Get a submitted abuse report

GET/accounts/{account_id}/abuse-reports/submitted/{report_id}

Retrieve a report submitted by the account.

Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token.

Example:Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

Accepted Permissions (at least one required)

Trust and Safety WriteTrust and Safety Read

Path ParametersExpand Collapse

account_id: string

maxLength32

report_id: string

ReturnsExpand Collapse

result: object { id, cdate, denial_reason, 25 more }

id: string

Public report code.

cdate: string

Time the report was submitted.

formatdate-time

denial_reason: "unable_to_confirm" or "incomplete_report" or "not_on_cloudflare" or 10 more

Submitter-safe reason for a denied report. Null when unavailable.

One of the following:

"unable_to_confirm"

"incomplete_report"

"not_on_cloudflare"

"duplicate_report"

"content_removed"

"report_details_mismatch"

"no_abuse_found"

"missing_original_work"

"direct_url_required"

"wrong_report_category"

"content_unavailable"

"law_enforcement_referral_required"

"domain_dispute_process_required"

domain: string

Domain identified in the report.

dsa_attestation: boolean

Whether the submitter provided the Digital Services Act attestation.

status: "submitted" or "accepted" or "denied"

Status visible to the account that submitted the report.

One of the following:

"submitted"

"accepted"

"denied"

type: "PHISH" or "GEN" or "THREAT" or 6 more

The abuse report type

One of the following:

"PHISH"

"GEN"

"THREAT"

"DMCA"

"EMER"

"TM"

"REG_WHO"

"NCSEI"

"NETWORK"

urls: array of string

URLs supplied with the report.

agent_name: optional string

Authorized agent name supplied with the report.

comments: optional string

Additional comments supplied with the report.

court: optional string

The string “on” when a court proceeding applies to the report; otherwise omitted.

destination_ips: optional array of string

Destination IP addresses supplied with a network abuse report.

host_notification: optional string

Submitter preference for notifying the hosting provider.

justification: optional string

Evidence supplied with the report.

ncmec_notification: optional string

Submitter preference for notifying NCMEC.

ncsei_subject_representation: optional boolean

Representation supplied for an NCSEI report.

original_work: optional string

Original work or targeted brand supplied with the report.

owner_notification: optional string

Submitter preference for notifying the content owner.

ports_protocols: optional array of string

Ports and protocols supplied with a network abuse report.

reg_who_request: optional object { reg_who_good_faith_affirmation, reg_who_lawful_processing_agreement, reg_who_legal_basis, 4 more }

RDP-mandated fields for registrar WHOIS data disclosure requests.

reg_who_good_faith_affirmation: boolean

Affirmation that the request is made in good faith per RDP 10.2.4. Must be true.

reg_who_lawful_processing_agreement: boolean

Agreement to process data lawfully per RDP 10.2.5. Must be true.

reg_who_legal_basis: string

Legal rights and rationale for the request per RDP 10.2.3. Required for all WHOIS requests.

maxLength5000

reg_who_request_type: "disclosure" or "invalid_whois"

The type of WHOIS data request per RDP procedure.

One of the following:

"disclosure"

"invalid_whois"

reg_who_requested_data_elements: array of "registrant_name" or "registrant_organization" or "registrant_email" or 14 more

The specific WHOIS data elements being requested per RDP 10.2.2. Required for all WHOIS requests.

One of the following:

"registrant_name"

"registrant_organization"

"registrant_email"

"registrant_phone"

"registrant_address"

"registrant_address_country"

"registrant_address_postal_code"

"admin_name"

"admin_organization"

"admin_email"

"admin_phone"

"admin_address"

"tech_name"

"tech_organization"

"tech_email"

"tech_phone"

"tech_address"

reg_who_authorization_statement: optional string

Optional authorization statement or power of attorney per RDP 10.2.1.3.

maxLength5000

reg_who_requestor_type: optional "government" or "corporation" or "individual"

The nature of the requestor per RDP 10.2.1.2.

