GhostIntel is a Python-based OSINT framework for digital investigation using public data such as username, email, domain, IP address, and phone number.
OSINT Framework Indonesia โข Digital Investigation Tools โข Public Data
GhostIntel is a Python-based OSINT framework designed to assist digital investigation using publicly available data. This tool combines various reconnaissance techniques such as username analysis, email investigation, domain scanning, IP address lookup, and phone number intelligence into one lightweight and easy-to-use system.
GhostIntel focuses on collecting intelligence from open sources (Open Source Intelligence) without performing any illegal access to target systems. Developed by Ruyynn, this project aims to provide an OSINT toolset that is fast, modular, and easy to use for security researchers, developers, and cybersecurity learners.
With a modular approach, GhostIntel allows easy addition of new modules so it can continuously evolve alongside modern digital investigation needs.
โ
Zero API Keys โ Use immediately, no registration or payment required
โ
Async & Fast โ Parallel investigation, far faster than similar tools
โ
Auto Entity Detect โ Input anything, GhostIntel detects the type automatically
โ
Multi-Country โ Phone OSINT for 5 countries at once
โ
100+ Platforms โ Username checked across 100+ sites simultaneously
โ
Data Correlation โ All findings from different modules linked automatically
โ
Export Reports โ Save results to JSON, HTML, or TXT
โ
Made in Indonesia โ Optimized for local investigation needs
| Scenario | Description |
|---|---|
| ๐ Digital Investigation | Collect information from various public sources |
| ๐ก๏ธ Security Reconnaissance | Initial footprinting before security testing |
| ๐ง OSINT Learning | Practical learning tool for cybersecurity beginners |
| ๐ Bug Bounty Recon | Identify initial target information before testing |
| ๐ Research & Analysis | Collect open data for security analysis and research |
No need to specify the target type. GhostIntel detects it automatically!
โโโ(ghostintelใฟlocalhost)-[~]
โโ$ ghostintel investigate ruyynn
[+] Detected: USERNAME
โโโ(ghostintelใฟlocalhost)-[~]
โโ$ ghostintel investigate mail@test.com
[+] Detected: EMAIL
โโโ(ghostintelใฟlocalhost)-[~]
โโ$ ghostintel investigate 08123456789
[+] Detected: PHONE (Indonesia)
โโโ(ghostintelใฟlocalhost)-[~]
โโ$ ghostintel investigate example.com
[+] Detected: DOMAIN
โโโ(ghostintelใฟlocalhost)-[~]
โโ$ ghostintel investigate 8.8.8.8
[+] Detected: IP ADDRESSThe only Indonesian OSINT tool with multi-country phone lookup support!
๐ฎ๐ฉ Indonesia (+62)
ghostintel -p 08123456789| Info | Result |
|---|---|
| Provider | Telkomsel / Indosat / XL / Three / Smartfren |
| Type | Mobile / Fixed Line |
| Valid | โ Yes |
| Format | +62 812-3456-789 |
| Location | Jakarta / West Java / etc |
Detected Providers:
| Prefix | Provider |
|---|---|
| 0811, 0812, 0813, 0821, 0822, 0823, 0851, 0852, 0853 | ๐ฑ Telkomsel |
| 0814, 0815, 0816, 0855, 0856, 0857, 0858 | ๐ฑ Indosat |
| 0817, 0818, 0819, 0877, 0878, 0879 | ๐ฑ XL |
| 0895, 0896, 0897, 0898, 0899 | ๐ฑ Three |
| 0881, 0882, 0883, 0884, 0885, 0886, 0887, 0888, 0889 | ๐ฑ Smartfren |
๐บ๐ธ USA (+1)
ghostintel -p +12125551234| Info | Result |
|---|---|
| Provider | AT&T / Verizon / T-Mobile |
| Area Code | 212 (New York) |
| Type | Mobile |
| Valid | โ Yes |
Area Codes:
| Code | City | Provider |
|---|---|---|
