ZeroTrace OSINT
Phone Lookup
E.164 parsing, country, carrier, line type, timezone, currency, and dial-out format.
The phone lookup tool parses an international phone number, normalises it to E.164, and returns the country, region, carrier (where derivable), line type (mobile / fixed / VoIP), timezones, and the conventional dial-out formats from inside and outside the country.
For OSINT, the value is mostly the country / region / carrier triple — enough context to interpret a phone number you found in a breach, a leak, or a contact card.
What you get
| Field | What it tells you |
|---|---|
| E.164 normalised | The canonical international format (+49 30 12345678) |
| Country | Country name + ISO code + flag emoji |
| Capital | Capital city of the country |
| Currency | Currency code + symbol used in the country |
| Region | Sub-national region (state, province, prefecture) where derivable |
| Carrier | Carrier name where derivable from the number |
| Line type | Mobile / fixed / VoIP / toll-free / premium-rate / unknown |
| Timezones | All timezones the country spans |
| Local format | How a local resident would dial it |
| International format | How someone outside the country would dial it |
| Country flag emoji | Visual aid for cross-border casework |
Why country / carrier / line type matter
For most OSINT scenarios, those three fields tell you almost everything you need:
- Country — frames the cultural and legal context. A US phone in a Spanish-language breach context is different from a US phone in a US-domestic phishing context.
- Carrier — particularly for mobile, the carrier sometimes maps to a region or a customer demographic. For VoIP carriers (Twilio, Bandwidth, Telnyx) the carrier signals "this is probably a service number, not a person."
- Line type — distinguishes a mobile (probably a person) from a VoIP / toll-free (probably a service) from a fixed line (probably a business or a residence).
VoIP detection
A line-type of "VoIP" is significant. VoIP numbers can be acquired and discarded cheaply, often without the customer-identification requirements that apply to mobile numbers in many countries. A phone number that resolves to a VoIP carrier is a different forensic signal than one that resolves to a major mobile carrier.
The tool flags major VoIP carriers (Twilio, Bandwidth, Telnyx, Sonetel, etc.) by name where derivable.
A VoIP-carrier phone presented as someone's "personal mobile number" is one of the cheaper fraud signals available. Confirming line type is often the fastest way to distinguish a real personal contact from a throwaway service number.
Number portability caveat
Carrier identification is probabilistic in countries with mobile number portability. The original carrier-allocation block tells you who the number was allocated to; the current carrier may differ if the number has been ported. The tool surfaces the original allocation and notes when the country has portability.
For investigative use, treat carrier as "carrier the number was originally assigned to."
Dial-out format examples
A pair of fields show:
- From inside the country — the format a local resident would dial (often without the country code).
- From outside the country — the international format with country code prefix.
Useful for both confirming you have the number formatted correctly and for documenting how the number would actually be reached.
Pivots
Phone numbers do not pivot heavily into other tools. The natural follow-ups:
- For a phone that appears in a breach or leak: breach lookup on the email associated with the same record.
- For a phone in a person-investigation profile: person investigation composer to bring all identity tools around the same subject.
Bulk phone lookup
Bulk paste accepts many numbers and returns country / carrier / line type per number in an aggregate table. Useful for triaging a list of contacts dropped from a CRM, a breach, or a contact-importer.
Sources
- Bundled phone-number-parsing library (libphonenumber-equivalent) for E.164 parsing, country, region, carrier, line-type.
- A bundled country-info catalog for capital, currency, timezone(s), flag.
Phone lookup is fully local — no network calls are made, the tool is fast and works offline.