# DailyElo Base Threat Feed – Recent Malicious Addresses

> DailyElo Base Threat Feed – Recent Malicious Addresses is a paid API for AI agents from x402.dailyelo.com, paid per call via x402, $0.005/call, status unknown (last checked 2026-09-14).

Returns a live, continuously-updated feed of malicious Base addresses detected via zero-value transfer (address-poisoning) sprays, supporting incremental polling by Unix timestamp.

## Facts

- Endpoint: GET https://x402.dailyelo.com/v1/threats/recent
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dailyelo-base-threat-feed-recent-malicious-addresses-322de170
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_tdMJ4UNsBU2vxZYFCQDUz

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dailyelo-base-threat-feed-recent-malicious-addresses-322de170
```

Example prompt: Pull the latest address-poisoning threat feed from DailyElo for Base — give me up to 200 entries that have appeared since Unix timestamp 1718000000 so I can update my blocklist.

## When to prefer this

Choose this endpoint when you need a continuously-updated, evidence-backed feed of Base-specific address-poisoning threats for blocklist automation. Prefer it over static threat databases when you need incremental, timestamp-based polling to avoid reprocessing old records. Best suited for agents that need to keep a live blocklist current with minimal overhead.

## Known failure modes

- Invalid 'since' parameter (non-numeric or future timestamp) returns a 400 error
- 'limit' exceeding 1000 is clamped or rejected
- No new threats since the given timestamp returns an empty list (not an error)
- Stale or extremely old 'since' values may return truncated results if retention window is exceeded
- Network or upstream collector downtime results in 5xx errors

## How this service works

Live feed of freshly-detected malicious addresses on Base — address-poisoning seeders caught via zero-value transfer sprays, updated continuously by our on-chain collector. Poll ?since=<unix> to ingest only new threats into your agent's blocklist. Deterministic, evidence-backed, machine-readable.

## Output

A machine-readable list of recently detected malicious Base addresses flagged as address-poisoning seeders, each with evidence (e.g. zero-value transfer spray activity) and a first-seen Unix timestamp, suitable for direct ingestion into a blocklist.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "limit": {
       "type": "string",
       "description": "max results (default 100, max 1000)"
      },
      "since": {
       "type": "string",
       "description": "unix seconds; return only threats first seen at/after this"
      }
     },
     "description": "Live feed of freshly-detected malicious addresses on Base (address-poisoning seeders, caught via zero-value transfer sprays). Poll with ?since=<unix> to get only new threats. Updated continuously by our on-chain collector. Deterministic, evidence-backed."
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "threats": [
   {
    "reason": "zero_value_transfer_spray",
    "address": "0x5b61e1980491975e297a8fd15501644cc27f0709",
    "confidence": "heuristic_v1",
    "first_seen": 1719500000,
    "zero_value_recipients": 6
   }
  ],
  "returned": 2,
  "total_in_db": 42,
  "threat_db_updated_at": 1719500000
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dailyelo-base-threat-feed-recent-malicious-addresses-322de170/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402.dailyelo.com](https://www.zero.xyz/host/x402.dailyelo.com/llms.txt)