{"uid":"cap_9F_BcbXfsFWs6S122k_ZB","slug":"dragons-eye-ransomware-victim-lookup-71080363","name":"Dragons Eye Ransomware Victim Lookup","description":"Public ransomware intelligence: live monitoring of leak-site victim claims, a directory of tracked ransomware groups, sector and geography statistics, MITRE ATT&CK context, and activity trends — for defenders, researchers, and SOC analysts.","url":"https://api.ransomware-tracker.com/v1/lookup?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["q"],"properties":{"q":{"type":"string","maxLength":120,"minLength":3,"description":"Company name or domain, e.g. 'Acme Corp' or acme.com"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"found":true,"label":"unverified claim from a criminal leak site","query":{"kind":"domain","value":"example.com"},"claims":[{"group":"akira","label":"unverified claim from a criminal leak site","sector":"Technology","country":"United States","sources":[{"url":"https://www.ransomlook.io/","name":"RansomLook","license":"CC BY 4.0","license_url":"https://creativecommons.org/licenses/by/4.0/"}],"website":"example.com","organization":"example.com","first_observed_at":"2026-09-01T03:10:00Z","claimed_published_at":"2026-09-01T00:00:00Z"}],"claim_count":1}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_0yoIuSbPOLisPfXdCxKs6","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up whether a company or domain has been claimed as a victim on ransomware gang leak sites, returning group attribution, sector, geography, and claim timestamps.","exampleAgentPrompt":"Has 'acme.com' ever appeared on a ransomware group leak site? I need to know which group claimed them, what sector they're in, and when the claim was first observed.","exampleUseCases":[{"title":"Vendor due diligence ransomware check","prompt":"Before we sign this contract, can you check whether 'globalsupplyco.com' has been listed as a ransomware victim on any leak sites? I want to know which group claimed them and when."},{"title":"SOC analyst incident triage","prompt":"We're investigating a potential partner breach — can you look up whether 'partner-corp.com' shows up in any ransomware leak-site claims and tell me the group name and dates?"},{"title":"Cyber insurance risk assessment","prompt":"I'm evaluating cyber risk for a client — can you search ransomware leak sites for any claims against 'Midwest Financial Group' and tell me which sector they're categorized under and how many claims exist?"}],"resultDescription":"Returns a JSON object indicating whether the queried company or domain was found in ransomware leak-site records. If found, includes one or more claim objects each containing: the ransomware group name, a label noting it is an unverified criminal claim, the victim's sector, country, website, organization name, first observed date, claimed publish date, and source attribution (e.g. RansomLook with license). Also returns a total claim count.","failureModes":["Query string too short (under 3 characters) or too long (over 120 characters) returns a validation error","Company or domain not found in tracked leak-site data returns found:false with empty claims array","Ambiguous company name may return zero results if not matched to indexed victims","Payment failure or missing x402 payment header results in 402 Payment Required","Service unavailable or upstream data source outage may return 5xx error"],"whenToPreferThis":"Use this endpoint when you need to quickly determine whether a specific company name or domain has appeared as a claimed victim on ransomware gang leak sites. It is ideal for SOC analysts triaging incidents, security researchers profiling threat exposure, M&A or vendor due-diligence workflows, and cyber insurance risk assessments. Prefer this over general threat intel platforms when you need fast, targeted lookup of ransomware-specific victim claims with group attribution, sector classification, and timestamp data at low per-query cost.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T12:30:06.689Z","isFirstParty":false,"canonicalSlug":"dragons-eye-ransomware-victim-lookup-71080363"}