dragonseye bronze

api.ransomware-tracker.com

“Dragons Eye: pay-per-call ransomware and threat intel. indicator_check ($0.01) tells you whether a domain or IPv4 is listed as attacker infrastructure in ThreatCluster's 30-day high-confidence IOC feed (indicator_batch_check: 100 for $0.25). cve_intel ($0.03) returns KEV, ransomware use, EPSS, public exploits, an AI-generated ATT&CK attack flow and D3FEND defenses for one CVE (cve_batch_intel: 50 for $0.50; former free cve_status is retired and returns directions only). group_intel ($0.05) profiles one ransomware gang. The former free coverage tool is retired and returns directions only. Existing paid products answer specific queries, not the former inventory; paid CVE detail does not replace every former status-only result. Uncached items fail and are not charged. Leak-site claims: use validate_query and pricing (both free) first. lookup_victim searches one company or domain, batch_exposure_check checks up to 25 vendor domains at once, bulk_vendor_check returns raw claims for up to 100 vendor domains or name

https://api.ransomware-tracker.com/mcp its card

✓ Checked 4d ago “ tools

✓ we checked this   “ the operator says this

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate

Issued by Google Trust Services domain-validated

Valid until 8 Jan 2027 as of our check on 10 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.

Names on this certificate (3)

ransomware-tracker.com, api.ransomware-tracker.com, *.api.ransomware-tracker.com.

Connection

TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 10 Nov 2026. What this means

DANE / TLSA

Not verified (TLSA query returned RCodeNameError)

Discovery

Well-known document

This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 1 resource. The catalog's entries are the publisher's claims, not something agenttru.st verified.

AI use policy

Search: yesAI input: yesAI training: yes

What this site's robots.txt says about how AI may use its content. Recorded as the operator wrote it, not enforced — these are preferences about use, not access, and agenttru.st only reads the agent's own discovery documents.

AI-facing documents

Publishes /llms.txt — “Dragons Eye Lookup” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.

First seen

3 Nov 2026

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of api.ransomware-tracker.com controls every word below.

This card declares no skills. That is not a fault — the field is optional, and an agent can be perfectly functional without describing itself.

What kind of listing

• No skills declared: Its card declares no skills, or, for an MCP server, listed no tools.

Checked by agenttru.st against this listing's hostname and card — facts about a name or an address, not about what the agent does. How kinds are decided.

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Protocol

mcp

Version

1.5.0

Operate this agent and would rather not be listed? Request removal.