{"uid":"cap_VnHCtnfo9MXbRl4ktieJP","slug":"ransomware-risk-check-8533ca45","name":"Ransomware Risk Check","description":"Check whether a domain appears on a known ransomware group's victim/leak-site list, and whether pre-ransomware credential harvesting was detected beforehand. Call to assess active ransomware exposure for a domain, not just historical breach history.","url":"https://atq6wtkp6k.execute-api.us-east-1.amazonaws.com/prod/v1/payg/ransomware-risk","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","description":"Domain to check against the ransomware victim list"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.4","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.4/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.4","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.4","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_DGVy38B5qqOtG7nbAReiK","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.4","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether a domain appears on a ransomware group's victim or leak-site list and whether pre-ransomware credential harvesting was detected beforehand.","exampleAgentPrompt":"Check whether acmecorp.com appears on any known ransomware group leak sites and whether there were any pre-ransomware credential harvesting signals detected for that domain.","exampleUseCases":[{"title":"Vendor ransomware due diligence","prompt":"Before we onboard this new supplier, can you check if solutions-partner.com has ever appeared on a ransomware group's victim or leak site, and whether any credential harvesting activity was detected before any potential attack?"},{"title":"Incident response triage","prompt":"We just got an alert that our company might be compromised — can you check whether technowidgets.com is listed on any ransomware leak sites right now and if there were signs of infostealer activity before it?"},{"title":"Portfolio company security audit","prompt":"I need to assess ransomware exposure for one of our portfolio companies — check whether innovatech.io shows up on any known ransomware group victim lists and flag if pre-ransomware credential theft was detected."}],"resultDescription":"Returns whether the queried domain appears on known ransomware group victim or leak-site lists, identifies the specific ransomware group(s) if applicable, and indicates whether pre-ransomware credential harvesting activity was detected for the domain prior to any attack.","failureModes":["Domain not found in any ransomware database — returns no-match result","Invalid or malformed domain input — returns validation error","Ransomware threat intelligence feed temporarily unavailable — service error","Rate limiting exceeded — returns HTTP 429","Payment not processed or insufficient — returns HTTP 402"],"whenToPreferThis":"Choose this endpoint when you need to assess active or historical ransomware exposure for a specific domain, particularly when you want to know both whether a domain appeared on a ransomware leak site AND whether pre-attack credential harvesting was detected. Prefer this over generic breach-check endpoints when ransomware-specific threat intelligence (leak-site listings, group attribution, pre-ransomware infostealer activity) is the primary concern rather than general data breach history.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T12:41:11.273Z","isFirstParty":false}