ot-intel-api.onrender.com · /actor

https://ot-intel-api.onrender.com/ot/actor

ICS threat actor profile. Pass ?name=SANDWORM. Returns MITRE ATT&CK ICS techniques, known malware, attribution, physical impact, targeted sectors, and OT detection recommendations. Alias lookup supported: Volt Typhoon→VOLTZITE, APT44→SANDWORM. Covers all Dragos Activity Groups.

BaseCDP BazaarVerified

Price · per callUSDC

$0.0300

Calls · 30d

216

Volume · 30dUSDC

$6.48

Unique payers · 30d

Calls per payerverified

Healthnot probed (top 100 only)

—

Identity

What this profile is sourced from

Server id: ot-intel-api-onrender-com-ot-actor
Endpoint: https://ot-intel-api.onrender.com/ot/actor
Primary chain: Base
Listed by: CDP Bazaar
Last call observed: 16h ago
Available via API: /api/v1/servers/ot-intel-api-onrender-com-ot-actor

Sample 402 exchange

Raw HTTP — what an agent observes

GET https://ot-intel-api.onrender.com/ot/actor

→ HTTP/1.1 402 Payment Required
  X-Payment-Required: $0.0300
  X-Payment-Currency: USDC
  X-Payment-Chain: base

GET https://ot-intel-api.onrender.com/ot/actor
  X-Payment: <signed-receipt>

→ HTTP/1.1 200 OK
  Content-Type: application/json
  …response body…

Caveats

Things to know before drawing strong conclusions

· Calls and volume are 30-day cumulative figures from the source facilitator. Daily breakdowns are not yet available — see /methodology.
· Volume = price × calls. If the server publishes multiple price tiers, only the first accepts[] entry is used.
· "Last call" is what the source last reported, refreshed every 60 seconds.

All servers