{
  "x402Version": 2,
  "id": 35000,
  "slug": "35000",
  "resource": "https://api.ransomware-tracker.com/v1/group",
  "description": "Dragons Eye Lookup: Ransomware group profile: aliases, first seen, newest claims. Aliases, first observation by RansomLook, and a sample of the group's newest claims. Unknown groups return 404 and are not charged. Unverified claims from criminal leak sites; commercially reusable sources only.",
  "type": "http",
  "serviceName": "Dragons Eye Lookup",
  "resourceType": "Identity & Enrichment",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0x2dAF658B01e257206375798a15832E9f547D65dD",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "20000",
      "amountUsd": 0.02,
      "maxTimeoutSeconds": 120
    }
  ],
  "outputSchema": {
    "properties": {
      "example": {
        "type": "object"
      },
      "type": {
        "type": "string"
      }
    },
    "required": [
      "type"
    ],
    "type": "object"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "method": "GET",
          "queryParams": {
            "name": "akira"
          },
          "type": "http"
        },
        "output": {
          "example": {
            "group": {
              "aliases": [],
              "first_observed_by_ransomlook": "2023-04-29T15:32:05.000Z",
              "name": "akira"
            },
            "label": "unverified claim from a criminal leak site",
            "recent_sample": {
              "claim_count": 1,
              "claims": [
                {
                  "claimed_published_at": "2026-09-01T00:00:00Z",
                  "country": "United States",
                  "first_observed_at": "2026-09-01T03:10:00Z",
                  "group": "akira",
                  "label": "unverified claim from a criminal leak site",
                  "organization": "example.com",
                  "sector": "Technology",
                  "sources": [
                    {
                      "license": "CC BY 4.0",
                      "license_url": "https://creativecommons.org/licenses/by/4.0/",
                      "name": "RansomLook",
                      "url": "https://www.ransomlook.io/"
                    }
                  ],
                  "website": "example.com"
                }
              ]
            }
          },
          "type": "json"
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "additionalProperties": false,
            "properties": {
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "properties": {
                  "name": {
                    "description": "Ransomware group name or alias, e.g. akira",
                    "maxLength": 60,
                    "minLength": 2,
                    "type": "string"
                  }
                },
                "required": [
                  "name"
                ],
                "type": "object"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method"
            ],
            "type": "object"
          },
          "output": {
            "properties": {
              "example": {
                "type": "object"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "type"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "ransomware",
    "threat-intelligence",
    "leak-site",
    "cybersecurity",
    "third-party-risk",
    "bazaar"
  ],
  "sourceHost": "api.ransomware-tracker.com",
  "lastUpdated": "2026-10-10T16:02:38.835Z",
  "quality": {
    "calls30d": 1,
    "uniquePayers30d": 1,
    "lastCalledAt": "2026-10-10T16:02:38.35Z"
  },
  "metadata": {
    "serviceName": "Dragons Eye Lookup",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "name": "akira"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "group": {
                "aliases": [],
                "first_observed_by_ransomlook": "2023-04-29T15:32:05.000Z",
                "name": "akira"
              },
              "label": "unverified claim from a criminal leak site",
              "recent_sample": {
                "claim_count": 1,
                "claims": [
                  {
                    "claimed_published_at": "2026-09-01T00:00:00Z",
                    "country": "United States",
                    "first_observed_at": "2026-09-01T03:10:00Z",
                    "group": "akira",
                    "label": "unverified claim from a criminal leak site",
                    "organization": "example.com",
                    "sector": "Technology",
                    "sources": [
                      {
                        "license": "CC BY 4.0",
                        "license_url": "https://creativecommons.org/licenses/by/4.0/",
                        "name": "RansomLook",
                        "url": "https://www.ransomlook.io/"
                      }
                    ],
                    "website": "example.com"
                  }
                ]
              }
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "name": {
                      "description": "Ransomware group name or alias, e.g. akira",
                      "maxLength": 60,
                      "minLength": 2,
                      "type": "string"
                    }
                  },
                  "required": [
                    "name"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    }
  },
  "liveness": {
    "reliability": null
  },
  "verified": false,
  "featured": false,
  "provider": {
    "host": "api.ransomware-tracker.com",
    "manifest_name": "api.ransomware-tracker.com",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-10-14T01:15:01.050Z"
  },
  "exampleResponse": {
    "example": {},
    "type": "string"
  }
}