Phantom Agent / First-Pass Investigation Automation
Turn scoped OSINT targets into review-ready graphs
Phantom Agent runs bounded first-pass investigation rounds, records source provenance, and returns an online graph, review summary, and downloadable SIERRA graph package (.SRAS) for analyst follow-up.
We are checking whether this account can open Phantom Agent.
Guided preview
suspicious-domain[.]com
Suspicious domain triage
Assess a suspicious domain, preserve evidence, and create a downloadable SIERRA graph package (.SRAS).
Infrastructure
203.0.113.42
collect
Evidence
Source-backed link
verify
Review notes
Analyst handoff
Round plan
Verify target context and source provenance
Expand DNS, WHOIS, certificates, redirects, and hosting links
Cluster evidence into a review-ready online graph
Outputs
Triage decision support
Online investigation graph
Source-backed findings
Workflow
Input, graph, review
A repeatable first-pass flow for authorized OSINT and security triage.
Input
01
Start with a scoped target
Enter a domain, URL, IP, email sender, wallet, or authorized investigation prompt.
Rounds
02
Run bounded triage
Phantom Agent gathers public-source context, records provenance, and separates observed findings from follow-up questions.
Review
03
Review online, download for SIERRA
Inspect the online investigation graph, summary, and next-focus notes, then download completed graph outputs as a SIERRA graph package (.SRAS).
What it produces
Online graph, review notes, and SRAS download
Source-backed findings with provenance
Observed facts separated from follow-up questions
Downloadable SIERRA graph package (.SRAS) for completed graph outputs
SIERRA relationship
Browser triage, SIERRA handoff
Phantom Agent is the browser-based first-pass triage surface. Completed graph outputs can be downloaded as SIERRA graph packages (.SRAS) for deeper graph review, enrichment, and continuation when needed.
Authorized use
Analyst-in-the-loop by design
Built for lawful, authorized investigations
Not for stalking, harassment, doxxing, or unauthorized profiling
Not for contacting subjects or bypassing access controls
Designed for analyst-reviewed OSINT and security workflows
Request preview access
Apply for preview access to test Phantom Agent on authorized OSINT and security triage workflows. If approved, you will receive an invite email to activate access.
Phantom Helix
In silence, patterns emerge.
OSINT tools for modern investigators and security professionals.
Product
SIERRAPhantom AgentHelixDownloadSIERRA Cloud PlansCloud Invoker CatalogInvoker TutorialDocumentation© 2026 Phantom Helix Intelligence. All rights reserved.
Made with ❤️ for the OSINT community