{"name":"Dragons Eye Watchlist","summary":"Pay once (x402, USDC on Base) to watch up to 25 domains for 30 days. When one of them shows up in a new ransomware leak-site claim, you get a signed webhook. Every alert is an unverified claim from a criminal leak site.","network":"eip155:8453","testnet":false,"price_per_pass":"$2.00","pass_days":30,"max_entries":25,"pay_to":"0x2dAF658B01e257206375798a15832E9f547D65dD","delivery":["webhook"],"endpoints":{"POST /v1/watchlists/validate":"free: check entries and delivery before paying","POST /v1/watchlists":"paid ($2.00): create a watchlist","POST /v1/watchlists/renew":"paid ($2.00): add 30 days, body {watchlist_id}, Authorization: Bearer <manage_token>","GET /v1/watchlists/{id}":"free, Bearer manage token: status","PATCH /v1/watchlists/{id}":"free, Bearer manage token: replace entries (max 5 edits a day)","DELETE /v1/watchlists/{id}":"free, Bearer manage token: stop now (no refund)","GET /v1/watchlists/{id}/alerts":"free, Bearer manage token: last 100 alerts"},"webhook_signature":"X-DragonsEye-Signature: t=<unix>,v1=<hex HMAC-SHA256(webhook_secret, `${t}.${raw_body}`)>","matching":"Domain match: the claim's domain equals a watched domain (registrable domain, subdomains folded). Possible match by name: the claim's organization name equals the watched domain's name part (5+ characters, not a generic word) or the display name you give. No substring or fuzzy matching.","label":"unverified claim from a criminal leak site","coverage_note":"Alerts use only sources whose terms permit commercial reuse (RansomLook CC BY 4.0; ransomwatch and the DragonsEye snapshot, public domain). Claims seen only by other providers are not alerted. No alert is not proof that no claim exists.","disclaimer":"This is an UNVERIFIED claim copied from a ransomware group's criminal leak site. It is not confirmation of a breach. Names, dates and details are attacker-asserted and may be wrong, fabricated, or intended to cause harm. Do not use it to contact, shame or further harm the alleged victim.","upstream":"Dragons Eye public data (ransomware-tracker.com), read-only, checked every 15 minutes"}