email2phonenumber

email2phonenumber is a proof-of-concept tool created during security research into OSINT methods for linking an email address to a phone number. It was built to demonstrate, for defensive security awareness, how certain websites' password-reset flows could leak partial phone-number digits to an attacker who only had a target's email address.

The README states explicitly that the services it originally targeted, including eBay, LastPass, Amazon and Twitter, have since added protections such as requiring an emailed code or a CAPTCHA, which block the scraping technique the tool relied on, and the author no longer actively maintains or extends it. It offered three functions: scraping sites for leaked phone-number digits via password reset, generating valid phone numbers from public numbering-plan data, and brute-forcing by iterating candidate numbers against password-reset flows to correlate masked emails back to a target.

The author points users toward a newer, maintained tool called Phonerator that focuses on the phone-number-generation research angle instead. email2phonenumber is written in Python, depends on BeautifulSoup and requests, and is released under the MIT license. Given its purpose, it should only be used for authorized security research or on accounts you own.