--- title: Abuse Reports --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Abuse Reports ##### [Submit an abuse report](https://developers.cloudflare.com/api/resources/abuse_reports/methods/create) POST/accounts/{account\_id}/abuse-reports/{report\_param} ##### [Get an abuse report against the account](https://developers.cloudflare.com/api/resources/abuse_reports/methods/get) GET/accounts/{account\_id}/abuse-reports/{report\_param} ##### [List abuse reports against the account](https://developers.cloudflare.com/api/resources/abuse_reports/methods/list) GET/accounts/{account\_id}/abuse-reports ##### ModelsExpand Collapse AbuseReportCreateResponse = string The result should be ‘success’ for successful response [Link to this property](<#(resource)%20abuse_reports%20%3E%20(model)%20abuse_report_create_response%20%3E%20(schema)>)
AbuseReportGetResponse object {id, cdate, domain, 7 more } id: string Public facing ID of abuse report, aka abuse\_rand. Link to this property cdate: string Creation date of report. Time in RFC 3339 format (https://www.rfc-editor.org/rfc/rfc3339.html) Link to this property domain: string Domain that relates to the report. Link to this property
mitigation\_summary: object {accepted\_url\_count, active\_count, external\_host\_notified, 2 more } A summary of the mitigations related to this report. accepted\_url\_count: number How many of the reported URLs were confirmed as abusive. Link to this property active\_count: number How many mitigations are active. Link to this property external\_host\_notified: boolean Whether the report has been forwarded to an external hosting provider. Link to this property in\_review\_count: number How many mitigations are under review. Link to this property pending\_count: number How many mitigations are pending their effective date. Link to this property
Link to this property
status: "accepted"or "in\_review" An enum value that represents the status of an abuse record One of the following: "accepted" Link to this property "in\_review" Link to this property
Link to this property
type: "PHISH"or "GEN"or "THREAT"or 6 more The abuse report type One of the following: "PHISH" Link to this property "GEN" Link to this property "THREAT" Link to this property "DMCA" Link to this property "EMER" Link to this property "TM" Link to this property "REG\_WHO" Link to this property "NCSEI" Link to this property "NETWORK" Link to this property
Link to this property justification: optional string Justification for the report. Link to this property original\_work: optional string Original work / Targeted brand in the alleged abuse. Link to this property
submitter: optional object {company, email, name, telephone } Information about the submitter of the report. company: optional string Link to this property email: optional string Link to this property name: optional string Link to this property telephone: optional string Link to this property
Link to this property urls: optional array of string Link to this property
[Link to this property](<#(resource)%20abuse_reports%20%3E%20(model)%20abuse_report_get_response%20%3E%20(schema)>)
AbuseReportListResponse object {reports }
reports: array of object {id, cdate, domain, 7 more } id: string Public facing ID of abuse report, aka abuse\_rand. Link to this property cdate: string Creation date of report. Time in RFC 3339 format (https://www.rfc-editor.org/rfc/rfc3339.html) Link to this property domain: string Domain that relates to the report. Link to this property
mitigation\_summary: object {accepted\_url\_count, active\_count, external\_host\_notified, 2 more } A summary of the mitigations related to this report. accepted\_url\_count: number How many of the reported URLs were confirmed as abusive. Link to this property active\_count: number How many mitigations are active. Link to this property external\_host\_notified: boolean Whether the report has been forwarded to an external hosting provider. Link to this property in\_review\_count: number How many mitigations are under review. Link to this property pending\_count: number How many mitigations are pending their effective date. Link to this property
Link to this property
status: "accepted"or "in\_review" An enum value that represents the status of an abuse record One of the following: "accepted" Link to this property "in\_review" Link to this property
Link to this property
type: "PHISH"or "GEN"or "THREAT"or 6 more The abuse report type One of the following: "PHISH" Link to this property "GEN" Link to this property "THREAT" Link to this property "DMCA" Link to this property "EMER" Link to this property "TM" Link to this property "REG\_WHO" Link to this property "NCSEI" Link to this property "NETWORK" Link to this property