One of the following:

"government"

"corporation"

"individual"

reported_country: optional string

Country associated with the reported activity.

reported_user_agent: optional string

User agent associated with the reported activity.

source_ips: optional array of string

Source IP addresses supplied with a network abuse report.

submitter: optional object { company, email, name, telephone }

Information about the submitter of the report.

company: optional string

email: optional string

name: optional string

telephone: optional string

subtypes: optional array of string

Additional abuse classifications supplied with the report.

title: optional string

Title supplied with the report.

udrp: optional string

The string “on” when a UDRP proceeding applies to the report; otherwise omitted.

urs: optional string

The string “on” when a URS proceeding applies to the report; otherwise omitted.

success: boolean

errors: optional array of object { message, code }

message: string

code: optional string or number

One of the following:

string

number

messages: optional array of object { message }

message: string

Get a submitted abuse report

curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/abuse-reports/submitted/$REPORT_ID \
    -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"

{
  "result": {
    "id": "id",
    "cdate": "2019-12-27T18:11:19.117Z",
    "denial_reason": "unable_to_confirm",
    "domain": "domain",
    "dsa_attestation": true,
    "status": "submitted",
    "type": "PHISH",
    "urls": [
      "string"
    ],
    "agent_name": "agent_name",
    "comments": "comments",
    "court": "court",
    "destination_ips": [
      "string"
    ],
    "host_notification": "host_notification",
    "justification": "justification",
    "ncmec_notification": "ncmec_notification",
    "ncsei_subject_representation": true,
    "original_work": "original_work",
    "owner_notification": "owner_notification",
    "ports_protocols": [
      "string"
    ],
    "reg_who_request": {
      "reg_who_good_faith_affirmation": true,
      "reg_who_lawful_processing_agreement": true,
      "reg_who_legal_basis": "reg_who_legal_basis",
      "reg_who_request_type": "disclosure",
      "reg_who_requested_data_elements": [
        "registrant_name"
      ],
      "reg_who_authorization_statement": "reg_who_authorization_statement",
      "reg_who_requestor_type": "government"
    },
    "reported_country": "reported_country",
    "reported_user_agent": "reported_user_agent",
    "source_ips": [
      "string"
    ],
    "submitter": {
      "company": "company",
      "email": "email",
      "name": "name",
      "telephone": "telephone"
    },
    "subtypes": [
      "string"
    ],
    "title": "title",
    "udrp": "udrp",
    "urs": "urs"
  },
  "success": true,
  "errors": [
    {
      "message": "message",
      "code": "string"
    }
  ],
  "messages": [
    {
      "message": "message"
    }
  ]
}

Returns Examples

{
  "result": {
    "id": "id",
    "cdate": "2019-12-27T18:11:19.117Z",
    "denial_reason": "unable_to_confirm",
    "domain": "domain",
    "dsa_attestation": true,
    "status": "submitted",
    "type": "PHISH",
    "urls": [
      "string"
    ],
    "agent_name": "agent_name",
    "comments": "comments",
    "court": "court",
    "destination_ips": [
      "string"
    ],
    "host_notification": "host_notification",
    "justification": "justification",
    "ncmec_notification": "ncmec_notification",
    "ncsei_subject_representation": true,
    "original_work": "original_work",
    "owner_notification": "owner_notification",
    "ports_protocols": [
      "string"
    ],
    "reg_who_request": {
      "reg_who_good_faith_affirmation": true,
      "reg_who_lawful_processing_agreement": true,
      "reg_who_legal_basis": "reg_who_legal_basis",
      "reg_who_request_type": "disclosure",
      "reg_who_requested_data_elements": [
        "registrant_name"
      ],
      "reg_who_authorization_statement": "reg_who_authorization_statement",
      "reg_who_requestor_type": "government"
    },
    "reported_country": "reported_country",
    "reported_user_agent": "reported_user_agent",
    "source_ips": [
      "string"
    ],
    "submitter": {
      "company": "company",
      "email": "email",
      "name": "name",
      "telephone": "telephone"
    },
    "subtypes": [
      "string"
    ],
    "title": "title",
    "udrp": "udrp",
    "urs": "urs"
  },
  "success": true,
  "errors": [
    {
      "message": "message",
      "code": "string"
    }
  ],
  "messages": [
    {
      "message": "message"
    }
  ]
}