# Cloudflare: country no longer accepts "AD", "AF", "AG", "BA", "BI", "BJ", "BM", "BS", "BZ", "CF", "CG", "CN", "CU", "CV", "DM", "ER", "FM", "GA", "GL", "GM", "GN", "GQ", "GW", "IR", "KI", "KM", "KN",… > Source: > Published: 2026-10-27 11:43:54+00:00 ## What changed A value you may have hardcoded is now rejected. Affects `POST /accounts/{account_id}/urlscanner/scan`. no longer accepts "AD", "AF", "AG", "BA", "BI", "BJ", "BM", "BS", "BZ", "CF", "CG", "CN", "CU", "CV", "DM", "ER", "FM", "GA", "GL", "GM", "GN", "GQ", "GW", "IR", "KI", "KM", "KN", "KP", "KY", "LC", "LI", "LS", "LY", "MC", "ML", "MR", "MS", "NE", "NI", "NR", "PG", "SB", "SC", "SD", "SH", "SL", "SM", "SO", "SS", "ST", "SV", "SY", "SZ", "TD", "TG", "TL", "TM", "TO", "UY", "VC", "VE", "VU", "WS", "YE" ## Who is affected Code that sends POST /accounts/{account_id}/urlscanner/scan (country). ## Before and after | Where | Before | After | |---|---|---| | POST /accounts/{account_id}/urlscanner/scan · country | "AD", "AE", "AF", "AG", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BA", "BB", "BD", "BE", "BF", "BG", "BH", "BI", "BJ", "BM", "BN", "BO", "BR", "BS", "BT", "BW", "BY", "BZ", "CA", "CD", "CF", "CG", "CH", "CI", "CL", "CM", "CN", "CO", "CR", "CU", "CV", "CY", "CZ", "DE", "DJ", "DK", "DM", "DO", "DZ", "EC", "EE", "EG", "ER", "ES", "ET", "FI", "FJ", "FM", "FR", "GA", "GB", "GD", "GE", "GH", "GL", "GM", "GN", "GQ", "GR", "GT", "GW", "GY", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IR", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KI", "KM", "KN", "KP", "KR", "KW", "KY", "KZ", "LA", "LB", "LC", "LI", "LK", "LR", "LS", "LT", "LU", "LV", "LY", "MA", "MC", "MD", "MG", "MK", "ML", "MM", "MN", "MO", "MR", "MS", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NE", "NG", "NI", "NL", "NO", "NP", "NR", "NZ", "OM", "PA", "PE", "PG", "PH", "PK", "PL", "PS", "PT", "PY", "QA", "RO", "RS", "RU", "RW", "SA", "SB", "SC", "SD", "SE", "SH", "SI", "SK", "SL", "SM", "SN", "SO", "SR", "SS", "ST", "SV", "SY", "SZ", "TD", "TG", "TH", "TJ", "TL", "TM", "TN", "TO", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UY", "UZ", "VC", "VE", "VN", "VU", "WS", "YE", "ZA", "ZM", "ZW" | "AE", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BB", "BD", "BE", "BF", "BG", "BH", "BN", "BO", "BR", "BT", "BW", "BY", "CA", "CD", "CH", "CI", "CL", "CM", "CO", "CR", "CW", "CY", "CZ", "DE", "DJ", "DK", "DO", "DZ", "EC", "EE", "EG", "ES", "ET", "FI", "FJ", "FR", "GB", "GD", "GE", "GH", "GR", "GT", "GU", "GY", "HK", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KR", "KW", "KZ", "LA", "LB", "LK", "LR", "LT", "LU", "LV", "MA", "MD", "MG", "MK", "MM", "MN", "MO", "MT", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NC", "NG", "NL", "NO", "NP", "NZ", "OM", "PA", "PE", "PF", "PH", "PK", "PL", "PR", "PS", "PT", "PY", "QA", "RE", "RO", "RS", "RU", "RW", "SA", "SE", "SG", "SI", "SK", "SN", "SR", "TH", "TJ", "TN", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UZ", "VN", "ZA", "ZM", "ZW" | | POST /accounts/{account_id}/urlscanner/v2/scan · country | "AD", "AE", "AF", "AG", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BA", "BB", "BD", "BE", "BF", "BG", "BH", "BI", "BJ", "BM", "BN", "BO", "BR", "BS", "BT", "BW", "BY", "BZ", "CA", "CD", "CF", "CG", "CH", "CI", "CL", "CM", "CN", "CO", "CR", "CU", "CV", "CY", "CZ", "DE", "DJ", "DK", "DM", "DO", "DZ", "EC", "EE", "EG", "ER", "ES", "ET", "FI", "FJ", "FM", "FR", "GA", "GB", "GD", "GE", "GH", "GL", "GM", "GN", "GQ", "GR", "GT", "GW", "GY", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IR", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KI", "KM", "KN", "KP", "KR", "KW", "KY", "KZ", "LA", "LB", "LC", "LI", "LK", "LR", "LS", "LT", "LU", "LV", "LY", "MA", "MC", "MD", "MG", "MK", "ML", "MM", "MN", "MO", "MR", "MS", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NE", "NG", "NI", "NL", "NO", "NP", "NR", "NZ", "OM", "PA", "PE", "PG", "PH", "PK", "PL", "PS", "PT", "PY", "QA", "RO", "RS", "RU", "RW", "SA", "SB", "SC", "SD", "SE", "