sundowndev/phoneinfoga

Security & Privacy

A self-hosted OSINT reconnaissance tool that checks international phone numbers for carrier, line type, and public footprint.

18,357
6,250
Go
GPL-3.0
8 years old

Overview

PhoneInfoga is a self-hosted information-gathering framework for international phone numbers. Given a number, it can confirm whether the number exists, then collect basic metadata such as country, area, carrier, and line type. Further scanners attempt to identify a VoIP provider or an owner through external APIs, phone books, and search engines.

It is aimed at OSINT researchers and investigators who want a repeatable starting point rather than a black-box service. The project is explicit that it is a helper: it does not provide verified data, real-time tracking, precise location, or any form of phone hacking, and the scanner collection must be configured before results become useful.

Getting started

The documented entry points are the project documentation, the REST API reference, and the published releases. A typical self-hosted flow is:

  1. Read the documentation at the project site to see the available installation methods and scanner configuration.
  2. Obtain the software from the latest release or the Docker image, choosing the method described in the docs for your environment.
  3. Configure the external scanners you intend to use (API keys and similar settings), since the tool does not work out of the box for footprinting.
  4. Run a scan either from the browser GUI or through the REST API, passing an international phone number in E.164-style form.
  5. Review the reported country, line type, and carrier first; treat any owner or reputation findings as leads that need manual verification.

The README does not include a full command-line walkthrough, so follow the installation and configuration sections in the official docs rather than guessing commands. Programmatic integration is supported through Go modules, and the API schema is published as OpenAPI.

Constraints

  • The project is described as stable but unmaintained: upcoming bugs will not be fixed and the repository may be archived.
  • Footprinting depends on external APIs and search engines, so effectiveness depends on configuring those scanners and on their availability and rate limits.
  • Results are not claimed to be relevant or verified; the tool does not locate a phone precisely or track its owner in real time.
  • The software is licensed under GPL-3.0, which matters if you plan to redistribute or embed it.
  • Scans should be used within lawful investigative boundaries; the tool is an OSINT aid, not an authority on a number's owner.

HotRepo's take

On the Go daily list for 2026-11-02, the project ranked 9th and added 15 stars, bringing it to 18,357 stars and 6,250 forks. That is a mature repository with a large existing footprint, and the single recorded snapshot shows it still drawing modest daily attention despite no longer being actively maintained. The recent movement is better read as continued discovery of an established OSINT utility than as evidence of new feature work; users should factor the unmaintained status into any long-term use.

Project source and documentation

Written by AI from the project's README, updated . The project's own docs are the source of truth.

Hacker News