SIERRA Cloud / Live Catalog
Cloud Invokers Available
Run from SIERRA Desktop
Browse here first, then launch the Cloud Invoker you need from the desktop workspace.
Keep results with your case
Cloud output lands inside the same graph as your notes and evidence.
Cloud Invokers Listed
25
Token-based Cloud Usage
Plans and token packs control paid cloud execution.
Catalog
Showing 25 of 25 Cloud Invokers
Availability may change as Cloud Invokers are added, revised, or temporarily removed.
Domains, IPs, infrastructure10
Start from a domain, IP, URL, or exposed asset and expand outward into DNS, hosting, network ownership, and internet-facing exposure.
AbuseIPDB IP Check
Review public abuse reports and reputation signals for an IP address.
ASN and Country Lookup
Map an IP address to its network owner, ASN, and likely country.
DNSDumpster Domain Intel
Map a domain's DNS footprint, related hosts, and internet-facing infrastructure.
Domain To IP
Resolve a domain to its current IP address.
InternetDB IP Lookups
Pull a fast snapshot of open ports, hostnames, and exposed services for an IP.
IP Geolocation
Estimate the likely geographic location and network context of an IP address.
LeakIX Asset Intel
Check whether a domain, IP, or URL appears in LeakIX exposure data.
Subdomain Lookup
Find publicly exposed subdomains tied to a domain.
URLScan
Submit a URL for an external scan and review the resulting page, verdict, and screenshot summary.
WHOIS API
Look up domain registration details and ownership clues from WHOIS records.
Emails, usernames, phones, and profiles8
Trace public account surfaces from an email, username, phone number, or profile across services.
Have I Been Pwned
Check whether an email address appears in known public breach data.
Holehe Email Presence
See which services appear to have an account for an email address.
Hunter Email Verifier
Check whether an email address appears deliverable and valid.
Maigret Username Search
Search for a username across many public sites and profile patterns.
Reddit User Profile
Summarize a Reddit account's public profile and visible activity surface.
Sherlock Username Search
Find confirmed public profiles tied to a username across supported sites.
Telegram Phone Number Checker
Check whether a phone number appears linked to a Telegram account.
Veriphone Carrier Lookup
Look up carrier and numbering metadata for a phone number.
Wallets and transactions5
Follow wallet activity, counterparties, portfolios, and single transactions across supported public chains.
Bitcoin Counterparty Graph
Build a first-hop graph of recent counterparties for a Bitcoin wallet.
Etherscan Address Activity
Summarize recent Ethereum wallet activity.
Tatum Transaction Lookup
Inspect a single on-chain transaction on a selected chain.
Tatum Wallet Activity
Review recent activity and native balance for a wallet on a selected chain.
Tatum Wallet Portfolio
Inspect token, NFT, and asset holdings for a wallet on a selected chain.
Images and screenshots2
Begin with a screenshot or photo and extract visible text or location clues from the image itself.
Image Geolocation
Estimate likely location clues from visual content in an image.
Image OCR Text
Extract visible text from a screenshot or photo.
Next Step
Use these Cloud Invokers from the SIERRA desktop app
Use this page to see what is available, then run those Cloud Invokers from the SIERRA desktop workspace where graph state, notes, evidence, and cloud results stay in one flow.
Phantom Helix
In silence, patterns emerge.
OSINT tools for modern investigators and security professionals.
© 2026 Phantom Helix Intelligence. All rights reserved.
Made with ❤️ for the OSINT community