Maltego: DomainTools integration
DomainTools has rebuilt and expanded its Maltego integration. The updated suite is hosted and maintained directly by DomainTools and broadens the catalog of transforms beyond the previous Iris-only set. Transforms are distributed through Maltego’s public Transform Distribution Server (pTDS), making them reachable from both commercial editions of Maltego and Maltego Community Edition.
In this section
Section titled “In this section”- Getting started — install from the Maltego Transform Hub and configure credentials.
- Iris Investigate transforms — full reference for Iris Investigate transforms.
- WHOIS, History, and Reputation transforms — WHOIS, WHOIS History, reverse lookups, hosting history, and reputation.
- RDAP transforms — parsed RDAP transforms.
- Troubleshooting — common errors and how to resolve them.
What’s included
Section titled “What’s included”The updated integration is published as a single DomainTools listing on the Maltego Transform Hub. Installing it adds all three transform families to your client:
- Iris Investigate transforms — pivot and enrichment across the full Iris attribute model (domain, IP, email, nameserver, mail server, SSL, Adsense/Analytics, SSL hash, Iris Search Hash, and more).
- WHOIS and WHOIS History transforms — current WHOIS, parsed WHOIS, WHOIS History, reverse WHOIS (current and historic), reverse IP, reverse nameserver, shared hosting, hosting history, and domain reputation.
- RDAP transforms — parsed RDAP lookups from a domain entity to email, email domain, nameserver, registrar, and full RDAP records.
Requirements
Section titled “Requirements”- A Maltego client, version 4.10.0 or later. Both commercial editions (Professional, Classic, XL) and Maltego Community Edition (CE) can run the DomainTools transforms, because they are distributed via Maltego’s public TDS. See Community Edition caveats below.
- Maltego Graph (Desktop) on Windows, Linux, or macOS. See the Maltego downloads page for installers.
- A 64-bit Java 8, 11, or 17 runtime installed on the machine running Maltego.
- A DomainTools API username and API key.
- Entitlement to the DomainTools APIs backing the transforms you intend to use. Contact your DomainTools representative if you’re not sure what your account includes.
Community Edition caveats
Section titled “Community Edition caveats”Maltego CE can run the DomainTools transforms end-to-end, but the Maltego client applies CE-tier limits on result volume: Maltego CE returns up to 24 results per transform execution, so transforms that can return many entities (reverse lookups, shared domains, hosting history, historical WHOIS) are capped well below their full result set. For full-volume results, use a commercial edition.
Farsight DNSDB transforms
Section titled “Farsight DNSDB transforms”The Farsight DNSDB Maltego transforms are documented separately and remain available alongside the DomainTools integration.