Dragons Eye Lookup

Endpoints (3 live)

• GET /v1/lookup — Dragons Eye Lookup: Ransomware leak-site claim lookup by company name or domain. Returns ransomware-group claims (group, dates, country, sector, sources) matching the company or domain. Unverified claims from criminal leak sites; commercially reusable sources only. (0.01 USDC on Base)
• GET /v1/group — Dragons Eye Lookup: Ransomware group profile: aliases, first seen, newest claims. Aliases, first observation by RansomLook, and a sample of the group's newest claims. Unknown groups return 404 and are not charged. Unverified claims from criminal leak sites; commercially reusable sources only. (0.02 USDC on Base)
• GET /v1/recent — Dragons Eye Lookup: Newest ransomware leak-site claims, optionally for one group. Up to 10 of the newest ransomware-group claims, optionally for one group. Unverified claims from criminal leak sites; commercially reusable sources only (country/sector often null). (0.01 USDC on Base)

MCP tools (5)

dragonseye https://api.ransomware-tracker.com/mcp

• group_profile — Profile of a ransomware group: aliases, first observation by RansomLook, and a sample of its newest claims. Every claim is an unverified claim from a criminal leak site, not a confirmed breach.
• lookup_victim — Has a ransomware group claimed this company or domain on a leak site? Returns matching claims (group, dates, country, sector, sources). Every result is an unverified claim from a criminal leak site, not a confirmed breach.
• pricing — FREE. Prices, network, payment address, data sources and the required 'unverified claim' label.
• recent_claims — Newest ransomware leak-site claims (up to 10), optionally for one group. Commercially reusable sources only, so country/sector are often null. Every result is an unverified claim from a criminal leak site, not a confirmed breach.
• validate_query — FREE. Check and normalize a company name or domain before paying for lookup_victim.