landline)

We have basics infos, such as the area the phone is active (or registered), landline result

And another US number (phone)

This time we get the full name of the caller.

phone result