| 212, 646 | New York | AT&T / Verizon |
| 310, 818 | Los Angeles | T-Mobile / AT&T |
| 415, 510 | San Francisco | AT&T |
| 617 | Boston | Verizon |
| 702 | Las Vegas | T-Mobile |
| 832 | Houston | T-Mobile |
๐ฌ๐ง UK (+44)
ghostintel -p +447700123456| Info | Result |
|---|---|
| Provider | EE / O2 / Vodafone / Three |
| Type | Mobile |
| Valid | โ Yes |
Mobile Prefixes:
| Prefix | Provider |
|---|---|
| 7700โ7709, 7750โ7752 | EE |
| 7710โ7719, 7740โ7742 | O2 |
| 7720โ7725 | Vodafone |
| 7730โ7735 | Three |
๐ฒ๐พ Malaysia (+60)
ghostintel -p +60123456789| Info | Result |
|---|---|
| Provider | Maxis / Celcom / DiGi / U Mobile |
| Type | Mobile |
| Valid | โ Yes |
Mobile Prefixes:
| Prefix | Provider |
|---|---|
| 012, 017 | Maxis |
| 013, 019 | Celcom |
| 010, 016 | DiGi |
| 011, 018 | U Mobile |
| 014, 015 | Maxis/Celcom / Tune Talk |
๐ฎ๐ณ India (+91)
ghostintel -p +919876543210| Info | Result |
|---|---|
| Provider | Airtel / Vodafone / Jio / BSNL |
| Type | Mobile |
| Valid | โ Yes |
Mobile Prefixes:
| Prefix | Provider |
|---|---|
| 9810โ9819 | Airtel |
| 9820โ9825 | Vodafone |
| 9870โ9874 | Jio |
| 8888โ8890 | BSNL |
| 9830โ9834 | Idea |
Check usernames in parallel across 100+ platforms in one run โ Facebook, Instagram, Twitter, GitHub, TikTok, Steam, Kaskus, and many more.
Email investigation: MX records, SPF, DMARC, Gravatar, disposable & free provider detection.
Full DNS records: A, AAAA, NS, MX, TXT, SOA, CNAME + HTTP/HTTPS status + website title.
Geolocation, Reverse DNS, RDAP to 5 global RIRs (ARIN, RIPE, APNIC, LACNIC, AFRINIC), proxy & hosting detection.
Generate professional reports in 3 formats!
# HTML Report โ visual & interactive
ghostintel investigate target --format html -o report.html
# JSON Report โ for parsing & further integration
ghostintel investigate target --format json -o data.json
# TXT Report โ simple & lightweight
ghostintel investigate target --format txt -o output.txtMethod 1 โ Direct Clone
git clone https://github.com/ruyynn/GhostIntel.git
cd GhostIntel
pip install -r requirements.txt
python ghostintel.py -hMethod 2 โ Virtual Environment (Recommended)
git clone https://github.com/ruyynn/GhostIntel.git
cd GhostIntel
python -m venv venv
source venv/bin/activate # Linux / macOS
# venv\Scripts\activate # Windows
pip install -r requirements.txt
python ghostintel.py -hBasic Commands
python ghostintel.py -h # Help
python ghostintel.py -v # Version
python ghostintel.py investigate TARGET # Auto-detect
python ghostintel.py -u username # Username
python ghostintel.py -e email@example.com # Email
python ghostintel.py -p 08123456789 # Phone Indonesia
python ghostintel.py -p +12125551234 # Phone USA
python ghostintel.py -p +447700123456 # Phone UK
python ghostintel.py -p +60123456789 # Phone Malaysia
python ghostintel.py -p +919876543210 # Phone India
python ghostintel.py -d example.com # Domain
python ghostintel.py -i 8.8.8.8 # IP AddressReport & Output
python ghostintel.py -u username --report
python ghostintel.py -d example.com --format html -o example.html
python ghostintel.py -e email@example.com --format json -o email.json
python ghostintel.py -p 08123456789 --format txt -o phone.txtAdvanced Options
python ghostintel.py -d example.com --timeout 30 # Custom timeout
python ghostintel.py -u username --threads 50 # More threads
python ghostintel.py -u username --no-color # Disable colorsPython 3.8+
aiohttp 3.9.0+
beautifulsoup4 4.12.0+
dnspython 2.6.0+
