A system for performing forensic analysis on calling party number information associated with an incoming call from a telephonic device, before the incoming call is answered, comprising:
- an interface for receiving calling party number information associated with the incoming call;
- a memory configured to store a plurality of expected call patterns;
- and
- one or more processors configured to:
- gather operational status information associated with the calling party number information, and
- assign a source origin confidence metric to the calling party number using the operational status information and an expected call pattern in the plurality of expected call patterns.