Open navigation

Maltego WhoisXML Transforms

Modified on: Tue, 8 Oct, 2024 at 8:33 AM

Overview

Maltego's WhoisXML Transforms are provided to Maltego users as part of the Maltego Standard Transforms which any Maltego Graph Client has access to. The Maltego Standard Transforms support a vast variety of investigative tasks, including network footprinting, social media investigations, digital forensics, enriching threat intelligence, analyzing web content and more. They can be used on their own to conduct investigations, or supplement other specialized integrations available in the Data Hub.


For more information about Maltego Standard Transforms click here.


Maltego WhoisXML IP Netblocks Transforms

To Domain (Find other TLDs) [WhoisXML]

Description

This Transform returns the domains with different TLDs but same domain name to the input domain entity.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
WhoisXML API Keystring TrueFalsetrue

Transform Meta Info

InformationValue
Display NameTo Domain (Find other TLDs) [WhoisXML]
Owner 
AuthorMaltego
Data SourceWhoisXML
Transform NameDomainToDomain_TLD
Input Entitiesmaltego.Domain
Output Entitiesmaltego.Domain
Short DescriptionThis Transform returns the domains with different TLDs but same domain name to the input domain entity.

To Netblock (Using routing info) [WhoisXML]

Description

This Transform returns the netblocks available for the input IPv4 address.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
WhoisXML API Keystring TrueFalsetrue

Transform Meta Info

InformationValue
Display NameTo Netblock (Using routing info) [WhoisXML]
Owner 
AuthorMaltego
Data SourceWhoisXML
Transform NameIPAddressToNetblock_SS
Input Entitiesmaltego.IPv4Address
Output Entitiesmaltego.Netblock
Short DescriptionThis Transform returns the netblocks available for the input IPv4 address.

To AS Number [WhoisXML]

Description

This Transform returns the AS (Autonomous System) number for the given netblock. If the netblock contains smaller subnets, the AS for the largest subnet is returned.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
WhoisXML API Keystring TrueFalsetrue

Transform Meta Info

InformationValue
Display NameTo AS Number [WhoisXML]
Owner 
AuthorMaltego
Data SourceWhoisXML
Transform NameNetblockToAS_SS
Input Entitiesmaltego.Netblock
Output Entitiesmaltego.AS
Short DescriptionThis Transform returns the AS (Autonomous System) number for the given netblock. If the netblock contains smaller subnets, the AS for the largest subnet is returned.

To IPv4 Netblocks (Blocks delegated to this NS) [WhoisXML]

Description

This Transform will resolve the IPv4 address for the NS record and returns netblocks delegated to the resolved IPv4 address.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
WhoisXML API Keystring TrueFalsetrue

Transform Meta Info

InformationValue
Display NameTo IPv4 Netblocks (Blocks delegated to this NS) [WhoisXML]
Owner 
AuthorMaltego
Data SourceWhoisXML
Transform NameNSrecordToNetblock_NS4block
Input Entitiesmaltego.NSRecord
Output Entitiesmaltego.Netblock
Short DescriptionThis Transform will resolve the IPv4 address for the NS record and returns netblocks delegated to the resolved IPv4 address.

To Company (Owner) [WhoisXML]

Description

This Transform returns the company owner of the given AS (Autonomous System).


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
WhoisXML API Keystring TrueFalsetrue

Transform Meta Info

InformationValue
Display NameTo Company (Owner) [WhoisXML]
Owner 
AuthorMaltego
Data SourceWhoisXML
Transform NameASNumberToCompany
Input Entitiesmaltego.AS
Output Entitiesmaltego.Company
Short DescriptionThis Transform returns the company owner of the given AS (Autonomous System).

To Netblocks [WhoisXML]

Description

This Transform returns the netblocks available for the input IPv6 address.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
WhoisXML API Keystring TrueFalsetrue

Transform Meta Info

InformationValue
Display NameTo Netblocks [WhoisXML]
Owner 
AuthorMaltego
Data SourceWhoisXML
Transform Namewhoisxml.ipnetblocks.ipv6AddressToNetblocks
Input Entitiesmaltego.IPv6Address
Output Entitiesmaltego.Netblock
Short DescriptionThis Transform returns the netblocks available for the input IPv6 address.

To IPv6 Netblocks (Blocks delegated to this NS) [WhoisXML]

Description

This Transform will resolve the IPv6 address for the NS record and return netblocks delegated to the resolved IPv6 address.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
WhoisXML API Keystring TrueFalsetrue

Transform Meta Info

InformationValue
Display NameTo IPv6 Netblocks (Blocks delegated to this NS) [WhoisXML]
Owner 
AuthorMaltego
Data SourceWhoisXML
Transform Namewhoisxml.ipnetblocks.nsRecordToDelegatedIpv6Netblocks
Input Entitiesmaltego.NSRecord
Output Entitiesmaltego.Netblock
Short DescriptionThis Transform will resolve the IPv6 address for the NS record and return netblocks delegated to the resolved IPv6 address.

To AS [WhoisXML]

Description

This Transform returns the AS (Autonomous System) number for the given netblock.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
WhoisXML API Keystring TrueFalsetrue

Transform Meta Info

InformationValue
Display NameTo AS [WhoisXML]
Owner 
AuthorMaltego
Data SourceWhoisXML
Transform Namewhoisxml.ipnetblocks.cidrToAsNumber
Input Entitiesmaltego.CIDR
Output Entitiesmaltego.AS
Short DescriptionThis Transform returns the AS (Autonomous System) number for the given netblock.

To Netblocks in this AS [WhoisXML]

Description

This Transform returns the routes located within the input AS (Autonomous System) number by looking it up in WhoisXML.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
WhoisXML API Keystring TrueFalsetrue

Transform Meta Info

InformationValue
Display NameTo Netblocks in this AS [WhoisXML]
Owner 
AuthorMaltego
Data SourceWhoisXML
Transform NameASNumberToNetblocks_Robtex
Input Entitiesmaltego.AS
Output Entitiesmaltego.Netblock
Short DescriptionThis Transform returns the routes located within the input AS (Autonomous System) number by looking it up in WhoisXML.

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.