Awesome

Maltego Transform for Spur Context API

This is a Maltego Transform to enrich IP addresses with Spur Context.

The Spur Context API accepts an IPv4 or IPv6 address and returns information about VPN, Proxy, Residential Proxy, and related anonymization observations.

• API Information
• Developer Documentation
• Spur Account (API Tokens)
• Free Trial Dashboard
• Source Code

Installation

We hope to get this into the Maltego Transform Hub, where it will be a single-click install.
In the meantime it can be easily installed by adding a seed URL in your client for the Public TDS.

The seed URL for this transform is: https://ptds.maltego.com/runner/showseed/Edp8Mhaut6fav0Ze4A38sRyK

Usage

As with any Maltego transform, right-click on an IP address entity and select the transform. If any anonymity information is available for that IP, they will be added as entities in the graph. The full list of possible result types is listed in the developer documentation.

License

This transform code is GPLv3, but usage requires an API key from Spur Intelligence.

The first time the transform is used, you will get a popup prompting for the API key, which can be found in your account. The Context API will handle either IPv4 or IPv6 addresses, but Maltego treats them as separate entity types so the API key must be entered the first time the transform is used for both IPv4 and IPv6 entities.