ASN threat intelligence from Telegram CTI channels. Pass ?asn=AS215540. Returns C2 framework associations, phishing kit links (Tycoon2FA, EvilProxy, NakedPages), threat actor mentions, bulletproof hosting indicators, blocking recommendation with WAF rule hint, and matching TeleSint record IDs for pivoting into /c2 or /ioc. Distinct from OT-Intel /ot/asn — angle is cybercriminal Telegram chatter about hosting infrastructure, not ICS actor campaigns.