Overview
Scamadviser helps to identify whether a site or webshop is fraudulent, infected with malware, and whether they conduct phishing or other malicious activities.
Maltego’s new Scamadviser integration allows investigators to query a domain’s Scamadviser Trust Score, the associated Trust Rules, basic network information like DNS and IP, redirecting sites and more.
The integration supports passive checks to query Scamadviser’s cached information, or live scans to perform active scanning of a domain to receive an up-to-date assessment.
Don't miss our Blog post, Introducing Scamadviser Integration & Data Subscriptions for Maltego.
Visit our website here for detailed information about this integration and read more about how to best leverage Scamadviser data to benefit your investigations
Access and Pricing
There are two ways to access Scamadviser data in Maltego: Free trial and data subscriptions.
Free Trial for Scamadviser
The Scamadviser integration offers a free trial for both Maltego Community and Commercial users with the following Transform allowances:
- Maltego Enterprise: 50 active scans and 200 passive checks
Simply install the Hub item on your Maltego Desktop Client and start exploring the Scamadviser data right away!
Data Subscriptions for Scamadviser
The Scamadviser data subscriptions provide a flexible and affordable access option to the Scamadviser full solution. With the Scamadviser data subscriptions, investigators can retrieve data with both passive and active queries. Read more here about the data subscriptions on offer.
Scamadviser Analyzer: Enterprise Transforms
Please note that the Scamadviser Analyzer Enterprise Transforms also include access to all the Transforms available in the Scamadviser CE and Pro Transform set.
Hosting Organization Search [Scamadviser]
Description
This Transform searches the Scamadviser database for entries that have the given organization as the hosting company.
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| Added between date | daterange | true | true | false | |
| Alexa Rank (lower than or equal, 0 for no filter) | int | true | true | false | |
| Domain Name (use * as wildcard) | string | true | true | false | |
| Hosted in Country (e. g. US, DE) | string | true | true | false | |
| Scamadviser Keywords (AND, OR allowed) | string | true | true | false | |
| Scamadviser Tag (AND, OR allowed) | string | true | true | false | |
| Trust Score (lower then or equal, 0 for no filter) | int | 0 | true | true | false |
| Whois Registrant Company | string | true | true | false | |
| Whois Registrant Name | string | true | true | false | |
| Whois Registrar Name | string | true | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Hosting Organization Search [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_elastic_hosting_company_entry_organization |
| Input Entities | maltego.Organization |
| Output Entities | maltego.Domain |
| Short Description | This Transform searches the Scamadviser database for entries that have the given organization as the hosting company. |
Domain Search [Scamadviser]
Description
This Transform searches the Scamadviser database for entries with a similarity to the given domain name. Use ’*’ for wildcard searches.
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| Added between date | daterange | true | true | false | |
| Alexa Rank (lower than or equal, 0 for no filter) | int | true | true | false | |
| Hosted in Country (e. g. US, DE) | string | true | true | false | |
| Hosting Company | string | true | true | false | |
| Scamadviser Keywords (AND, OR allowed) | string | true | true | false | |
| Scamadviser Tag (AND, OR allowed) | string | true | true | false | |
| Trust Score (lower then or equal, 0 for no filter) | int | 0 | true | true | false |
| Whois Registrant Company | string | true | true | false | |
| Whois Registrant Name | string | true | true | false | |
| Whois Registrar Name | string | true | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Domain Search [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Output Entities | maltego.Domain |
| Short Description | This Transform searches the Scamadviser database for entries with a similarity to the given domain name. Use ’*’ for wildcard searches. |
Variants
| Transform Name | Input Entities |
|---|---|
| maltego.scamadviser.scamadviser_elastic_domain_entry | maltego.Domain |
| maltego.scamadviser.scamadviser_elastic_phrase_entry | maltego.Phrase |
Keyword Search [Scamadviser]
Description
This Transform searches the Scamadviser database for entries that include a given keyword in their response.
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| Added between date | daterange | true | true | false | |
| Alexa Rank (lower than or equal, 0 for no filter) | int | true | true | false | |
| Domain Name (use * as wildcard) | string | true | true | false | |
| Hosted in Country (e. g. US, DE) | string | true | true | false | |
| Hosting Company | string | true | true | false | |
| Scamadviser Tag (AND, OR allowed) | string | true | true | false | |
| Trust Score (lower then or equal, 0 for no filter) | int | 0 | true | true | false |
| Whois Registrant Company | string | true | true | false | |
| Whois Registrant Name | string | true | true | false | |
| Whois Registrar Name | string | true | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Keyword Search [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_elastic_keyword_entry |
| Input Entities | maltego.Phrase |
| Output Entities | maltego.Domain |
| Short Description | This Transform searches the Scamadviser database for entries that include a given keyword in their response. |
Host IP Location Search [Scamadviser]
Description
This Transform searches the Scamadviser database for entries that are hosted in a given country. (e. g. US, DE etc.)
