detect evidence of prepaid SIM activation, refill activity, and temporary/burner subscriber behavior · runs locally
drop carrier SMS exports, activation messages, USSD logs, or telephony databases