Maltego WhoisXML Transforms
Modified on: Thu, 16 Dec, 2021 at 3:38 PM
Overview
Maltego's WhoisXML Transforms are provided to Maltego users as part of the Maltego Standard Transforms which any Maltego Desktop Client has access to. The Maltego Standard Transforms support a vast variety of investigative tasks, including network footprinting, social media investigations, digital forensics, enriching threat intelligence, analyzing web content and more. They can be used on their own to conduct investigations, or supplement other specialized integrations available in the Transform Hub.
For more information about Maltego Standard Transforms click here.
To Domain (Find other TLDs) [WhoisXML]
Description
This Transform returns the domains with different TLDs but same domain name to the input domain entity.
| WhoisXML API Key | string | | True | False | true |
| Display Name | To Domain (Find other TLDs) [WhoisXML] |
| Owner | |
| Author | Maltego |
| Data Source | WhoisXML |
| Transform Name | DomainToDomain_TLD |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Domain |
| Short Description | This Transform returns the domains with different TLDs but same domain name to the input domain entity. |
To Netblock (Using routing info) [WhoisXML]
Description
This Transform returns the netblocks available for the input IPv4 address.
| WhoisXML API Key | string | | True | False | true |
| Display Name | To Netblock (Using routing info) [WhoisXML] |
| Owner | |
| Author | Maltego |
| Data Source | WhoisXML |
| Transform Name | IPAddressToNetblock_SS |
| Input Entities | maltego.IPv4Address |
| Output Entities | maltego.Netblock |
| Short Description | This Transform returns the netblocks available for the input IPv4 address. |
To AS Number [WhoisXML]
Description
This Transform returns the AS (Autonomous System) number for the given netblock. If the netblock contains smaller subnets, the AS for the largest subnet is returned.
| WhoisXML API Key | string | | True | False | true |
| Display Name | To AS Number [WhoisXML] |
| Owner | |
| Author | Maltego |
| Data Source | WhoisXML |
| Transform Name | NetblockToAS_SS |
| Input Entities | maltego.Netblock |
| Output Entities | maltego.AS |
| Short Description | This Transform returns the AS (Autonomous System) number for the given netblock. If the netblock contains smaller subnets, the AS for the largest subnet is returned. |
To IPv4 Netblocks (Blocks delegated to this NS) [WhoisXML]
Description
This Transform will resolve the IPv4 address for the NS record and returns netblocks delegated to the resolved IPv4 address.
| WhoisXML API Key | string | | True | False | true |
| Display Name | To IPv4 Netblocks (Blocks delegated to this NS) [WhoisXML] |
| Owner | |
| Author | Maltego |
| Data Source | WhoisXML |
| Transform Name | NSrecordToNetblock_NS4block |
| Input Entities | maltego.NSRecord |
| Output Entities | maltego.Netblock |
| Short Description | This Transform will resolve the IPv4 address for the NS record and returns netblocks delegated to the resolved IPv4 address. |
To Company (Owner) [WhoisXML]
Description
This Transform returns the company owner of the given AS (Autonomous System).
| WhoisXML API Key | string | | True | False | true |
| Display Name | To Company (Owner) [WhoisXML] |
| Owner | |
| Author | Maltego |
| Data Source | WhoisXML |
| Transform Name | ASNumberToCompany |
| Input Entities | maltego.AS |
| Output Entities | maltego.Company |
| Short Description | This Transform returns the company owner of the given AS (Autonomous System). |
To Netblocks [WhoisXML]
Description
This Transform returns the netblocks available for the input IPv6 address.
| WhoisXML API Key | string | | True | False | true |
| Display Name | To Netblocks [WhoisXML] |
| Owner | |
| Author | Maltego |
| Data Source | WhoisXML |
| Transform Name | whoisxml.ipnetblocks.ipv6AddressToNetblocks |
| Input Entities | maltego.IPv6Address |
| Output Entities | maltego.Netblock |
| Short Description | This Transform returns the netblocks available for the input IPv6 address. |
To IPv6 Netblocks (Blocks delegated to this NS) [WhoisXML]
Description
This Transform will resolve the IPv6 address for the NS record and return netblocks delegated to the resolved IPv6 address.
| WhoisXML API Key | string | | True | False | true |
| Display Name | To IPv6 Netblocks (Blocks delegated to this NS) [WhoisXML] |
| Owner | |
| Author | Maltego |
| Data Source | WhoisXML |
| Transform Name | whoisxml.ipnetblocks.nsRecordToDelegatedIpv6Netblocks |
| Input Entities | maltego.NSRecord |
| Output Entities | maltego.Netblock |
| Short Description | This Transform will resolve the IPv6 address for the NS record and return netblocks delegated to the resolved IPv6 address. |
To AS [WhoisXML]
Description
This Transform returns the AS (Autonomous System) number for the given netblock.
| WhoisXML API Key | string | | True | False | true |
| Display Name | To AS [WhoisXML] |
| Owner | |
| Author | Maltego |
| Data Source | WhoisXML |
| Transform Name | whoisxml.ipnetblocks.cidrToAsNumber |
| Input Entities | maltego.CIDR |
| Output Entities | maltego.AS |
| Short Description | This Transform returns the AS (Autonomous System) number for the given netblock. |
To Netblocks in this AS [WhoisXML]
Description
This Transform returns the routes located within the input AS (Autonomous System) number by looking it up in WhoisXML.
| WhoisXML API Key | string | | True | False | true |
| Display Name | To Netblocks in this AS [WhoisXML] |
| Owner | |
| Author | Maltego |
| Data Source | WhoisXML |
| Transform Name | ASNumberToNetblocks_Robtex |
| Input Entities | maltego.AS |
| Output Entities | maltego.Netblock |
| Short Description | This Transform returns the routes located within the input AS (Autonomous System) number by looking it up in WhoisXML. |