Parameters1
| Parameter | Type | Default | Example |
|---|---|---|---|
name | string | null | SANDWORM |
Service overview
ICS threat actor ASN infrastructure profiling. Pass ?asn=AS215540. Returns ICS actor associations (SANDWORM, VOLTZITE, XENOTIME), phishing kit links (Tycoon2FA, EvilProxy, NakedPages), bulletproof hosting indicators, abuse categories (c2, staging, phishing), and an OT-specific blocking recommendation with WAF rule hint. ASN analysis reveals infrastructure clustering that survives IP/domain rotation — critical for OT defenders tracking persistent actor infrastructure.
Level up your agent by giving it access to thousands of services. All payable per-request via x402. No API keys, no accounts.
Paste into your agentic chat and let your agent guide you.
npx awal x402 pay "https://ot-intel-api.onrender.com/ot/actor" \
--query '{
"name": "{name}"
}'{
"endpoint": "GET /ot/actor",
"paid": true,
"query": "example input",
"result": {
"value": "Structured response from the service."
}
}API surface
21 crawlable routes
| Parameter | Type | Default | Example |
|---|---|---|---|
name | string | null | SANDWORM |
| Parameter | Type | Default | Example |
|---|---|---|---|
sector | string | null | energy |
| Parameter | Type | Default | Example |
|---|---|---|---|
limit | string | null | 10 |
sector | string | null | energy |
vendor | string | null | siemens |
| Parameter | Type | Default | Example |
|---|---|---|---|
actor | string | null | CHERNOVITE |
sector | string | null | energy |
| Parameter | Type | Default | Example |
|---|---|---|---|
asn | string | null | AS215540 |
| Parameter | Type | Default | Example |
|---|---|---|---|
period | string | null | 30 |
sector | string | null | energy |
| Parameter | Type | Default | Example |
|---|---|---|---|
sector | string | null | electric |
status | string | null | active |
| Parameter | Type | Default | Example |
|---|---|---|---|
cve_id | string | null | CVE-2023-38802 |
| Parameter | Type | Default | Example |
|---|---|---|---|
id | string | null | CVE-2023-38802 |
| Parameter | Type | Default | Example |
|---|---|---|---|
days | string | null | 7 |
sector | string | null | water |
| Parameter | Type | Default | Example |
|---|---|---|---|
target | string | null | PIPEDREAM |
| Parameter | Type | Default | Example |
|---|---|---|---|
model | string | null | vision |
vendor | string | null | unitronics |
| Parameter | Type | Default | Example |
|---|---|---|---|
actor | string | null | SANDWORM |
| Parameter | Type | Default | Example |
|---|---|---|---|
model | string | null | s7-1500 |
network | string | null | internet-facing |
sector | string | null | energy |
vendor | string | null | siemens |
| Parameter | Type | Default | Example |
|---|---|---|---|
type | string | null | ip |
value | string | null | 185.220.101.45 |
| Parameter | Type | Default | Example |
|---|---|---|---|
actor | string | null | VOLTZITE |
| Parameter | Type | Default | Example |
|---|---|---|---|
name | string | null | PIPEDREAM |
| Parameter | Type | Default | Example |
|---|---|---|---|
id | string | null | CVE-2021-34527 |
| Parameter | Type | Default | Example |
|---|---|---|---|
actor | string | null | CHERNOVITE |
sector | string | null | energy |
| Parameter | Type | Default | Example |
|---|---|---|---|
period | string | null | 30 |
sector | string | null | energy |
| Parameter | Type | Default | Example |
|---|---|---|---|
actor | string | null | XENOTIME |
FAQ
Service
CuseTheJuice mailbox @ mail.cusethejuice.com — change mailbox password (current password + new_password in JSON). Agents: pay with x402 (Base USDC), POST JSON using fields from extensions.bazaar on the 402. Full catalog, examples, human flows: https://mail.cusethejuice.com/machine-mail.html · Find every route: Coinbase CDP x402 merchant discovery (payTo).
Service
Agent-driven wallet due diligence — multi-step investigation, signed markdown report + JSON sidecar, dual-chain anchored. Async — returns job_id; poll /v1/investigate/status/{job_id} for the deliverable. ETA 5-10 min. $1.77 USDC.
Service
MiroShark: run a 25-agent social-media simulation across Twitter, Reddit, and Polymarket over 10 rounds from a single prompt, URL, or article, then read a synthesized markdown report with belief drift, top posts, and prediction-market trajectories.