Input

field	value
Query:	SELECT 'Php/5.6.40-0+deb8u7' AS technology_name ,domain ,global_rank ,url_matchable AS url ,created AS first_seen ,last_seen ,CASE WHEN indicator_matchable[2] = 'plain' THEN 'lower(' || indicator_matchable[3] || '.' || indicator_matchable[4] || ') contains ''' || indicator_matchable[1] || '''' ELSE indicator_matchable[3] || '.' || indicator_matchable[4] || ' is regex match of ''' || indicator_matchable[1] || '''' END AS indicator FROM indicator_detection_domain_rollup WHERE (indicator_matchable[1] = 'php/5.6.40-0+deb8u7' AND indicator_matchable[2] = 'plain' AND indicator_matchable[3] = 'http_request' AND indicator_matchable[4] = 'response_headers') ORDER BY global_rank ASC NULLS LAST

Query Plan

Download: csv json

Query Plan
Limit (cost=3485.21..3486.06 rows=20 width=117)
-> Result (cost=3485.21..3521.68 rows=858 width=117)
-> Sort (cost=3485.21..3487.36 rows=858 width=168)
Sort Key: global_rank
-> Bitmap Heap Scan on indicator_detection_domain_rollup (cost=61.64..3462.38 rows=858 width=168)
Recheck Cond: ((indicator_matchable[1] = 'php/5.6.40-0+deb8u7'::text) AND (indicator_matchable[2] = 'plain'::text) AND (indicator_matchable[3] = 'http_request'::text) AND (indicator_matchable[4] = 'response_headers'::text))
-> Bitmap Index Scan on indicator_detection_domain_rollup_indicator_matchable_arr_idx (cost=0.00..61.43 rows=858 width=0)
Index Cond: ((indicator_matchable[1] = 'php/5.6.40-0+deb8u7'::text) AND (indicator_matchable[2] = 'plain'::text) AND (indicator_matchable[3] = 'http_request'::text) AND (indicator_matchable[4] = 'response_headers'::text))

Data

Total Results: 4 Download: csv json

Technology Name	Domain	Global Rank	Url	First Seen	Last Seen	Indicator
Php/5.6.40-0+deb8u7	clip2net.com	29904.0	clip2net.com/en	2023-10-15 11:20:05.411952+00:00	2024-12-23 08:50:07.585596+00:00	lower(http_request.response_headers) contains 'php/5.6.40-0+deb8u7'
Php/5.6.40-0+deb8u7	zurka.us	83852.0	zurka.us	2023-10-15 10:37:28.527503+00:00	2024-12-23 09:21:59.039727+00:00	lower(http_request.response_headers) contains 'php/5.6.40-0+deb8u7'
Php/5.6.40-0+deb8u7	lizasenglish.ru	NaN	lizasenglish.ru	2023-10-16 12:13:08.227775+00:00	2023-12-13 13:04:24.031907+00:00	lower(http_request.response_headers) contains 'php/5.6.40-0+deb8u7'
Php/5.6.40-0+deb8u7	onverify.com	NaN	www.onverify.com	2023-10-22 02:51:44.982229+00:00	2024-02-07 23:46:23.193804+00:00	lower(http_request.response_headers) contains 'php/5.6.40-0+deb8u7'