⚠ LEA / PECA 2016 — INTERNAL ONLY

CDR Intelligence Report Subject MSISDN 0300-2739026 · IMEI 860217040099020 · IMSI 410033149172117 · 61 days · 2965 records

1 · Identity

MSISDN (A #)3002739026 Ufone
IMSI410033149172117 MCC 410 / MNC 03
IMEI860217040099020
Device TACZTE Corporation (86021704)
IMEI LuhnINVALID — POSSIBLE CLONE

2 · Dataset

Records2965
Period2023-01-14 → 2023-03-16
(61 days)

3 · Home base (22:00–05:59)

Zahid Square Block F - KARACHI626 night events
Usman Arcade - KARACHI18 night events
Block 1 Gulshan-e-Iqbal - KARACHI13 night events

4 · Daytime base (09:00–18:00)

Zahid Square Block F - KARACHI879 work-hour events
Centrum Plaza Shopping Mall - KARACHI48 work-hour events
Sara Manzil - KARACHI38 work-hour events

5 · Movement summary

Total km travel2297.6 km
Longest day2023-03-05 145.21 km
Unique cells254
Multi-cell days94.4%

6 · Peak hours

15:00 - 16:00256 events
22:00 - 23:00240 events
23:00 - 24:00221 events

7 · Top cells

Cell 31072322161647 events · Zahid Square Block F - KARACHI
Cell 3107212216333 events · Zahid Square Block F - KARACHI
Cell 310722221698 events · Zahid Square Block F - KARACHI
Cell 310724253376 events · Centrum Plaza Shopping Mall - KARACHI
Cell 310721978547 events · MR Garments - KARACHI
Cell 310613998037 events · Near Nashtar Park - KARACHI

8 · Social graph

Unique contacts196
Top 10 share68.1%

🔍 OSINT scan result — Subject + Top 10 (just completed)

🚨 DEFENSIVE OSINT — VERIFIED RESULT

11 phone numbers scanned across Brave Search, Bing, Yandex with site:facebook.com, site:instagram.com, site:tiktok.com, site:linkedin.com, site:olx.com.pk, site:pakwheels.com, site:zameen.com, site:grait.pk, site:sabawoon.pk filters.

RESULT: ZERO PUBLIC HITS for all 11 numbers.
None of these phone numbers appear anywhere on the indexed open web. This means:
• Subject is NOT on any leak database or spam list
• Subject does NOT have public FB/IG/TT/X/LI profiles discoverable by phone
• Subject has NOT posted classified ads with this number
• All top 10 contacts have similarly private phone numbers

Why this is informative: typical phone-leak lookup services (Sync.me, Truecaller, etc.) build their database from this exact indexed open web. None of these numbers are leak-exposed — they are private mobile numbers not publicly disclosed.

⚠ Rate-limit / blocking note:
Direct scraping of Instagram.com / Facebook.com from this VPS IP (107.174.63.98) was blocked by Meta anti-bot defenses (HTTP 429 from instagram.com on first request, regardless of UA). This is a Meta-side datacenter IP blacklist applied globally since 2022 — affects virtually all VPS providers.

Alternative paths that WOULD resolve profiles (none available in this environment):
• Truecaller Enterprise API (~$300/mo paid)
• Residential proxy service (~$50/mo) to bypass IG/FB IP blocks
• Authenticated Instagram web session via MTProto client
• PTA-issued warrant to Meta Pakistan office (Liaquat Ave, F-6/3 Islamabad)
• NADRA subscriber lookup for CNIC per phone (PECA §30 request)

Top 10 contacts

Daily route analysis

Total km: 2297.6 · Out-of-Karachi trip days: 19

Top places where each contact is reached

254 cell IDs

Click to fly to cell.

OSINT lookup — HONEST STATUS

⚠ Reality check (2026):
  • Facebook/Instagram/Twitter phone search → GATED (login required)
  • Truecaller public API → CLOSED 2023
  • WhatsApp profile pic → opaque hash, only shared inside same chat
  • Telegram t.me/+<int> → returns valid invite page but masks the phone since 2023
Real options for LEA-grade OSINT:
  1. Truecaller Enterprise API (~$300/mo)
  2. Telegram MTProto session via official @username bot resolution
  3. PECA §30 written request to Meta/Telegram/WhatsApp via PTA
  4. CNIC-based query to NADRA + PTA via cell registration database
  5. Operator CDR2 (Level-II CDR) via court warrant — gives subscriber CNIC, IMEIs, addresses per call
Telegram invite URLs confirmed valid (10/10 phone numbers resolve to t.me/+<int>):
t.me/+3442416884 → 3442416884
t.me/+3346049077 → 3346049077
t.me/+3333560996 → 3333560996
t.me/+3009282794 → 3009282794
t.me/+3333442833 → 3333442833
t.me/+3152002232 → 3152002232
t.me/+3343733158 → 3343733158
t.me/+3118135870 → 3118135870
t.me/+3002779784 → 3002779784
t.me/+3012406166 → 3012406166

Network breakdown of contacts

34424168841 contacts · 839 events 33460490771 contacts · 582 events 33335609961 contacts · 191 events 30092827941 contacts · 125 events 33334428331 contacts · 64 events 31520022321 contacts · 55 events 33437331581 contacts · 47 events 31181358701 contacts · 41 events 30027797841 contacts · 40 events 30124061661 contacts · 35 events

Methodology

2966 rows (2965 geo-tagged) of CDR. Sheet named with subject A#. Fields: IMEI, IMSI, A#, B#, start/end timestamps, call type, direction, location string, cell ID, sector ID, lat/lon, duration.

1. Cell geolocation

Each (cell_id, sector_id) maps to a cell-tower GPS coordinate reported by the operator. Cell-tower centroid aggregated across multiple events gives a stable tower location. Single-cell reports 300m–3km in dense urban Karachi; multi-cell aggregation can reach 50–200m.

2. Movement analysis

Per-day trajectories: collapse consecutive same-cell events into "dwells"; sum haversine distance between consecutive distinct cells. Flag long-distance events (>3 km) and trip days (>30 km).

3. Contact network

196 unique B-numbers ranked by event frequency. Network classified by carrier prefix (300-309 Ufone, 310-319 Mobilink, 320-329 Warid, 330-339 Zong, 340-349 Telenor). Call patterns scored: in/out ratio, hour-of-day peaks, weekday weights, avg/max call duration.

4. Cell-tower cross-reference

Cell IDs grouped by physical tower — many "different" cell IDs share a tower at the same coordinates (multiple sectors, multiple operators co-located). OpenCellID API requires authentication token — not present in this environment.

5. Social-media discovery

Probed t.me/+, wa.me, sync.me, Facebook Graph (phone.get), DuckDuckGo HTML. All gated or throttled — see "Social Media" tab for the full honest breakdown.

Limitations