Input

field	value
Query:	SELECT 'Php/1.0' AS technology_name ,domain ,global_rank ,url_matchable AS url ,created AS first_seen ,last_seen ,CASE WHEN indicator_matchable[2] = 'plain' THEN 'lower(' || indicator_matchable[3] || '.' || indicator_matchable[4] || ') contains ''' || indicator_matchable[1] || '''' ELSE indicator_matchable[3] || '.' || indicator_matchable[4] || ' is regex match of ''' || indicator_matchable[1] || '''' END AS indicator FROM indicator_detection_domain_rollup WHERE (indicator_matchable[1] = 'php/1.0' AND indicator_matchable[2] = 'plain' AND indicator_matchable[3] = 'http_request' AND indicator_matchable[4] = 'response_headers') ORDER BY global_rank ASC NULLS LAST

Query Plan

Download: csv json

Query Plan
Limit (cost=3485.21..3486.06 rows=20 width=117)
-> Result (cost=3485.21..3521.68 rows=858 width=117)
-> Sort (cost=3485.21..3487.36 rows=858 width=168)
Sort Key: global_rank
-> Bitmap Heap Scan on indicator_detection_domain_rollup (cost=61.64..3462.38 rows=858 width=168)
Recheck Cond: ((indicator_matchable[1] = 'php/1.0'::text) AND (indicator_matchable[2] = 'plain'::text) AND (indicator_matchable[3] = 'http_request'::text) AND (indicator_matchable[4] = 'response_headers'::text))
-> Bitmap Index Scan on indicator_detection_domain_rollup_indicator_matchable_arr_idx (cost=0.00..61.43 rows=858 width=0)
Index Cond: ((indicator_matchable[1] = 'php/1.0'::text) AND (indicator_matchable[2] = 'plain'::text) AND (indicator_matchable[3] = 'http_request'::text) AND (indicator_matchable[4] = 'response_headers'::text))

Data

Total Results: 4 Download: csv json

Technology Name	Domain	Global Rank	Url	First Seen	Last Seen	Indicator
Php/1.0	sakhalin.info	77549.0	sakhalin.info	2023-10-15 10:37:20.214205+00:00	2024-12-13 01:56:58.768640-08:00	lower(http_request.response_headers) contains 'php/1.0'
Php/1.0	sakh.com	127004.0	sakh.com	2023-10-20 18:50:20.400462+00:00	2024-10-09 02:57:07.065284-07:00	lower(http_request.response_headers) contains 'php/1.0'
Php/1.0	sakhalin.biz	806514.0	sakhalin.biz	2023-10-15 18:20:53.513228+00:00	2024-03-22 12:51:51.607064-07:00	lower(http_request.response_headers) contains 'php/1.0'
Php/1.0	sakhalin.tv	NaN	sakhalin.tv	2023-10-15 20:42:27.177673+00:00	2024-02-18 17:00:12.779009-08:00	lower(http_request.response_headers) contains 'php/1.0'