Dragons Eye Lookup
api.ransomware-tracker.com · 12 paid endpoints · listed 2026-10-27
Was this company hit by ransomware? Leak-site claim lookup by company name or domain. $0.01 USDC on Base per call. Returns matching ransomware-group claims with group, dates, country, sector and sources. Don't use this as proof of a breach; these are unverified claims from criminal leak sites.
Paid endpoints
| Method | Endpoint | Price | Networks |
|---|---|---|---|
| GET | api.ransomware-tracker.com/v1/indicator-check Is this domain or IP malicious? Check against a 30-day high-confidence IOC feed. $0.01 USDC on Base per call. Returns listed or not_listed, match type, stated r | $0.01 | Base |
| GET | api.ransomware-tracker.com/v1/lookup Was this company hit by ransomware? Leak-site claim lookup by company name or domain. $0.01 USDC on Base per call. Returns matching ransomware-group claims with | $0.01 | Base |
| GET | api.ransomware-tracker.com/v1/recent Get the newest ransomware leak-site victim claims, optionally for one group. $0.01 USDC on Base per call. Returns up to 10 of the newest claims. Country and sec | $0.01 | Base |
| GET | api.ransomware-tracker.com/v1/group Look up a ransomware group profile: aliases, first seen and newest claims. $0.02 USDC on Base per call. Returns aliases, first observation by RansomLook and a s | $0.02 | Base |
| GET | api.ransomware-tracker.com/v1/cve Is this CVE exploited? CVE lookup with KEV, ransomware use, EPSS and public exploits. $0.03 USDC on Base per call. Returns CVSS, affected products, advisories, | $0.03 | Base |
| GET | api.ransomware-tracker.com/v1/batch Check up to 25 vendor domains for ransomware leak-site claims in one call. $0.05 USDC on Base per call. Returns any matching claims per domain. found:false is n | $0.05 | Base |
| GET | api.ransomware-tracker.com/v1/group-intel Get intel on a ransomware group: activity trend, tools, malware, ATT&CK and CVEs. $0.05 USDC on Base per call. Returns leak-site listing counts with a momentum | $0.05 | Base |
| GET | api.ransomware-tracker.com/v1/indicator-batch Check up to 100 domains or IPv4 addresses against a threat IOC feed in one call. $0.25 USDC on Base per call. Same check as /v1/indicator-check at one flat pric | $0.25 | Base |
| POST | api.ransomware-tracker.com/v1/watch Dragons Eye Lookup: Prepaid vendor ransomware watch: up to 25 vendors for 30 days, webhook on new claims. Pay once; each vendor (domain or company name) is re-c | $0.30 | Base |
| GET | api.ransomware-tracker.com/v1/bulk-check Check up to 100 vendors (domains or company names) for ransomware leak-site claims. $0.5 USDC on Base per call. Returns matching claims per vendor with group, d | $0.50 | Base |
| GET | api.ransomware-tracker.com/v1/cve-batch Look up up to 50 CVEs in one call: KEV, EPSS, exploits and ATT&CK. $0.5 USDC on Base per call. Returns the /v1/cve record for each. Charged only if every CVE is | $0.50 | Base |
| GET | api.ransomware-tracker.com/v1/vendor-report Build a third-party ransomware risk report for up to 100 vendors. $3 USDC on Base per call. Returns matching leak-site claims, a risk level per vendor (high = c | $3.00 | Base |
Latest checks
| When | Endpoint | HTTP | ms | Result |
|---|---|---|---|---|
| 5 days ago | api.ransomware-tracker.com/v1/batch | 402 | 709 | valid x402 v2 terms |
Income on Base (7 days)
This provider's payout address is shared by several providers, so its income is not shown as its own.
Is this your API?
<a href="https://logicnodes.io/observatory/p/api.ransomware-tracker.com"><img src="https://logicnodes.io/observatory/badge/api.ransomware-tracker.com.svg" alt="x402 status"></a>
Claim it for free with
x402_provider_claim (sign with your payout address), and get an alert within minutes when it stops answering with x402_monitor_create ($5 for 30 days). Both work over MCP (https://logicnodes.io/mcp/v2) or POST https://logicnodes.io/v1/tools/<tool>.Income is all USDC received by the provider's payout address on Base, whatever the source. Score: 0-100: 50 x share of checks in the last 72 h that returned valid x402 payment terms + 30 x min(1, log10(1 + USDC received in 7 days) / 4) + 20 x min(1, log10(1 + distinct payers in 7 days) / 3). A provider never checked scores on income only; income is all USDC received by its payout address on Base, whatever the source. JSON: /v1/observatory/providers/api.ransomware-tracker.com