Link to this property justification: optional string Justification for the report. Link to this property original\_work: optional string Original work / Targeted brand in the alleged abuse. Link to this property
submitter: optional object {company, email, name, telephone } Information about the submitter of the report. company: optional string Link to this property email: optional string Link to this property name: optional string Link to this property telephone: optional string Link to this property
Link to this property urls: optional array of string Link to this property
Link to this property
[Link to this property](<#(resource)%20abuse_reports%20%3E%20(model)%20abuse_report_list_response%20%3E%20(schema)>) #### Abuse ReportsSubmitted ##### [List submitted abuse reports](https://developers.cloudflare.com/api/resources/abuse_reports/subresources/submitted/methods/list) GET/accounts/{account\_id}/abuse-reports/submitted ##### [Get a submitted abuse report](https://developers.cloudflare.com/api/resources/abuse_reports/subresources/submitted/methods/get) GET/accounts/{account\_id}/abuse-reports/submitted/{report\_id} ##### ModelsExpand Collapse
SubmittedListResponse object {reports }
reports: array of object {id, cdate, denial\_reason, 4 more } id: string Public report code. Link to this property cdate: string Time the report was submitted. formatdate-time Link to this property
denial\_reason: "unable\_to\_confirm"or "incomplete\_report"or "not\_on\_cloudflare"or 10 more Submitter-safe reason for a denied report. Null when unavailable. One of the following: "unable\_to\_confirm" Link to this property "incomplete\_report" Link to this property "not\_on\_cloudflare" Link to this property "duplicate\_report" Link to this property "content\_removed" Link to this property "report\_details\_mismatch" Link to this property "no\_abuse\_found" Link to this property "missing\_original\_work" Link to this property "direct\_url\_required" Link to this property "wrong\_report\_category" Link to this property "content\_unavailable" Link to this property "law\_enforcement\_referral\_required" Link to this property "domain\_dispute\_process\_required" Link to this property
Link to this property domain: string Domain identified in the report. Link to this property
status: "submitted"or "accepted"or "denied" Status visible to the account that submitted the report. One of the following: "submitted" Link to this property "accepted" Link to this property "denied" Link to this property
Link to this property
type: "PHISH"or "GEN"or "THREAT"or 6 more The abuse report type One of the following: "PHISH" Link to this property "GEN" Link to this property "THREAT" Link to this property "DMCA" Link to this property "EMER" Link to this property "TM" Link to this property "REG\_WHO" Link to this property "NCSEI" Link to this property "NETWORK" Link to this property
Link to this property
submitter: optional object {company, email, name, telephone } Information about the submitter of the report. company: optional string Link to this property email: optional string Link to this property name: optional string Link to this property telephone: optional string Link to this property
Link to this property
Link to this property
[Link to this property](<#(resource)%20abuse_reports.submitted%20%3E%20(model)%20submitted_list_response%20%3E%20(schema)>)
SubmittedGetResponse object {id, cdate, denial\_reason, 25 more } id: string Public report code. Link to this property cdate: string Time the report was submitted. formatdate-time Link to this property
denial\_reason: "unable\_to\_confirm"or "incomplete\_report"or "not\_on\_cloudflare"or 10 more Submitter-safe reason for a denied report. Null when unavailable. One of the following: "unable\_to\_confirm" Link to this property "incomplete\_report" Link to this property "not\_on\_cloudflare" Link to this property "duplicate\_report" Link to this property "content\_removed" Link to this property "report\_details\_mismatch" Link to this property "no\_abuse\_found" Link to this property "missing\_original\_work" Link to this property "direct\_url\_required" Link to this property "wrong\_report\_category" Link to this property "content\_unavailable" Link to this property "law\_enforcement\_referral\_required" Link to this property "domain\_dispute\_process\_required" Link to this property
Link to this property domain: string Domain identified in the report. Link to this property dsa\_attestation: boolean Whether the submitter provided the Digital Services Act attestation. Link to this property
