Skip to content
Start here

Submitted

List submitted abuse reports
GET/accounts/{account_id}/abuse-reports/submitted
Get a submitted abuse report
GET/accounts/{account_id}/abuse-reports/submitted/{report_id}
ModelsExpand Collapse
SubmittedListResponse object { reports }
reports: array of object { id, cdate, denial_reason, 4 more }
id: string

Public report code.

cdate: string

Time the report was submitted.

formatdate-time
denial_reason: "unable_to_confirm" or "incomplete_report" or "not_on_cloudflare" or 10 more

Submitter-safe reason for a denied report. Null when unavailable.

One of the following:
"unable_to_confirm"
"incomplete_report"
"not_on_cloudflare"
"duplicate_report"
"content_removed"
"report_details_mismatch"
"no_abuse_found"
"missing_original_work"
"direct_url_required"
"wrong_report_category"
"content_unavailable"
"law_enforcement_referral_required"
"domain_dispute_process_required"
domain: string

Domain identified in the report.

status: "submitted" or "accepted" or "denied"

Status visible to the account that submitted the report.

One of the following:
"submitted"
"accepted"
"denied"
type: "PHISH" or "GEN" or "THREAT" or 6 more

The abuse report type

One of the following:
"PHISH"
"GEN"
"THREAT"
"DMCA"
"EMER"
"TM"
"REG_WHO"
"NCSEI"
"NETWORK"
submitter: optional object { company, email, name, telephone }

Information about the submitter of the report.

company: optional string
email: optional string
name: optional string
telephone: optional string
SubmittedGetResponse object { id, cdate, denial_reason, 25 more }
id: string

Public report code.

cdate: string

Time the report was submitted.

formatdate-time
denial_reason: "unable_to_confirm" or "incomplete_report" or "not_on_cloudflare" or 10 more

Submitter-safe reason for a denied report. Null when unavailable.

One of the following:
"unable_to_confirm"
"incomplete_report"
"not_on_cloudflare"
"duplicate_report"
"content_removed"
"report_details_mismatch"
"no_abuse_found"
"missing_original_work"
"direct_url_required"
"wrong_report_category"
"content_unavailable"
"law_enforcement_referral_required"
"domain_dispute_process_required"
domain: string

Domain identified in the report.

dsa_attestation: boolean

Whether the submitter provided the Digital Services Act attestation.

status: "submitted" or "accepted" or "denied"

Status visible to the account that submitted the report.

One of the following:
"submitted"
"accepted"
"denied"
type: "PHISH" or "GEN" or "THREAT" or 6 more

The abuse report type

One of the following:
"PHISH"
"GEN"
"THREAT"
"DMCA"
"EMER"
"TM"
"REG_WHO"
"NCSEI"
"NETWORK"
urls: array of string

URLs supplied with the report.

agent_name: optional string

Authorized agent name supplied with the report.

comments: optional string

Additional comments supplied with the report.

court: optional string

The string “on” when a court proceeding applies to the report; otherwise omitted.

destination_ips: optional array of string

Destination IP addresses supplied with a network abuse report.

host_notification: optional string

Submitter preference for notifying the hosting provider.

justification: optional string

Evidence supplied with the report.

ncmec_notification: optional string

Submitter preference for notifying NCMEC.

ncsei_subject_representation: optional boolean

Representation supplied for an NCSEI report.

original_work: optional string

Original work or targeted brand supplied with the report.

owner_notification: optional string

Submitter preference for notifying the content owner.

ports_protocols: optional array of string

Ports and protocols supplied with a network abuse report.

reg_who_request: optional object { reg_who_good_faith_affirmation, reg_who_lawful_processing_agreement, reg_who_legal_basis, 4 more }

RDP-mandated fields for registrar WHOIS data disclosure requests.

reg_who_good_faith_affirmation: boolean

Affirmation that the request is made in good faith per RDP 10.2.4. Must be true.

reg_who_lawful_processing_agreement: boolean

Agreement to process data lawfully per RDP 10.2.5. Must be true.

reg_who_request_type: "disclosure" or "invalid_whois"

The type of WHOIS data request per RDP procedure.

One of the following:
"disclosure"
"invalid_whois"
reg_who_requested_data_elements: array of "registrant_name" or "registrant_organization" or "registrant_email" or 14 more

The specific WHOIS data elements being requested per RDP 10.2.2. Required for all WHOIS requests.

One of the following:
"registrant_name"
"registrant_organization"
"registrant_email"
"registrant_phone"
"registrant_address"
"registrant_address_country"
"registrant_address_postal_code"
"admin_name"
"admin_organization"
"admin_email"
"admin_phone"
"admin_address"
"tech_name"
"tech_organization"
"tech_email"
"tech_phone"
"tech_address"
reg_who_authorization_statement: optional string

Optional authorization statement or power of attorney per RDP 10.2.1.3.

maxLength5000
reg_who_requestor_type: optional "government" or "corporation" or "individual"

The nature of the requestor per RDP 10.2.1.2.

One of the following:
"government"
"corporation"
"individual"
reported_country: optional string

Country associated with the reported activity.

reported_user_agent: optional string

User agent associated with the reported activity.

source_ips: optional array of string

Source IP addresses supplied with a network abuse report.

submitter: optional object { company, email, name, telephone }

Information about the submitter of the report.

company: optional string
email: optional string
name: optional string
telephone: optional string
subtypes: optional array of string

Additional abuse classifications supplied with the report.

title: optional string

Title supplied with the report.

udrp: optional string

The string “on” when a UDRP proceeding applies to the report; otherwise omitted.

urs: optional string

The string “on” when a URS proceeding applies to the report; otherwise omitted.

SubmittedEmails

List emails sent to an abuse report submitter
GET/accounts/{account_id}/abuse-reports/submitted/{report_id}/emails
ModelsExpand Collapse
EmailListResponse object { emails }
emails: array of object { id, body, recipient, 2 more }
id: string

Unique identifier of the email.

body: string

Body content of the email.

recipient: string

Email address of the recipient.

sent_at: string

When the email was sent. Time in RFC 3339 format (https://www.rfc-editor.org/rfc/rfc3339.html)

subject: string

Subject line of the email.