# Dragons Eye Batch Vendor Ransomware Exposure Check

> Dragons Eye Batch Vendor Ransomware Exposure Check is a paid API for AI agents from api.ransomware-tracker.com, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-17).

Checks up to 25 vendor/supplier domains in a single call against ransomware group leak-site claims, returning any matching claims per domain.

## Facts

- Endpoint: GET https://api.ransomware-tracker.com/v1/batch?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-17
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dragons-eye-batch-vendor-ransomware-exposure-check-658552e5
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_VCKtEHAwAECF_vPpIrDEr

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dragons-eye-batch-vendor-ransomware-exposure-check-658552e5
```

Example prompt: Check these vendor domains against ransomware leak sites in one batch: acme.com, globalsupply.net, techparts.io, vendorco.com, and logistics-corp.com — I need to know if any of them have been claimed by a ransomware group.

## When to prefer this

Use this endpoint when you need to screen multiple vendor or supplier domains (up to 25) for ransomware leak-site exposure in a single efficient call, particularly for supply chain risk assessments, third-party due diligence workflows, or periodic vendor hygiene checks. It is preferable over single-domain lookups when you have a batch of domains to screen simultaneously and want to minimize API calls and cost. Best suited for scenarios where unverified criminal leak-site intelligence is acceptable as a risk signal rather than a definitive confirmation.

## Known failure modes

- More than 25 domains submitted in a single call — request rejected
- Malformed or non-domain-format strings in the comma-separated list
- Payment failure (x402 protocol) — call not executed
- Rate limiting if too many calls made in short succession
- Domain string exceeds 4000 character limit for the query parameter
- Service temporarily unavailable returning 5xx errors

## How this service works

Dragons Eye Lookup: Batch vendor exposure check: up to 25 domains for ransomware leak-site claims. One call checks up to 25 vendor/supplier domains (comma-separated) and returns, per domain, any matching ransomware-group claims. Unverified claims from criminal leak sites; commercially reusable sources only. found:false is not proof of absence.

## Output

Returns a per-domain result set indicating whether each submitted domain was found in ransomware group leak-site claims, along with details of any matching claims (ransomware group name, claim details). A found:false result explicitly does not guarantee absence from all sources — only that no matching claim was found in the tracked dataset.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domains"
     ],
     "properties": {
      "domains": {
       "type": "string",
       "maxLength": 4000,
       "description": "Comma-separated domains, max 25, e.g. acme.com,example.org"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "label": "unverified claim from a criminal leak site",
  "errors": 0,
  "partial": false,
  "results": [
   {
    "found": true,
    "claims": [
     {
      "group": "akira",
      "label": "unverified claim from a criminal leak site",
      "sector": "Technology",
      "country": "United States",
      "sources": [
       {
        "url": "https://www.ransomlook.io/",
        "name": "RansomLook",
        "license": "CC BY 4.0",
        "license_url": "https://creativecommons.org/licenses/by/4.0/"
       }
      ],
      "website": "example.com",
      "organization": "example.com",
      "first_observed_at": "2026-09-01T03:10:00Z",
      "claimed_published_at": "2026-09-01T00:00:00Z"
     }
    ],
    "domain": "example.com",
    "status": "ok",
    "claim_count": 1
   },
   {
    "found": false,
    "claims": [],
    "domain": "example.org",
    "status": "ok",
    "claim_count": 0
   }
  ],
  "domain_count": 2,
  "domains_with_claims": 1
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dragons-eye-batch-vendor-ransomware-exposure-check-658552e5/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.ransomware-tracker.com](https://www.zero.xyz/host/api.ransomware-tracker.com/llms.txt)