phonenumbers 8.13.0+
rich 13.7.0+
tldextract 5.1.0+
jinja2 3.1.0+
aiofiles 23.2.0+
colorama 0.4.6+
๐ GhostIntel/
โโโ ๐ ghostintel.py โ Entry point & CLI parser
โโโ ๐ requirements.txt
โโโ ๐ README.md
โโโ ๐ CONTRIBUTING.md
โโโ ๐ LICENSE
โ
โโโ ๐ core/
โ โโโ engine.py โ Main orchestrator
โ โโโ detector.py โ Auto entity detection
โ โโโ banner.py โ Rich terminal UI
โ โโโ utils.py โ Utilities & help menu
โ โโโ correlation.py โ Intelligence correlator
โ
โโโ ๐ modules/
โ โโโ base.py โ Base class for all modules
โ โโโ username.py โ Username checker (100+ platforms)
โ โโโ email.py โ Email investigator
โ โโโ phone.py โ Phone OSINT (5 countries)
โ โโโ domain.py โ Domain + DNS scanner
โ โโโ ip.py โ IP + RDAP + geolocation
โ
โโโ ๐ sources/
โ โโโ social_media.py โ 100+ platform URL database
โ โโโ phone_db.py โ Provider prefix database
โ โโโ breach_db.py โ Public breach database
โ
โโโ ๐ reports/
โ โโโ generator.py โ Report engine (JSON/HTML/TXT)
โ โโโ html_template.py โ Jinja2 HTML template
โ โโโ json_formatter.py โ JSON serializer
โ
โโโ ๐ output/ โ Auto-generated reports
Purpose โ GhostIntel is built only for:
- Education and cybersecurity learning
- Legitimate security research
- Testing on systems you own or have explicit permission to test
- Developing OSINT and reconnaissance skills professionally
Data Sources โ GhostIntel only uses public sources:
- Public DNS lookup, RDAP / WHOIS records
- Information from public websites & legal APIs
- Data that is already openly available
Prohibited Use โ Strictly forbidden:
- Doxing or exposing personal data without consent
- Stalking, harassment, or intimidation
- Illegal or criminal activities
- Accessing systems or data without authorization
By using GhostIntel, you take full responsibility for how you use this tool. The author is not responsible for any misuse.
MIT License โ Feel free to use, modify, and distribute with credit to Ruyynn.
Ruyynn โ Developer & Maintainer
| Platform | Link |
|---|---|
| ๐ GitHub |  |
| ๐ Facebook |  |
| ๐ธ Instagram |  |
| ๐ง Email |  |
| Link | Purpose |
|---|---|
 |
Main repository |
 |
Report a bug |
 |
Discussions & suggestions |
Contributions are very welcome!
- ๐ด Fork this repository
- ๐ฟ Create a new branch โ
git checkout -b cool-feature - ๐ป Commit your changes โ
git commit -m 'feat: add cool feature' - ๐ค Push to branch โ
git push origin cool-feature - ๐ Open a Pull Request
Read the full guide โ Contributing.md
If GhostIntel has been useful to you, a single โญ star goes a long way in keeping this project alive and growing!
| # | How to Support |
|---|---|
| 1 | โญ Star this repository |
| 2 | ๐ข Share with friends, communities, or cybersecurity groups |
| 3 | ๐ Report bugs you find |
| 4 | ๐ก Suggest new features via Discussions |
| 5 | ๐ค Contribute code or documentation |
| Platform | Link | For |
|---|---|---|
| ๐ฎ๐ฉ Saweria |  |
Indonesian donors |
| ๐ Ko-fi |  |
International donors |
Every donation and star means a lot for the continued development of GhostIntel! ๐ช
- ๐ Report a bug โ GitHub Issues
- ๐ก Feature request โ GitHub Discussions
- โ Questions โ DM via social media above
- ๐ค Collaboration โ Contact Me
Thank you to all contributors, users, and donors who have supported GhostIntel!
This tool is built with โค๏ธ for the advancement of cybersecurity knowledge.
GhostIntel v2.0 OSINT Framework Indonesia โข 100% Public Data โข For Cybersecurity Education
ยฉ 2026 Ruyynn. All Rights Reserved.