Overview
DomainTools Iris is a Threat Intelligence and Investigative Platform that combines enterprise grade domain intelligence and risk scoring with passive DNS data from Farsight and other top-tier providers.
With DomainTools Iris’s Maltego Transforms, investigators can perform infrastructure risk assessment and seamlessly integrate workflows into a Maltego Graph and vice versa.
These Transforms enable investigators to map connected infrastructure, run correlations, look at attribution, highlight risky domains, etc. to surface meaningful insights.
To read more click here.
DomainTools (Iris) Transforms
[IRIS] SSL Subject to Domains
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] SSL Subject to Domains |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisSSLSubj2Dom |
| Input Entities | maltego.Phrase |
| Output Entities | Phrase |
| Short Description |
[IRIS] Organization to Domain (SSL Org)
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Organization to Domain (SSL Org) |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisSOrg2Dom |
| Input Entities | maltego.Organization |
| Output Entities | Phrase |
| Short Description |
[IRIS] Registrant to Domains
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Registrant to Domains |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisRegr2Dom |
| Input Entities | malformity.DomainRegistrant |
| Output Entities | Phrase |
| Short Description |
[IRIS] Registrar to Domains
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Registrar to Domains |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisReg2Dom |
| Input Entities | malformity.Registrar |
| Output Entities | Phrase |
| Short Description |
[IRIS] Redirect Domain to Domain
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Redirect Domain to Domain |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisrDom2Dom |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Organization to Domain (Registrant Org)
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Organization to Domain (Registrant Org) |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisOrg2Dom |
| Input Entities | maltego.Organization |
| Output Entities | Phrase |
| Short Description |
[IRIS] Extract IP Address
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Extract IP Address |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Output Entities | Phrase |
| Short Description |
Variants
| Transform Name | Input Entities |
|---|---|
| irisNS2IP | maltego.NSRecord |
| irisMX2IP | maltego.MXRecord |
[IRIS] NS Domain to Domains
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] NS Domain to Domains |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisNS2Domain |
| Input Entities | maltego.NSRecord |
| Output Entities | Phrase |
| Short Description |
[IRIS] MX Record to Domains
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] MX Record to Domains |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisMX2Domain |
| Input Entities | maltego.MXRecord |
| Output Entities | Phrase |
| Short Description |
[IRIS] IP Address to Nameserver Domains
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] IP Address to Nameserver Domains |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisIP2NSD |
| Input Entities | maltego.IPv4Address |
| Output Entities | Phrase |
| Short Description |
[IRIS] IP Address to Email Domains
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] IP Address to Email Domains |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisIP2EMD |
| Input Entities | maltego.IPv4Address |
| Output Entities | Phrase |
| Short Description |
[IRIS] IP Address to Domain
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] IP Address to Domain |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisIP2Dom |
| Input Entities | maltego.IPv4Address |
| Output Entities | Phrase |
| Short Description |
[IRIS] IRIS Search Hash to Domain
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] IRIS Search Hash to Domain |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisiHash2Dom |
| Input Entities | maltego.Phrase |
| Output Entities | Phrase |
| Short Description |
[IRIS] SSL Hash to Domains
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] SSL Hash to Domains |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisHash2Domain |
| Input Entities | maltego.Hash |
| Output Entities | Phrase |
| Short Description |
[IRIS] Google Analytics to Domain
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Google Analytics to Domain |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisGA2Domain |
| Input Entities | maltego.Phrase |
| Output Entities | Phrase |
| Short Description |
[IRIS] Email Address to Domain (SSL Email)
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Email Address to Domain (SSL Email) |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisEmail2SDom |
| Input Entities | maltego.EmailAddress |
| Output Entities | Phrase |
| Short Description |
[IRIS] Email Address to Domain
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Email Address to Domain |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisEmail2Dom |
| Input Entities | maltego.EmailAddress |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to SSL Subjects
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to SSL Subjects |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomSSLSubj |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to SSL Organization
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to SSL Organization |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomSSLOrg |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to SSL Hash
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to SSL Hash |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomSSLHash |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to SSL Email Address
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to SSL Email Address |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomSSLE |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to SOA Email Addresses
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to SOA Email Addresses |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomSOA |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to Registrar
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to Registrar |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomRegistrar |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to Registrant
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to Registrant |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomRegistrant |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Get Domain Profile
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Get Domain Profile |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomProfile |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to Organizations
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to Organizations |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomOrgs |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to NS Records
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to NS Records |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomNS |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to MX Records
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to MX Records |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomMX |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to ISPs
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to ISPs |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomISP |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to IP Addresses
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to IP Addresses |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomIPs |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Get Email Domains
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Get Email Domains |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomEDoms |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Get Domain Contacts
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Get Domain Contacts |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomContacts |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Get Risk Components
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Get Risk Components |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomComps |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to ASN
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to ASN |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomASN |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to Google Analytics
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to Google Analytics |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomAnalytics |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to Google Adsense
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to Google Adsense |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDomAdsense |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Get Redirect Domain
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Get Redirect Domain |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDom2Redirect |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Domain to Contact Email Addresses
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Domain to Contact Email Addresses |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisDom2Contacts |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
| Short Description |
[IRIS] Google Adsense to Domain
Transform Settings
| Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|
| API User | string | DefaultValue | true | true | false |
| APIKey | string | ENTER API KEY | false | true | false |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [IRIS] Google Adsense to Domain |
| Owner | iTDS |
| Author | iTDS@Paterva.com |
| Data Source | IRIS |
| Transform Name | irisAdsense2Dom |
| Input Entities | maltego.Phrase |
| Output Entities | Phrase |
| Short Description |