{"id":"4e65895a-fbc3-4811-8431-667220b28954","url":"https://ot-intel-api.onrender.com/ot/threat-score?actor=SANDWORM&region=Europe&sector=energy&vendor_stack=Siemens%2CSchneider+Electric","method":"GET","fingerprint":"44d4de05c8d5dd291db404dabd2919bd64dab001f37e5d1551910b3fee66d9ed","name":null,"description":null,"category":"other","docs_url":null,"advertised_price_usd":"0.040000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","scheme":"exact","networks":["eip155:8453"],"pay_to":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","input_schema":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["actor","sector","region","vendor_stack"],"properties":{"actor":{"type":"string","description":"ICS threat actor name e.g. SANDWORM, VOLTZITE, XENOTIME"},"region":{"type":"string","description":"Target region or country e.g. Europe, GCC, Ukraine"},"sector":{"type":"string","description":"Target sector e.g. energy, water, manufacturing"},"vendor_stack":{"type":"string","description":"Comma-separated OT/ICS vendors in the target environment e.g. Siemens,Schneider Electric. Pass 'none' if unknown."}}}},"additionalProperties":false},"output_schema":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}},"schema_completeness":0,"status":"live","first_seen_at":"2026-08-23 22:54:05.538272+00","last_seen_at":"2026-08-23 22:54:03.584+00","last_success_at":"2026-09-14 07:16:00.503+00","dead_since":null,"probe_backoff_tier":0,"next_probe_at":"2026-09-14 07:21:00.503+00","search_tsv":"","catalog_number":"8817","x402_version":2,"resource_url":"https://ot-intel-api.onrender.com/ot/threat-score?actor=SANDWORM&region=Europe&sector=energy&vendor_stack=Siemens%2CSchneider+Electric","resource_description":"Capability x opportunity x intent threat score for an actor-target pairing. Pass actor, sector, region, vendor_stack. Deterministic scoring: actor/CVE/campaign data plus GDELT tension and OFAC sanctions pressure. Not LLM-generated.","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"actor":"SANDWORM","region":"Europe","sector":"energy","vendor_stack":"Siemens,Schneider Electric"}},"output":{"type":"json","example":{"actor":"SANDWORM","intent":{"basis":["sector_history:direct","campaign_geography:match","geo_tension(Russia↔Europe):0.71 [moderate]","sanctions_pressure(Russia):0.60 [moderate]"],"score":0.52,"confidence":"moderate"},"region":"Europe","sector":"energy","coverage":1,"capability":{"basis":["physical_impact_tier:1","ttps_mapped:14","exploited_cves:3","vendor_stack_overlap:yes (documented: SIMATIC (vendor advisory))"],"score":0.82,"confidence":"moderate"},"confidence":"moderate","opportunity":{"basis":["cves_on_record:9","exploited_in_wild:2","avg_cvss:8.1"],"score":0.61,"confidence":"moderate"},"_methodology":"deterministic: product of capability x opportunity x intent (each 0-1), scaled to 0-100, where any leg with confidence:none has its exponent reduced from 1 to 0.3 so a data gap dampens the score instead of vetoing it outright. Identical to naive_product_score whenever coverage is 1 (no data gaps) — see exponents_applied. actor_record_quality:\"generic_descriptor\" means the queried name matches a known non-actor descriptive phrase (e.g. \"unknown cybercrime gang\") rather than a specific named threat actor — treat the score as noise, not a real assessment. See basis[] per leg.","data_sources":["OT-Intel-DB","GDELT Project (gdeltproject.org)","OFAC Sanctions List (US Treasury)"],"threat_score":26,"vendor_stack":["Siemens","Schneider Electric"],"exponents_applied":{"intent":1,"capability":1,"opportunity":1},"naive_product_score":26,"actor_record_quality":"named_entity"}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["actor","sector","region","vendor_stack"],"properties":{"actor":{"type":"string","description":"ICS threat actor name e.g. SANDWORM, VOLTZITE, XENOTIME"},"region":{"type":"string","description":"Target region or country e.g. Europe, GCC, Ukraine"},"sector":{"type":"string","description":"Target sector e.g. energy, water, manufacturing"},"vendor_stack":{"type":"string","description":"Comma-separated OT/ICS vendors in the target environment e.g. Siemens,Schneider Electric. Pass 'none' if unknown."