Password Protected.onionv1.0
PhantomSMS
Self-hosted SMS verification aggregator for OSINT investigations. Buy temporary numbers, receive verification codes, and keep every burner tied to its case. Three providers, one dashboard, full audit trail.
Overview
PhantomSMS sits in front of multiple virtual number providers and gives your team a single dashboard to buy temporary phone numbers, receive verification codes, and track which numbers are tied to which investigation accounts and cases.
The core problem it solves: creating sock puppet accounts on platforms like QQ, Baidu, Telegram, and WeChat without using personal numbers, without relying on a single provider, and without losing track of which burner number belongs to which investigation.
Everything runs as a Tor hidden service behind a password gate. The tool itself stays off the public internet. Every action is logged to an audit trail that can be exported as JSON for evidence preservation.
Providers
SMSPool
smspool.net
Primary provider. Best OPSEC (Monero, no email). Non-VoIP numbers. Recommended for most investigations.
5sim
5sim.net
Fallback provider. Mature API with confirmed Chinese number support for WeChat and QQ registrations.
GrizzlySMS
grizzlysms.com
Chinese specialist. sms-activate compatible. Explicit QQ, Baidu, and Alipay support for hard-to-register platforms.
Features
📱
Buy & Receive
Purchase temporary numbers from any enabled provider. Monitor for incoming verification codes in real time.
📂
Case Management
Tag every number, account, and action to a specific investigation case. Keep operations organized and attributable.
👤
Account Tracking
Log investigation accounts by platform, username, password hint, phone number, and linked case. Never lose a burner.
📜
Full Audit Trail
Every action logged with timestamp and user. Export the complete evidence chain as JSON for chain of custody.
💰
Balance Monitoring
Check provider balances from the dashboard. Status indicators show which providers are active and funded.
🔒
Tor Hidden Service
Runs entirely as a .onion service behind password authentication. No clearnet exposure, no tracking.
Python
Flask
SQLite
Tor / .onion
SMS APIs
OSINT
