Overview
Scamadviser helps to identify whether a site or webshop is fraudulent, infected with malware, and whether they conduct phishing or other malicious activities.
Maltego’s new Scamadviser integration allows investigators to query a domain’s Scamadviser Trust Score, the associated Trust Rules, basic network information like DNS and IP, redirecting sites and more.
The integration supports passive checks to query Scamadviser’s cached information, or live scans to perform active scanning of a domain to receive an up-to-date assessment.
Don't miss our Blog post, .
Visit our website here for more detailed information about this integration and read more about how to best leverage Scamadviser data to benefit your investigations
Scamadviser AnalyzerTransforms
To Trust Rules (Live Scan) [Scamadviser]
Description
Returns a set of trust rules used by Scamadviser to calculate the corresponding trust score. Uses an active scan which also includes not-yet-seen targets. Might be slower than passive scans.
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|
| ScamAdviser API Key | string | | True | False | false |
Transform Meta Info
| Information | Value |
|---|
| Display Name | To Trust Rules (Live Scan) [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_trustrules_active |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Scamadviser.Trustrule |
| Short Description | Returns a set of trustrules used by Scamadviser to calculate the corresponding trust score. Uses an active scan which also includes not-yet-seen targets. Might be slower than passive scans. |
To Trust Rules (Passive Check) [Scamadviser]
Description
Returns a set of trustrules used by Scamadviser to calculate the corresponding trust score. Uses a passive scan which does not include unseen targets
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|
| ScamAdviser API Key | string | | True | False | false |
Transform Meta Info
| Information | Value |
|---|
| Display Name | To Trust Rules (Passive Check) [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_trustrules_passive |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Scamadviser.Trustrule |
| Short Description | Returns a set of trustrules used by Scamadviser to calculate the corresponding trust score. Uses a passive scan which does not include unseen targets |
Annotate Domain (Live Scan) [Scamadviser]
Description
Flags the domain with a color corresponding to its Scamadviser score. Uses an active scan which also includes not-yet-seen targets. Might be slower than passive scans.
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|
| ScamAdviser API Key | string | | True | False | false |
Transform Meta Info
| Information | Value |
|---|
| Display Name | Annotate Domain (Live Scan) [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_score_active |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Domain |
| Short Description | Flags the domain with a color corresponding to its Scamadviser score. Uses an active scan which also includes not-yet-seen targets. Might be slower than passive scans. |
Annotate Domain (Passive Check) [Scamadviser]
Description
Flags the domain with a color corresponding to its Scamadviser score. Uses a passive scan which does not include unseen targets
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|
| ScamAdviser API Key | string | | True | False | false |
Transform Meta Info
| Information | Value |
|---|
| Display Name | Annotate Domain (Passive Check) [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_score_passive |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Domain |
| Short Description | Flags the domain with a color corresponding to its Scamadviser score. Uses a passive scan which does not include unseen targets |
Description
Transforms a maltego.domain into a set of tags associated with that domain. Uses an active scan which also includes not-yet-seen targets. Might be slower than passive scans.
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|
| ScamAdviser API Key | string | | True | False | false |
Transform Meta Info
| Information | Value |
|---|
| Display Name | To Tags (Live Scan) [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_tags_active |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Scamadviser.Tag |
| Short Description | Transforms a maltego.domain into a set of tags associated with that domain. Uses an active scan which also includes not-yet-seen targets. Might be slower than passive scans. |
To Tags (Passive Check) [Scamadviser]
Description
Transforms a maltego.domain into a set of tags associated with that domain. Uses a passive scan which does not include unseen targets
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|
| ScamAdviser API Key | string | | True | False | false |
Transform Meta Info
| Information | Value |
|---|
| Display Name | To Tags (Passive Check) [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_tags_passive |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Scamadviser.Tag |
| Short Description | Transforms a maltego.domain into a set of tags associated with that domain. Uses a passive scan which does not include unseen targets |
To Network Info (Live Scan) [Scamadviser]
Description
Transforms a maltego.domain into a set of network information associated with that domain (HTTP responses, IP addresses and nameservers). Uses an active scan which also includes not-yet-seen targets. Might be slower than passive scans.
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|
| ScamAdviser API Key | string | | True | False | false |
Transform Meta Info
| Information | Value |
|---|
| Display Name | To Network Info (Live Scan) [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_network_info_active |
| Input Entities | maltego.Domain |
| Output Entities | maltego.DNSName |
| Short Description | Transforms a maltego.domain into a set of network information associated with that domain (HTTP responses, IP addresses and nameservers). Uses an active scan which also includes not-yet-seen targets. Might be slower than passive scans. |
To Network Info (Passive Check) [Scamadviser]
Description
Transforms a maltego.domain into a set of network information associated with that domain (HTTP responses, IP addresses and nameservers). Uses a passive scan which does not include unseen targets
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|
| ScamAdviser API Key | string | | True | False | false |
Transform Meta Info
| Information | Value |
|---|
| Display Name | To Network Info (Passive Check) [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_network_info_passive |
| Input Entities | maltego.Domain |
| Output Entities | maltego.DNSName |
| Short Description | Transforms a maltego.domain into a set of network information associated with that domain (HTTP responses, IP addresses and nameservers). Uses a passive scan which does not include unseen targets |
To HTML keywords (Live Scan) [Scamadviser]
Description
Transforms a maltego.domain into a set of html meta keywords associated with that domain. Uses an active scan which also includes not-yet-seen targets. Might be slower than passive scans.
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|
| ScamAdviser API Key | string | | True | False | false |
Transform Meta Info
| Information | Value |
|---|
| Display Name | To HTML keywords (Live Scan) [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_html_meta_active |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Phrase |
| Short Description | Transforms a maltego.domain into a set of html meta keywords associated with that domain. Uses an active scan which also includes not-yet-seen targets. Might be slower than passive scans. |
To HTML keywords (Passive Check) [Scamadviser]
Description
Transforms a maltego.domain into a set of html meta keywords associated with that domain. Uses a passive scan which does not include unseen targets
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|
| ScamAdviser API Key | string | | True | False | false |
Transform Meta Info
| Information | Value |
|---|
| Display Name | To HTML keywords (Passive Check) [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_html_meta_passive |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Phrase |
| Short Description | Transforms a maltego.domain into a set of html meta keywords associated with that domain. Uses a passive scan which does not include unseen targets |
To Redirected Domains (Live Scan) [Scamadviser]
Description
Transforms a maltego.domain into a list of domains that redirect to the source domain. Uses an active scan which also includes not-yet-seen targets. Might be slower than passive scans.
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|
| ScamAdviser API Key | string | | True | False | false |
Transform Meta Info
| Information | Value |
|---|
| Display Name | To Redirected Domains (Live Scan) [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_redirected_domains_active |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Domain |
| Short Description | Transforms a maltego.domain into a list of domains that redirect to the source domain. Uses an active scan which also includes not-yet-seen targets. Might be slower than passive scans. |
To Redirected Domains (Passive Check) [Scamadviser]
Description
Transforms a maltego.domain into a list of domains that redirect to the source domain. Uses a passive scan which does not include unseen targets
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|
| ScamAdviser API Key | string | | True | False | false |
Transform Meta Info
| Information | Value |
|---|
| Display Name | To Redirected Domains (Passive Check) [Scamadviser] |
| Owner | |
| Author | Maltego Technologies |
| Data Source | Scamadviser |
| Transform Name | maltego.scamadviser.scamadviser_redirected_domains_passive |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Domain |
| Short Description | Transforms a maltego.domain into a list of domains that redirect to the source domain. Uses a passive scan which does not include unseen targets |
