{"uid":"cap_VCKtEHAwAECF_vPpIrDEr","slug":"dragons-eye-batch-vendor-ransomware-exposure-check-658552e5","name":"Dragons Eye Batch Vendor Ransomware Exposure Check","description":"Dragons Eye Lookup: Batch vendor exposure check: up to 25 domains for ransomware leak-site claims. One call checks up to 25 vendor/supplier domains (comma-separated) and returns, per domain, any matching ransomware-group claims. Unverified claims from criminal leak sites; commercially reusable sources only. found:false is not proof of absence.","url":"https://api.ransomware-tracker.com/v1/batch?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domains"],"properties":{"domains":{"type":"string","maxLength":4000,"description":"Comma-separated domains, max 25, e.g. acme.com,example.org"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"label":"unverified claim from a criminal leak site","errors":0,"partial":false,"results":[{"found":true,"claims":[{"group":"akira","label":"unverified claim from a criminal leak site","sector":"Technology","country":"United States","sources":[{"url":"https://www.ransomlook.io/","name":"RansomLook","license":"CC BY 4.0","license_url":"https://creativecommons.org/licenses/by/4.0/"}],"website":"example.com","organization":"example.com","first_observed_at":"2026-09-01T03:10:00Z","claimed_published_at":"2026-09-01T00:00:00Z"}],"domain":"example.com","status":"ok","claim_count":1},{"found":false,"claims":[],"domain":"example.org","status":"ok","claim_count":0}],"domain_count":2,"domains_with_claims":1}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_SaVqj9YdVS01F2GAF8iFo","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks up to 25 vendor/supplier domains in a single call against ransomware group leak-site claims, returning any matching claims per domain.","exampleAgentPrompt":"Check these vendor domains against ransomware leak sites in one batch: acme.com, globalsupply.net, techparts.io, vendorco.com, and logistics-corp.com — I need to know if any of them have been claimed by a ransomware group.","exampleUseCases":[{"title":"Pre-acquisition vendor due diligence","prompt":"Before we finalize this acquisition, can you batch-check these five target company domains — mergeco.com, holdingsgroup.net, targetfirm.io, acquiree.com, partnerllc.org — against ransomware leak sites so I can flag any prior exposure?"},{"title":"Quarterly supply chain cyber risk review","prompt":"Run a ransomware exposure check on our top 20 suppliers — here are their domains: supplier1.com, supplier2.net, supplier3.org, parts4u.com, logisticspro.net, vendor5.io, supplyco.com, mfgpartner.net, distrib8.com, rawmaterials.org, globalship.com, fastfreight.net, packagingltd.co, chemicalco.com, electroparts.io, steelworks.net, plasticsmfg.com, rubberco.org, hardwareplus.net, toolingpro.com — flag any that appear on ransomware group leak pages."},{"title":"Incident response third-party exposure triage","prompt":"We just had a security incident and need to quickly check if any of these partner domains show up on ransomware leak sites: partnera.com, partnerb.net, partnerc.io, partnerd.org, partnere.com — can you pull that in one shot?"}],"resultDescription":"Returns a per-domain result set indicating whether each submitted domain was found in ransomware group leak-site claims, along with details of any matching claims (ransomware group name, claim details). A found:false result explicitly does not guarantee absence from all sources — only that no matching claim was found in the tracked dataset.","failureModes":["More than 25 domains submitted in a single call — request rejected","Malformed or non-domain-format strings in the comma-separated list","Payment failure (x402 protocol) — call not executed","Rate limiting if too many calls made in short succession","Domain string exceeds 4000 character limit for the query parameter","Service temporarily unavailable returning 5xx errors"],"whenToPreferThis":"Use this endpoint when you need to screen multiple vendor or supplier domains (up to 25) for ransomware leak-site exposure in a single efficient call, particularly for supply chain risk assessments, third-party due diligence workflows, or periodic vendor hygiene checks. It is preferable over single-domain lookups when you have a batch of domains to screen simultaneously and want to minimize API calls and cost. Best suited for scenarios where unverified criminal leak-site intelligence is acceptable as a risk signal rather than a definitive confirmation.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-17T06:31:11.663Z","isFirstParty":false,"canonicalSlug":"dragons-eye-batch-vendor-ransomware-exposure-check-658552e5"}