status: "submitted"or "accepted"or "denied" Status visible to the account that submitted the report. One of the following: "submitted" Link to this property "accepted" Link to this property "denied" Link to this property
Link to this property
type: "PHISH"or "GEN"or "THREAT"or 6 more The abuse report type One of the following: "PHISH" Link to this property "GEN" Link to this property "THREAT" Link to this property "DMCA" Link to this property "EMER" Link to this property "TM" Link to this property "REG\_WHO" Link to this property "NCSEI" Link to this property "NETWORK" Link to this property
Link to this property urls: array of string URLs supplied with the report. Link to this property agent\_name: optional string Authorized agent name supplied with the report. Link to this property comments: optional string Additional comments supplied with the report. Link to this property court: optional string The string “on” when a court proceeding applies to the report; otherwise omitted. Link to this property destination\_ips: optional array of string Destination IP addresses supplied with a network abuse report. Link to this property host\_notification: optional string Submitter preference for notifying the hosting provider. Link to this property justification: optional string Evidence supplied with the report. Link to this property ncmec\_notification: optional string Submitter preference for notifying NCMEC. Link to this property ncsei\_subject\_representation: optional boolean Representation supplied for an NCSEI report. Link to this property original\_work: optional string Original work or targeted brand supplied with the report. Link to this property owner\_notification: optional string Submitter preference for notifying the content owner. Link to this property ports\_protocols: optional array of string Ports and protocols supplied with a network abuse report. Link to this property
reg\_who\_request: optional object {reg\_who\_good\_faith\_affirmation, reg\_who\_lawful\_processing\_agreement, reg\_who\_legal\_basis, 4 more } RDP-mandated fields for registrar WHOIS data disclosure requests. reg\_who\_good\_faith\_affirmation: boolean Affirmation that the request is made in good faith per RDP 10.2.4. Must be true. Link to this property reg\_who\_lawful\_processing\_agreement: boolean Agreement to process data lawfully per RDP 10.2.5. Must be true. Link to this property reg\_who\_legal\_basis: string Legal rights and rationale for the request per RDP 10.2.3. Required for all WHOIS requests. maxLength5000 Link to this property
reg\_who\_request\_type: "disclosure"or "invalid\_whois" The type of WHOIS data request per RDP procedure. One of the following: "disclosure" Link to this property "invalid\_whois" Link to this property
Link to this property
reg\_who\_requested\_data\_elements: array of "registrant\_name"or "registrant\_organization"or "registrant\_email"or 14 more The specific WHOIS data elements being requested per RDP 10.2.2. Required for all WHOIS requests. One of the following: "registrant\_name" Link to this property "registrant\_organization" Link to this property "registrant\_email" Link to this property "registrant\_phone" Link to this property "registrant\_address" Link to this property "registrant\_address\_country" Link to this property "registrant\_address\_postal\_code" Link to this property "admin\_name" Link to this property "admin\_organization" Link to this property "admin\_email" Link to this property "admin\_phone" Link to this property "admin\_address" Link to this property "tech\_name" Link to this property "tech\_organization" Link to this property "tech\_email" Link to this property "tech\_phone" Link to this property "tech\_address" Link to this property
Link to this property reg\_who\_authorization\_statement: optional string Optional authorization statement or power of attorney per RDP 10.2.1.3. maxLength5000 Link to this property
reg\_who\_requestor\_type: optional "government"or "corporation"or "individual" The nature of the requestor per RDP 10.2.1.2. One of the following: "government" Link to this property "corporation" Link to this property "individual" Link to this property
Link to this property
Link to this property reported\_country: optional string Country associated with the reported activity. Link to this property reported\_user\_agent: optional string User agent associated with the reported activity. Link to this property source\_ips: optional array of string Source IP addresses supplied with a network abuse report. Link to this property