SH", "SI", "SK", "SL", "SM", "SN", "SO", "SR", "SS", "ST", "SV", "SY", "SZ", "TD", "TG", "TH", "TJ", "TL", "TM", "TN", "TO", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UY", "UZ", "VC", "VE", "VN", "VU", "WS", "YE", "ZA", "ZM", "ZW" | "AE", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BB", "BD", "BE", "BF", "BG", "BH", "BN", "BO", "BR", "BT", "BW", "BY", "CA", "CD", "CH", "CI", "CL", "CM", "CO", "CR", "CW", "CY", "CZ", "DE", "DJ", "DK", "DO", "DZ", "EC", "EE", "EG", "ES", "ET", "FI", "FJ", "FR", "GB", "GD", "GE", "GH", "GR", "GT", "GU", "GY", "HK", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KR", "KW", "KZ", "LA", "LB", "LK", "LR", "LT", "LU", "LV", "MA", "MD", "MG", "MK", "MM", "MN", "MO", "MT", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NC", "NG", "NL", "NO", "NP", "NZ", "OM", "PA", "PE", "PF", "PH", "PK", "PL", "PR", "PS", "PT", "PY", "QA", "RE", "RO", "RS", "RU", "RW", "SA", "SE", "SG", "SI", "SK", "SN", "SR", "TH", "TJ", "TN", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UZ", "VN", "ZA", "ZM", "ZW" | ## Code that breaks ``` // sending "AD" for country is now rejected // sending "AF" for country is now rejected // sending "AG" for country is now rejected // sending "BA" for country is now rejected // sending "BI" for country is now rejected // sending "BJ" for country is now rejected // sending "BM" for country is now rejected // sending "BS" for country is now rejected // sending "BZ" for country is now rejected // sending "CF" for country is now rejected // sending "CG" for country is now rejected // sending "CN" for country is now rejected // sending "CU" for country is now rejected // sending "CV" for country is now rejected // sending "DM" for country is now rejected // sending "ER" for country is now rejected // sending "FM" for country is now rejected // sending "GA" for country is now rejected // sending "GL" for country is now rejected // sending "GM" for country is now rejected // sending "GN" for country is now rejected // sending "GQ" for country is now rejected // sending "GW" for country is now rejected // sending "IR" for country is now rejected // sending "KI" for country is now rejected // sending "KM" for country is now rejected // sending "KN" for country is now rejected // sending "KP" for country is now rejected // sending "KY" for country is now rejected // sending "LC" for country is now rejected // sending "LI" for country is now rejected // sending "LS" for country is now rejected // sending "LY" for country is now rejected // sending "MC" for country is now rejected // sending "ML" for country is now rejected // sending "MR" for country is now rejected // sending "MS" for country is now rejected // sending "NE" for country is now rejected // sending "NI" for country is now rejected // sending "NR" for country is now rejected // sending "PG" for country is now rejected // sending "SB" for country is now rejected // sending "SC" for country is now rejected // sending "SD" for country is now rejected // sending "SH" for country is now rejected // sending "SL" for country is now rejected // sending "SM" for country is now rejected // sending "SO" for country is now rejected // sending "SS" for country is now rejected // sending "ST" for country is now rejected // sending "SV" for country is now rejected // sending "SY" for country is now rejected // sending "SZ" for country is now rejected // sending "TD" for country is now rejected // sending "TG" for country is now rejected // sending "TL" for country is now rejected // sending "TM" for country is now rejected // sending "TO" for country is now rejected // sending "UY" for country is now rejected // sending "VC" for country is now rejected // sending "VE" for country is now rejected // sending "VU" for country is now rejected // sending "WS" for country is now rejected // sending "YE" for country is now rejected ``` Based on Cloudflare’s published API specification. [How severity is decided](https://driftwatch.et/method).