{"id":"68a67c06-9b84-4c54-9edc-4ace582d9797","url":"https://ot-intel-api.onrender.com/ot/asn?asn=AS215540","method":"GET","fingerprint":"a3532b44691df363b5e49bff54c45440569fa058f3d7c02a3c637cf4e1ed4bd9","name":null,"description":null,"category":"other","docs_url":null,"advertised_price_usd":"0.030000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","scheme":"exact","networks":["eip155:8453"],"pay_to":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","input_schema":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["asn"],"properties":{"asn":{"type":"string","description":"ASN identifier e.g. AS215540, AS9009, AS29802"},"org":{"type":"string","description":"Optional org name fragment e.g. hivelocity, m247, globalconnectivity"}}}},"additionalProperties":false},"output_schema":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}},"schema_completeness":0,"status":"live","first_seen_at":"2026-08-23 21:21:58.47436+00","last_seen_at":"2026-08-23 21:21:56.912+00","last_success_at":"2026-09-14 16:10:03.422+00","dead_since":null,"probe_backoff_tier":0,"next_probe_at":"2026-09-14 16:15:03.422+00","search_tsv":"","catalog_number":"5898","x402_version":2,"resource_url":"https://ot-intel-api.onrender.com/ot/asn?asn=AS215540","resource_description":"ICS threat actor ASN infrastructure profiling. Pass ?asn=AS215540. Returns ICS actor associations (SANDWORM, VOLTZITE, XENOTIME), phishing kit links (Tycoon2FA, EvilProxy, NakedPages), bulletproof hosting indicators, abuse categories (c2, staging, phishing), and an OT-specific blocking recommendation with WAF rule hint. ASN analysis reveals infrastructure clustering that survives IP/domain rotation — critical for OT defenders tracking persistent actor infrastructure.","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"asn":"AS215540"}},"output":{"type":"json","example":{"asn":"AS215540","org_name":"GLOBAL CONNECTIVITY SOLUTIONS LLP","freshness":"2026-06-19T10:00:00Z","confidence":"high","data_sources":["OT-Intel-DB","Dragos-Threat-Intelligence","DeepSeek-CTI-Analysis"],"waf_rule_hint":"AWS WAF AsnMatchStatement: [215540]","abuse_categories":["bulletproof_hosting","phishing","c2"],"ics_campaign_context":"AS215540 (GLOBAL CONNECTIVITY SOLUTIONS LLP) appears in published ICS campaign reporting as preferred ASN for credential theft relay servers targeting industrial sector authentication.","bulletproof_indicator":true,"ics_actor_associations":["SANDWORM","VOLTZITE"],"blocking_recommendation":"BLOCK — no legitimate ICS vendor or operator traffic expected","phishing_kit_associations":["Tycoon2FA","NakedPages","Sneaky2FA"]}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["asn"],"properties":{"asn":{"type":"string","description":"ASN identifier e.g. AS215540, AS9009, AS29802"},"org":{"type":"string","description":"Optional org name fragment e.g. hivelocity, m247, globalconnectivity"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","amount":"30000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","scheme":"exact","network":"eip155:8453","amountAtomic":"30000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-09-14 16:10:03.422+00","bazaar_validation_error":null,"window":"24h","probes_n":18,"handshake_uptime":1,"settle_success_rate":0,"valid_result_rate":null,"latency_p50":508,"latency_p90":3392,"price_drift_pct":0,"score":0.6588,"computed_at":"2026-09-14 16:10:29.559+00","source_metadata":[{"raw":{"url":"https://ot-intel-api.onrender.com/ot/asn?asn=AS215540","method":"GET","source":"bazaar:api.cdp.coinbase.com","fingerprint":"a3532b44691df363b5e49bff54c45440569fa058f3d7c02a3c637cf4e1ed4bd9","advertisedPriceUsd":0.03},"source_id":1,"external_id":null}],"live_endpoint_metadata":{"x402_version":2,"resource_url":"https://ot-intel-api.onrender.com/ot/asn?asn=AS215540","resource_description":"ICS threat actor ASN infrastructure profiling. Pass ?asn=AS215540. Returns ICS actor associations (SANDWORM, VOLTZITE, XENOTIME), phishing kit links (Tycoon2FA, EvilProxy, NakedPages), bulletproof hosting indicators, abuse categories (c2, staging, phishing), and an OT-specific blocking recommendation with WAF rule hint. ASN analysis reveals infrastructure clustering that survives IP/domain rotation — critical for OT defenders tracking persistent actor infrastructure.","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"asn":"AS215540"}},"output":{"type":"json","example":{"asn":"AS215540","org_name":"GLOBAL CONNECTIVITY SOLUTIONS LLP","freshness":"2026-06-19T10:00:00Z","confidence":"high","data_sources":["OT-Intel-DB","Dragos-Threat-Intelligence","DeepSeek-CTI-Analysis"],"waf_rule_hint":"AWS WAF AsnMatchStatement: [215540]","abuse_categories":["bulletproof_hosting","phishing","c2"],"ics_campaign_context":"AS215540 (GLOBAL CONNECTIVITY SOLUTIONS LLP) appears in published ICS campaign reporting as preferred ASN for credential theft relay servers targeting industrial sector authentication.","bulletproof_indicator":true,"ics_actor_associations":["SANDWORM","VOLTZITE"],"blocking_recommendation":"BLOCK — no legitimate ICS vendor or operator traffic expected","phishing_kit_associations":["Tycoon2FA","NakedPages","Sneaky2FA"]}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["asn"],"properties":{"asn":{"type":"string","description":"ASN identifier e.g. AS215540, AS9009, AS29802"},"org":{"type":"string","description":"Optional org name fragment e.g. hivelocity, m247, globalconnectivity"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","amount":"30000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","scheme":"exact","network":"eip155:8453","amountAtomic":"30000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-09-14 16:10:03.422+00","bazaar_validation_error":null},"sonar_metrics":{"score":0.6588,"uptime":1,"paid_success_rate":0,"valid_result_rate":null,"latency_p50":508,"latency_p90":3392,"price_drift_pct":0},"cdp_indexed":false,"confidence":"medium"}