submitter: optional object {company, email, name, telephone } Information about the submitter of the report. company: optional string Link to this property email: optional string Link to this property name: optional string Link to this property telephone: optional string Link to this property
Link to this property subtypes: optional array of string Additional abuse classifications supplied with the report. Link to this property title: optional string Title supplied with the report. Link to this property udrp: optional string The string “on” when a UDRP proceeding applies to the report; otherwise omitted. Link to this property urs: optional string The string “on” when a URS proceeding applies to the report; otherwise omitted. Link to this property
[Link to this property](<#(resource)%20abuse_reports.submitted%20%3E%20(model)%20submitted_get_response%20%3E%20(schema)>) #### Abuse ReportsSubmittedEmails ##### [List emails sent to an abuse report submitter](https://developers.cloudflare.com/api/resources/abuse_reports/subresources/submitted/subresources/emails/methods/list) GET/accounts/{account\_id}/abuse-reports/submitted/{report\_id}/emails ##### ModelsExpand Collapse
EmailListResponse object {emails }
emails: array of object {id, body, recipient, 2 more } id: string Unique identifier of the email. Link to this property body: string Body content of the email. Link to this property recipient: string Email address of the recipient. Link to this property sent\_at: string When the email was sent. Time in RFC 3339 format (https://www.rfc-editor.org/rfc/rfc3339.html) Link to this property subject: string Subject line of the email. Link to this property
Link to this property
[Link to this property](<#(resource)%20abuse_reports.submitted.emails%20%3E%20(model)%20email_list_response%20%3E%20(schema)>) #### Abuse ReportsMitigations ##### [List abuse report mitigations](https://developers.cloudflare.com/api/resources/abuse_reports/subresources/mitigations/methods/list) GET/accounts/{account\_id}/abuse-reports/{report\_id}/mitigations ##### [Request review on mitigations](https://developers.cloudflare.com/api/resources/abuse_reports/subresources/mitigations/methods/review) POST/accounts/{account\_id}/abuse-reports/{report\_id}/mitigations/appeal ##### ModelsExpand Collapse
MitigationListResponse object {mitigations }
mitigations: array of object {id, effective\_date, entity\_id, 3 more } id: string ID of remediation. Link to this property effective\_date: string Date when the mitigation will become active. Time in RFC 3339 format (https://www.rfc-editor.org/rfc/rfc3339.html) Link to this property entity\_id: string Link to this property
entity\_type: "url\_pattern"or "account"or "zone"or "custom\_expression" The type of entity targeted by a mitigation. One of the following: "url\_pattern" Link to this property "account" Link to this property "zone" Link to this property "custom\_expression" Link to this property
Link to this property
status: "pending"or "active"or "in\_review"or 2 more The status of a mitigation One of the following: "pending" Link to this property "active" Link to this property "in\_review" Link to this property "cancelled" Link to this property "removed" Link to this property
Link to this property type: string The type of mitigation applied to a reported entity. Link to this property
Link to this property
[Link to this property](<#(resource)%20abuse_reports.mitigations%20%3E%20(model)%20mitigation_list_response%20%3E%20(schema)>)
MitigationReviewResponse object {id, effective\_date, entity\_id, 3 more } id: string ID of remediation. Link to this property effective\_date: string Date when the mitigation will become active. Time in RFC 3339 format (https://www.rfc-editor.org/rfc/rfc3339.html) Link to this property entity\_id: string Link to this property
entity\_type: "url\_pattern"or "account"or "zone"or "custom\_expression" The type of entity targeted by a mitigation. One of the following: "url\_pattern" Link to this property "account" Link to this property "zone" Link to this property "custom\_expression" Link to this property
Link to this property
status: "pending"or "active"or "in\_review"or 2 more The status of a mitigation One of the following: "pending" Link to this property "active" Link to this property "in\_review" Link to this property "cancelled" Link to this property "removed" Link to this property
Link to this property type: string The type of mitigation applied to a reported entity. Link to this property
[Link to this property](<#(resource)%20abuse_reports.mitigations%20%3E%20(model)%20mitigation_review_response%20%3E%20(schema)>)