# Dragons Eye Bulk Vendor Ransomware Check

> Dragons Eye Bulk Vendor Ransomware Check is a paid API for AI agents from api.ransomware-tracker.com, paid per call via x402, $0.5/call, status unknown (last checked 2026-10-16).

Checks up to 100 vendor domains or company names against ransomware leak-site claims in a single API call, returning matching group claims with dates and sources per vendor.

## Facts

- Endpoint: GET https://api.ransomware-tracker.com/v1/bulk-check?utm_source=zero.xyz
- Price: $0.5/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dragons-eye-bulk-vendor-ransomware-check-4499414c
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_3Z6x76r3Yb2QBP3Q9uCik

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dragons-eye-bulk-vendor-ransomware-check-4499414c
```

Example prompt: Can you check these 20 vendor domains against ransomware leak sites and tell me which ones have been claimed by any ransomware groups: acme-corp.com, globalsupply.net, techdistrib.io, logisticsplus.com, and the rest of the list I'm pasting in?

## When to prefer this

Use this endpoint when you need to check a large batch of vendors (up to 100) in a single call, maximizing efficiency over the single-vendor lookup endpoint. Prefer this for supply chain audits, onboarding workflows, or periodic sweeps of an entire vendor portfolio. Choose the single-vendor or 25-domain batch endpoints if you only have a handful of vendors to check or need lower per-call cost.

## Known failure modes

- More than 100 vendors submitted — request rejected or truncated
- Invalid vendor format causing parsing errors
- No claims found for any vendor — returns empty claims arrays with found:false
- Source unavailability causing incomplete results with partial data
- Malformed input string (wrong delimiter) leading to incorrect vendor parsing
- Rate limiting or payment failure returning 402 or 429 status

## How this service works

Dragons Eye Lookup: Bulk vendor check: up to 100 vendor domains or company names for ransomware leak-site claims. One call checks up to 100 vendors (domains or company names, separated by newlines or semicolons; commas work for a list of domains) and returns, per vendor, matching ransomware-group claims (group, dates, sources). Claims only: risk levels, summary and actions are in /v1/vendor-report. Unverified claims from criminal leak sites; commercially reusable sources only. If the source fail

## Output

Returns a per-vendor list of ransomware group claims, including the group name, first observed date, claimed published date, sector, country, source URLs with license info, and claim count. Also includes a summary of total vendors checked and how many had claims. Each result is labeled as an unverified claim from a criminal leak site.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "vendors"
     ],
     "properties": {
      "vendors": {
       "type": "string",
       "maxLength": 12000,
       "description": "Vendor domains or company names separated by newlines or semicolons, max 100"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "label": "unverified claim from a criminal leak site",
  "report": "bulk_vendor_check",
  "results": [
   {
    "kind": "domain",
    "found": true,
    "claims": [
     {
      "group": "akira",
      "label": "unverified claim from a criminal leak site",
      "sector": "Technology",
      "country": "United States",
      "sources": [
       {
        "url": "https://www.ransomlook.io/",
        "name": "RansomLook",
        "license": "CC BY 4.0",
        "license_url": "https://creativecommons.org/licenses/by/4.0/"
       }
      ],
      "website": "example.com",
      "organization": "example.com",
      "first_observed_at": "2026-09-01T03:10:00Z",
      "claimed_published_at": "2026-09-01T00:00:00Z"
     }
    ],
    "groups": [
     "akira"
    ],
    "status": "ok",
    "vendor": "example.com",
    "claim_count": 1
   }
  ],
  "vendor_count": 2,
  "vendors_with_claims": 1
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dragons-eye-bulk-vendor-ransomware-check-4499414c/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.ransomware-tracker.com](https://www.zero.xyz/host/api.ransomware-tracker.com/llms.txt)