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","amount":"40000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","scheme":"exact","network":"eip155:8453","amountAtomic":"40000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-09-14 07:16:00.503+00","bazaar_validation_error":null,"window":"24h","probes_n":22,"handshake_uptime":1,"settle_success_rate":0,"valid_result_rate":null,"latency_p50":349,"latency_p90":2171,"price_drift_pct":0,"score":0.7836,"computed_at":"2026-09-14 07:16:27.611+00","source_metadata":[{"raw":{"url":"https://ot-intel-api.onrender.com/ot/threat-score?actor=SANDWORM&region=Europe&sector=energy&vendor_stack=Siemens%2CSchneider+Electric","method":"GET","source":"bazaar:api.cdp.coinbase.com","fingerprint":"44d4de05c8d5dd291db404dabd2919bd64dab001f37e5d1551910b3fee66d9ed","advertisedPriceUsd":0.04},"source_id":1,"external_id":null}],"live_endpoint_metadata":{"x402_version":2,"resource_url":"https://ot-intel-api.onrender.com/ot/threat-score?actor=SANDWORM&region=Europe&sector=energy&vendor_stack=Siemens%2CSchneider+Electric","resource_description":"Capability x opportunity x intent threat score for an actor-target pairing. Pass actor, sector, region, vendor_stack. Deterministic scoring: actor/CVE/campaign data plus GDELT tension and OFAC sanctions pressure. Not LLM-generated.","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"actor":"SANDWORM","region":"Europe","sector":"energy","vendor_stack":"Siemens,Schneider Electric"}},"output":{"type":"json","example":{"actor":"SANDWORM","intent":{"basis":["sector_history:direct","campaign_geography:match","geo_tension(Russia↔Europe):0.71 [moderate]","sanctions_pressure(Russia):0.60 [moderate]"],"score":0.52,"confidence":"moderate"},"region":"Europe","sector":"energy","coverage":1,"capability":{"basis":["physical_impact_tier:1","ttps_mapped:14","exploited_cves:3","vendor_stack_overlap:yes (documented: SIMATIC (vendor advisory))"],"score":0.82,"confidence":"moderate"},"confidence":"moderate","opportunity":{"basis":["cves_on_record:9","exploited_in_wild:2","avg_cvss:8.1"],"score":0.61,"confidence":"moderate"},"_methodology":"deterministic: product of capability x opportunity x intent (each 0-1), scaled to 0-100, where any leg with confidence:none has its exponent reduced from 1 to 0.3 so a data gap dampens the score instead of vetoing it outright. Identical to naive_product_score whenever coverage is 1 (no data gaps) — see exponents_applied. actor_record_quality:\"generic_descriptor\" means the queried name matches a known non-actor descriptive phrase (e.g. \"unknown cybercrime gang\") rather than a specific named threat actor — treat the score as noise, not a real assessment. See basis[] per leg.","data_sources":["OT-Intel-DB","GDELT Project (gdeltproject.org)","OFAC Sanctions List (US Treasury)"],"threat_score":26,"vendor_stack":["Siemens","Schneider Electric"],"exponents_applied":{"intent":1,"capability":1,"opportunity":1},"naive_product_score":26,"actor_record_quality":"named_entity"}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["actor","sector","region","vendor_stack"],"properties":{"actor":{"type":"string","description":"ICS threat actor name e.g. SANDWORM, VOLTZITE, XENOTIME"},"region":{"type":"string","description":"Target region or country e.g. Europe, GCC, Ukraine"},"sector":{"type":"string","description":"Target sector e.g. energy, water, manufacturing"},"vendor_stack":{"type":"string","description":"Comma-separated OT/ICS vendors in the target environment e.g. Siemens,Schneider Electric. Pass 'none' if unknown."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","amount":"40000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","scheme":"exact","network":"eip155:8453","amountAtomic":"40000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-09-14 07:16:00.503+00","bazaar_validation_error":null},"sonar_metrics":{"score":0.7836,"uptime":1,"paid_success_rate":0,"valid_result_rate":null,"latency_p50":349,"latency_p90":2171,"price_drift_pct":0},"cdp_indexed":false,"confidence":"high"}