Overview
The DNSTwist data integration with Maltego provides a powerful tool for security researchers and analysts to quickly identify potential phishing domains and perform phishing detection as part of their investigations.
This Integration allows for the visualization of the results within the Maltego graph, making it easier to identify patterns and relationships between domains and automate the phishing detection process.
By combining the capabilities of DNSTwist and Maltego, security professionals could more efficiently detect and analyze potential threats to better protect their systems and networks.
You can read more about DNSTwist Transforms for Maltego on our website here.
DNSTwist Transforms
To similar registered domains [dnstwist]
Description
Searches for domains that are similar using dnstwist.
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | To similar registered domains [dnstwist] |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | dnstwist |
| Transform Name | maltego.dnstwist.domain_to_dnstwist |
| Short Description | Searches for domains that are similar using dnstwist. |
| Input Entities | maltego.Domain |
| Output Entities | maltego.dnstwist.DnsTwistRecord, maltego.Domain |
To HTML Similarity [dnstwist]
Description
Returns the HTML similarity of the domains by running ssdeep.
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | To HTML Similarity [dnstwist] |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | dnstwist |
| Transform Name | maltego.dnstwist.to_html_similarity |
| Short Description | Returns the HTML similarity of the domains by running ssdeep. |
| Input Entities | maltego.dnstwist.DnsTwistRecord |
| Output Entities | maltego.dnstwist.DnsTwistRecord, maltego.dnstwist.Tag |
To visual Similarity [dnstwist]
Description
Returns the visual similarity of the rendered domains by comparing their pHash values.
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | To visual Similarity [dnstwist] |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | dnstwist |
| Transform Name | maltego.dnstwist.to_visual_similarity |
| Short Description | Returns the visual similarity of the rendered domains by comparing their pHash values. |
| Input Entities | maltego.dnstwist.DnsTwistRecord |
| Output Entities | maltego.dnstwist.DnsTwistRecord, maltego.dnstwist.Tag |