{"uid":"cap_nIOYM6PRXDUG6Pr-lttvv","slug":"dragons-eye-watchlist-528fd2ed","name":"Dragons Eye Watchlist","description":"Watch up to 25 domains for 30 days for new ransomware leak-site claims. $2.00 USDC on Base, paid once. Checked every 15 minutes; on a domain or exact-name match you get a signed webhook. Validate entries free first at POST /v1/watchlists/validate. Alerts are unverified claims from criminal leak sites, commercially reusable sources only.","url":"https://dragonseye-watchlist.dario-9fa.workers.dev/v1/watchlists?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"entries":{"type":"array","items":{"type":"object","required":["domain"],"properties":{"name":{"type":"string","maxLength":120},"domain":{"type":"string"}}},"maxItems":25,"minItems":1},"delivery":{"type":"object","properties":{"webhook_url":{"type":"string","description":"Public HTTPS URL"}}}}},"responseSchema":{"type":"json","example":{"status":"active","entries":[{"name":null,"domain":"example.com","matches_by":"domain only"}],"delivery":{"webhook_url":"https://example.com/hook"},"rejected":[],"expires_at":"2026-11-23T00:00:00.000Z","manage_url":"https://dragonseye-watchlist.dario-9fa.workers.dev/v1/watchlists/wl_abcdefghijklmnop","manage_token":"<shown once>","watchlist_id":"wl_abcdefghijklmnop","webhook_secret":"<shown once>"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"2","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$2/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"2","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"2","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_rNqyk5f98FquiKBuseom4","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"2","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Creates a 30-day ransomware leak-site watchlist monitoring up to 25 domains and sending signed webhook alerts on new claims","exampleAgentPrompt":"Set up a 30-day ransomware leak-site watch on acme-corp.com, supplier-xyz.com, and partnerco.net — send alerts to https://alerts.mycompany.com/webhook if any of them show up in a new claim.","exampleUseCases":[{"title":"Enterprise domain ransomware monitoring","prompt":"Watch acme-corp.com and all its subsidiaries — acme-logistics.com and acme-retail.com — for any new ransomware leak-site claims over the next 30 days and send a signed webhook to https://soc.acme.com/hooks/ransomware whenever there's a hit."},{"title":"MSSP client portfolio threat watch","prompt":"I'm a managed security provider — set up ransomware leak-site monitoring for five client domains: clienta.com, clientb.io, clientc.net, clientd.org, and cliente.co. Alert my triage team at https://mssp-alerts.example.com/inbound if any of them appear in a new claim."},{"title":"M&A due diligence ransomware check","prompt":"We're doing due diligence on a potential acquisition — can you watch targetcompany.com and its parent holdco-group.com for any new ransomware leak-site claims and ping https://dealteam.myvc.com/hooks if anything comes up in the next 30 days?"}],"resultDescription":"Returns a watchlist object with a unique watchlist_id, manage_url, a one-time manage_token and webhook_secret for validating signed callbacks, the list of accepted entries with their matching mode (domain only, or domain+name), any rejected entries, and an expires_at timestamp 30 days out. Every 15 minutes the service polls ransomware leak sites; on a domain or name match it delivers a signed POST to the configured webhook_url.","failureModes":["Invalid or non-HTTPS webhook_url causes rejection","More than 25 entries submitted returns validation error","Missing required domain field on any entry causes rejection","Payment not completed or insufficient USDC balance blocks watchlist creation","Webhook delivery fails if the target URL is unreachable or returns non-2xx — no guaranteed retry SLA disclosed","Alerts are unverified criminal claims — false positives possible","Watchlist expires after 30 days with no auto-renewal","manage_token and webhook_secret shown only once at creation; loss is unrecoverable"],"whenToPreferThis":"Choose this endpoint when you need near-real-time (15-minute polling) ransomware leak-site claim alerts delivered as signed webhooks for a batch of up to 25 specific domains, especially for SOC automation, MSSP client monitoring, or M&A due diligence scenarios. It is purpose-built for ransomware threat intelligence from commercially reusable sources and is priced as a flat $2 USDC one-time fee per 30-day watchlist, making it cost-effective for multi-domain coverage. Prefer alternatives if you need broader dark web monitoring beyond ransomware leak sites, historical claim lookups, or real-time streaming rather than webhook delivery.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:30:58.248Z","isFirstParty":false,"canonicalSlug":"dragons-eye-watchlist-528fd2ed"}