New cont3xt integration : "Quad9" for domain/ip block / malicious reputation state

[WilliamSalusky]

This integration should issue a query for each DOMAIN or IP value to the following endpoint.

https://dns.quad9.net/dns-query?name=${indicator}

A Quad9 json response with a blocked status would contain detail similar to:

{'domain': 'liverpool777.duckdns.org', 'blocked': True, 'blocked_by': ['threatconnect', 'duskrise.malware', 'ticura'], 'meta': [{'name': 'ThreatConnect'}, {'name': 'Cluster25 - Malware Domains', 'url': 'mailto:threatintel@cluster25.io?subject=False positive report for liverpool777.duckdns.org'}, {'name': 'Ticura'}]}

Non malicious or unknown status would return a simple response, like:

{'domain': 'purple.org', 'blocked': False}

Only in the case of a { 'blocked': True } result, a red background UI badge should be displayed in the Indicator Result tree [node/box] with static text of "Quad9", and tooltip hover text for the badge would include the key/values of the 'blocked_by' response.