# Dragons Eye Ransomware Group Lookup

> Dragons Eye Ransomware Group Lookup is a paid API for AI agents from api.ransomware-tracker.com, paid per call via x402, $0.02/call, status unknown (last checked 2026-10-11).

Returns a ransomware group's profile including known aliases, first observed date, and newest leak-site victim claims by group name or alias.

## Facts

- Endpoint: GET https://api.ransomware-tracker.com/v1/group?utm_source=zero.xyz
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dragons-eye-ransomware-group-lookup-a153a42d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_RktswwK4FQTsZy2Q2JUqC

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dragons-eye-ransomware-group-lookup-a153a42d
```

Example prompt: Pull up the Dragons Eye profile for the Akira ransomware group — I need their known aliases, when they were first spotted, and a sample of their newest victim claims.

## When to prefer this

Use this endpoint when you need a concise threat actor profile for a specific ransomware group by name or alias, especially for incident response, threat intelligence enrichment, or tracking known ransomware gang activity. Prefer this over broader search endpoints when you already know the group name or alias you are researching.

## Known failure modes

- Unknown group name returns HTTP 404 (not charged)
- Misspelled group name may not match any tracked group
- Claims data reflects unverified criminal leak-site posts and may be inaccurate
- Group may be tracked under a different primary name than the alias queried

## How this service works

Dragons Eye Lookup: Ransomware group profile: aliases, first seen, newest claims. Aliases, first observation by RansomLook, and a sample of the group's newest claims. Unknown groups return 404 and are not charged. Unverified claims from criminal leak sites; commercially reusable sources only.

## Output

Returns a structured profile for the named ransomware group including: all known aliases, the date the group was first observed by RansomLook, and a sample of the group's newest victim claims sourced from criminal leak sites. Unknown group names return a 404 and are not charged.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "name"
     ],
     "properties": {
      "name": {
       "type": "string",
       "maxLength": 60,
       "minLength": 2,
       "description": "Ransomware group name or alias, e.g. akira"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dragons-eye-ransomware-group-lookup-a153a42d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.ransomware-tracker.com](https://www.zero.xyz/host/api.ransomware-tracker.com/llms.txt)