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| Added between date | daterange | true | true | false | |
| Alexa Rank (lower than or equal, 0 for no filter) | int | true | true | false | |
| Domain Name (use * as wildcard) | string | true | true | false | |
| Hosting Company | string | true | true | false | |
| Scamadviser Keywords (AND, OR allowed) | string | true | true | false | |
| Scamadviser Tag (AND, OR allowed) | string | true | true | false | |
| Trust Score (lower then or equal, 0 for no filter) | int | 0 | true | true | false |
| Whois Registrant Company | string | true | true | false | |
| Whois Registrant Name | string | true | true | false | |
| Whois Registrar Name | string | true | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Host IP Location Search [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_elastic_location_entry |
| Input Entities | maltego.Location |
| Output Entities | maltego.Domain |
| Short Description | This Transform searches the Scamadviser database for entries that are hosted in a given country. (e. g. US, DE etc.) |
Tag Search [Scamadviser]
Description
This Transform searches the Scamadviser database for entries that include a given tag in their response.
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| Added between date | daterange | true | true | false | |
| Alexa Rank (lower than or equal, 0 for no filter) | int | true | true | false | |
| Domain Name (use * as wildcard) | string | true | true | false | |
| Hosted in Country (e. g. US, DE) | string | true | true | false | |
| Hosting Company | string | true | true | false | |
| Scamadviser Keywords (AND, OR allowed) | string | true | true | false | |
| Trust Score (lower then or equal, 0 for no filter) | int | 0 | true | true | false |
| Whois Registrant Company | string | true | true | false | |
| Whois Registrant Name | string | true | true | false | |
| Whois Registrar Name | string | true | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Tag Search [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_elastic_tag_entry |
| Input Entities | maltego.Scamadviser.Tag |
| Output Entities | maltego.Domain |
| Short Description | This Transform searches the Scamadviser database for entries that include a given tag in their response. |
Whois Registrar Search [Scamadviser]
Description
This Transform searches the Scamadviser database for entries that include a given organization as the whois registrar.
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| Added between date | daterange | true | true | false | |
| Alexa Rank (lower than or equal, 0 for no filter) | int | true | true | false | |
| Domain Name (use * as wildcard) | string | true | true | false | |
| Hosted in Country (e. g. US, DE) | string | true | true | false | |
| Hosting Company | string | true | true | false | |
| Scamadviser Keywords (AND, OR allowed) | string | true | true | false | |
| Scamadviser Tag (AND, OR allowed) | string | true | true | false | |
| Trust Score (lower then or equal, 0 for no filter) | int | 0 | true | true | false |
| Whois Registrant Company | string | true | true | false | |
| Whois Registrant Name | string | true | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Whois Registrar Search [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_elastic_whois_registrar_entry_person |
| Input Entities | maltego.Person |
| Output Entities | maltego.Domain |
| Short Description | This Transform searches the Scamadviser database for entries that include a given organization as the whois registrar. |
Whois Registrant Search [Scamadviser]
Description
This Transform searches the Scamadviser database for entries that include a given organization as the whois registrant.
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| Added between date | daterange | true | true | false | |
| Alexa Rank (lower than or equal, 0 for no filter) | int | true | true | false | |
| Domain Name (use * as wildcard) | string | true | true | false | |
| Hosted in Country (e. g. US, DE) | string | true | true | false | |
| Hosting Company | string | true | true | false | |
| Scamadviser Keywords (AND, OR allowed) | string | true | true | false | |
| Scamadviser Tag (AND, OR allowed) | string | true | true | false | |
| Trust Score (lower then or equal, 0 for no filter) | int | 0 | true | true | false |
| Whois Registrant Name | string | true | true | false | |
| Whois Registrar Name | string | true | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Whois Registrant Search [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Output Entities | maltego.Domain |
| Short Description | This Transform searches the Scamadviser database for entries that include a given organization as the whois registrant. |
Variants
| Transform Name | Input Entities |
|---|---|
| maltego.scamadviser.scamadviser_elastic_whois_registrant_entry_organization | maltego.Organization |
| maltego.scamadviser.scamadviser_elastic_whois_registrant_entry_person | maltego.Person |