AbuseIPDB IP Check
Review public abuse reports and reputation signals for an IP address.
SIERRA Cloud / Live Catalog
Find the next Cloud Invoker.
Search what is available, then run it from SIERRA Desktop. Results return to the graph beside the rest of your case.
23 currently listed
Cloud execution uses plan tokens.Cloud execution uses plan tokens. Availability can change as tools are added, revised, or temporarily removed.
Live catalog
23 Cloud Invokers
Domains, IPs, infrastructure
Start from a domain, IP, URL, or exposed asset and expand outward into DNS, hosting, network ownership, and internet-facing exposure.
ASN and Country Lookup
Map an IP address to its network owner, ASN, and likely country.
DNSDumpster Domain Intel
Map a domain's DNS footprint, related hosts, and internet-facing infrastructure.
Domain To IP
Resolve a domain to its current IP address.
InternetDB IP Lookups
Pull a fast snapshot of open ports, hostnames, and exposed services for an IP.
IP Geolocation
Estimate the likely geographic location and network context of an IP address.
LeakIX Asset Intel
Check whether a domain, IP, or URL appears in LeakIX exposure data.
Subdomain Lookup
Find publicly exposed subdomains tied to a domain.
URLScan
Submit a URL for an external scan and review the resulting page, verdict, and screenshot summary.
WHOIS API
Look up domain registration details and ownership clues from WHOIS records.
Emails, usernames, phones, and profiles
Trace public account surfaces from an email, username, phone number, or profile across services.
Have I Been Pwned
Check whether an email address appears in known public breach data.
Holehe Email Presence
See which services appear to have an account for an email address.
Hunter Email Verifier
Check whether an email address appears deliverable and valid.
Maigret Username Search
Search for a username across many public sites and profile patterns.
Reddit User Profile
Summarize a Reddit account's public profile and visible activity surface.
Sherlock Username Search
Find confirmed public profiles tied to a username across supported sites.
Telegram Phone Number Checker
Check whether a phone number appears linked to a Telegram account.
Veriphone Carrier Lookup
Look up carrier and numbering metadata for a phone number.
Wallets and transactions
Follow wallet activity, counterparties, portfolios, and single transactions across supported public chains.
Bitcoin Counterparty Graph
Build a first-hop graph of recent counterparties for a Bitcoin wallet.
Etherscan Address Activity
Summarize recent Ethereum wallet activity.
Images and screenshots
Begin with a screenshot or photo and extract visible text or location clues from the image itself.
Image Exif Extractor
Extract comprehensive EXIF metadata from uploaded images including camera info, GPS, timestamps, and more.
Image Geolocation
Estimate likely location clues from visual content in an image.
Image OCR Text
Extract visible text from a screenshot or photo.
Run from SIERRA
Keep cloud output with the case.
The catalog helps you choose. SIERRA Desktop handles the run and returns structured results to your working graph.
Phantom Helix
In silence, patterns emerge.
Investigation tools for professional teams that need to keep the sources, reasoning, and next steps together.
© 2026 Phantom Helix · Operated by Yuhao Jian · ABN 52 512 969 796
Built in Melbourne for professional investigation work.