# IP Listed on NordSpam Watch

> IP Listed on NordSpam Watch is a paid API for AI agents from ip.intel.rallylive.ca, paid per call via x402, $0.02/call, status unknown (last checked 2026-10-12).

Change-watch endpoint that checks if an IP is listed on the NordSpam DNSBL, compares with the previous result, and returns whether the listing status changed.

## Facts

- Endpoint: GET https://ip.intel.rallylive.ca/watch/ip/blacklist/nordspam?utm_source=zero.xyz
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ip-listed-on-nordspam-watch-057db719
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_l5PthieroGhzqESyJA0bY

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ip-listed-on-nordspam-watch-057db719
```

Example prompt: Keep an eye on whether 198.51.100.42 is listed on NordSpam and let me know if its blacklist status changes from what it was last time you checked.

## When to prefer this

Choose this endpoint when you need to detect changes in an IP's NordSpam blacklist status over time rather than just performing a one-off lookup. It is ideal for scheduled monitoring workflows, alerting pipelines, or audit trails where you need to know not just the current status but whether and what has changed since the last check. Prefer it over a simple NordSpam DNSBL check when you need before/after diffing and change timestamps built in.

## Known failure modes

- IP parameter missing or malformed — query will fail or return an error
- First-time call for an IP has no previous result to compare against, so 'changed' may be indeterminate or false
- NordSpam DNS lookup failure or timeout causing the check to be incomplete
- Stored previous result has expired after 90 days, resetting the comparison baseline
- Payment not included or insufficient (x402) causing request rejection

## How this service works

Change watch for ip listed on nordspam: runs the check, compares it with the result from your previous call for the same ip (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

## Output

Returns the current NordSpam blacklist status for the IP, a boolean 'changed' flag indicating whether the result differs from the previous call, a list of fields that changed with their before and after values, and a timestamp of when the status was last seen. Previous results are retained for 90 days.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ip-listed-on-nordspam-watch-057db719/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ip.intel.rallylive.ca](https://www.zero.xyz/host/ip.intel.rallylive.ca/llms.txt)