Input

field	value
Query:	SELECT 'Squeegit/1.2.5' AS technology_name ,domain ,global_rank ,url_matchable AS url ,created AS first_seen ,last_seen ,CASE WHEN indicator_matchable[2] = 'plain' THEN 'lower(' || indicator_matchable[3] || '.' || indicator_matchable[4] || ') contains ''' || indicator_matchable[1] || '''' ELSE indicator_matchable[3] || '.' || indicator_matchable[4] || ' is regex match of ''' || indicator_matchable[1] || '''' END AS indicator FROM indicator_detection_domain_rollup WHERE (indicator_matchable[1] = 'squeegit/1.2.5' AND indicator_matchable[2] = 'plain' AND indicator_matchable[3] = 'http_request' AND indicator_matchable[4] = 'response_headers') ORDER BY global_rank ASC NULLS LAST

Query Plan

Download: csv json

Query Plan
Limit (cost=3485.21..3486.06 rows=20 width=117)
-> Result (cost=3485.21..3521.68 rows=858 width=117)
-> Sort (cost=3485.21..3487.36 rows=858 width=168)
Sort Key: global_rank
-> Bitmap Heap Scan on indicator_detection_domain_rollup (cost=61.64..3462.38 rows=858 width=168)
Recheck Cond: ((indicator_matchable[1] = 'squeegit/1.2.5'::text) AND (indicator_matchable[2] = 'plain'::text) AND (indicator_matchable[3] = 'http_request'::text) AND (indicator_matchable[4] = 'response_headers'::text))
-> Bitmap Index Scan on indicator_detection_domain_rollup_indicator_matchable_arr_idx (cost=0.00..61.43 rows=858 width=0)
Index Cond: ((indicator_matchable[1] = 'squeegit/1.2.5'::text) AND (indicator_matchable[2] = 'plain'::text) AND (indicator_matchable[3] = 'http_request'::text) AND (indicator_matchable[4] = 'response_headers'::text))

Data

Total Results: 3 Download: csv json

Technology Name	Domain	Global Rank	Url	First Seen	Last Seen	Indicator
Squeegit/1.2.5	thomaslegion.net	459589.0	www.thomaslegion.net	2023-10-15 14:22:31.241837+00:00	2024-12-04 17:54:33.728734+00:00	lower(http_request.response_headers) contains 'squeegit/1.2.5'
Squeegit/1.2.5	skeptically.org	459626.0	www.skeptically.org	2023-10-15 15:03:08.276918+00:00	2024-12-09 17:57:29.801642+00:00	lower(http_request.response_headers) contains 'squeegit/1.2.5'
Squeegit/1.2.5	regimentalrogue.com	NaN	www.regimentalrogue.com	2023-10-15 20:57:08.731980+00:00	2023-11-21 19:10:22.327865+00:00	lower(http_request.response_headers) contains 'squeegit/1.2.5'