Cloudflare: country no longer accepts "AD", "AF", "AG", "BA", "BI", "BJ", "BM", "BS", "BZ", "CF", "CG", "CN", "CU", "CV", "DM", "ER", "FM", "GA", "GL", "GM", "GN", "GQ", "GW", "IR", "KI", "KM", "KN",…

Cloudflare's URL Scanner API no longer accepts 65 country codes — including "CN", "IR", "KP", "RU"-adjacent entries such as "VE" and "SY", and "KY" — as values for the country parameter on POST /accounts/{account_id}/urlscanner/scan and its v2 counterpart. Code that hardcodes any of the dropped codes will now be rejected, while the allowed list adds entries such as "CW", "GU", "HK", "MT", "NC", "PF", "PR", "RE" and "SG". The change affects developers sending scan requests with a country value and requires updating hardcoded country lists to the new set.

What changed A value you may have hardcoded is now rejected. Affects POST /accounts/{account id}/urlscanner/scan . no longer accepts "AD", "AF", "AG", "BA", "BI", "BJ", "BM", "BS", "BZ", "CF", "CG", "CN", "CU", "CV", "DM", "ER", "FM", "GA", "GL", "GM", "GN", "GQ", "GW", "IR", "KI", "KM", "KN", "KP", "KY", "LC", "LI", "LS", "LY", "MC", "ML", "MR", "MS", "NE", "NI", "NR", "PG", "SB", "SC", "SD", "SH", "SL", "SM", "SO", "SS", "ST", "SV", "SY", "SZ", "TD", "TG", "TL", "TM", "TO", "UY", "VC", "VE", "VU", "WS", "YE" Who is affected Code that sends POST /accounts/{account id}/urlscanner/scan country . Before and after | Where | Before | After | |---|---|---| | POST /accounts/{account id}/urlscanner/scan · country | "AD", "AE", "AF", "AG", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BA", "BB", "BD", "BE", "BF", "BG", "BH", "BI", "BJ", "BM", "BN", "BO", "BR", "BS", "BT", "BW", "BY", "BZ", "CA", "CD", "CF", "CG", "CH", "CI", "CL", "CM", "CN", "CO", "CR", "CU", "CV", "CY", "CZ", "DE", "DJ", "DK", "DM", "DO", "DZ", "EC", "EE", "EG", "ER", "ES", "ET", "FI", "FJ", "FM", "FR", "GA", "GB", "GD", "GE", "GH", "GL", "GM", "GN", "GQ", "GR", "GT", "GW", "GY", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IR", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KI", "KM", "KN", "KP", "KR", "KW", "KY", "KZ", "LA", "LB", "LC", "LI", "LK", "LR", "LS", "LT", "LU", "LV", "LY", "MA", "MC", "MD", "MG", "MK", "ML", "MM", "MN", "MO", "MR", "MS", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NE", "NG", "NI", "NL", "NO", "NP", "NR", "NZ", "OM", "PA", "PE", "PG", "PH", "PK", "PL", "PS", "PT", "PY", "QA", "RO", "RS", "RU", "RW", "SA", "SB", "SC", "SD", "SE", "SH", "SI", "SK", "SL", "SM", "SN", "SO", "SR", "SS", "ST", "SV", "SY", "SZ", "TD", "TG", "TH", "TJ", "TL", "TM", "TN", "TO", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UY", "UZ", "VC", "VE", "VN", "VU", "WS", "YE", "ZA", "ZM", "ZW" | "AE", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BB", "BD", "BE", "BF", "BG", "BH", "BN", "BO", "BR", "BT", "BW", "BY", "CA", "CD", "CH", "CI", "CL", "CM", "CO", "CR", "CW", "CY", "CZ", "DE", "DJ", "DK", "DO", "DZ", "EC", "EE", "EG", "ES", "ET", "FI", "FJ", "FR", "GB", "GD", "GE", "GH", "GR", "GT", "GU", "GY", "HK", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KR", "KW", "KZ", "LA", "LB", "LK", "LR", "LT", "LU", "LV", "MA", "MD", "MG", "MK", "MM", "MN", "MO", "MT", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NC", "NG", "NL", "NO", "NP", "NZ", "OM", "PA", "PE", "PF", "PH", "PK", "PL", "PR", "PS", "PT", "PY", "QA", "RE", "RO", "RS", "RU", "RW", "SA", "SE", "SG", "SI", "SK", "SN", "SR", "TH", "TJ", "TN", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UZ", "VN", "ZA", "ZM", "ZW" | | POST /accounts/{account id}/urlscanner/v2/scan · country | "AD", "AE", "AF", "AG", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BA", "BB", "BD", "BE", "BF", "BG", "BH", "BI", "BJ", "BM", "BN", "BO", "BR", "BS", "BT", "BW", "BY", "BZ", "CA", "CD", "CF", "CG", "CH", "CI", "CL", "CM", "CN", "CO", "CR", "CU", "CV", "CY", "CZ", "DE", "DJ", "DK", "DM", "DO", "DZ", "EC", "EE", "EG", "ER", "ES", "ET", "FI", "FJ", "FM", "FR", "GA", "GB", "GD", "GE", "GH", "GL", "GM", "GN", "GQ", "GR", "GT", "GW", "GY", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IR", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KI", "KM", "KN", "KP", "KR", "KW", "KY", "KZ", "LA", "LB", "LC", "LI", "LK", "LR", "LS", "LT", "LU", "LV", "LY", "MA", "MC", "MD", "MG", "MK", "ML", "MM", "MN", "MO", "MR", "MS", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NE", "NG", "NI", "NL", "NO", "NP", "NR", "NZ", "OM", "PA", "PE", "PG", "PH", "PK", "PL", "PS", "PT", "PY", "QA", "RO", "RS", "RU", "RW", "SA", "SB", "SC", "SD", "SE", "SH", "SI", "SK", "SL", "SM", "SN", "SO", "SR", "SS", "ST", "SV", "SY", "SZ", "TD", "TG", "TH", "TJ", "TL", "TM", "TN", "TO", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UY", "UZ", "VC", "VE", "VN", "VU", "WS", "YE", "ZA", "ZM", "ZW" | "AE", "AL", "AM", "AO", "AR", "AT", "AU", "AZ", "BB", "BD", "BE", "BF", "BG", "BH", "BN", "BO", "BR", "BT", "BW", "BY", "CA", "CD", "CH", "CI", "CL", "CM", "CO", "CR", "CW", "CY", "CZ", "DE", "DJ", "DK", "DO", "DZ", "EC", "EE", "EG", "ES", "ET", "FI", "FJ", "FR", "GB", "GD", "GE", "GH", "GR", "GT", "GU", "GY", "HK", "HN", "HR", "HT", "HU", "ID", "IE", "IL", "IN", "IQ", "IS", "IT", "JM", "JO", "JP", "KE", "KG", "KH", "KR", "KW", "KZ", "LA", "LB", "LK", "LR", "LT", "LU", "LV", "MA", "MD", "MG", "MK", "MM", "MN", "MO", "MT", "MU", "MV", "MW", "MX", "MY", "MZ", "NA", "NC", "NG", "NL", "NO", "NP", "NZ", "OM", "PA", "PE", "PF", "PH", "PK", "PL", "PR", "PS", "PT", "PY", "QA", "RE", "RO", "RS", "RU", "RW", "SA", "SE", "SG", "SI", "SK", "SN", "SR", "TH", "TJ", "TN", "TR", "TT", "TW", "TZ", "UA", "UG", "US", "UZ", "VN", "ZA", "ZM", "ZW" | Code that breaks // sending "AD" for country is now rejected // sending "AF" for country is now rejected // sending "AG" for country is now rejected // sending "BA" for country is now rejected // sending "BI" for country is now rejected // sending "BJ" for country is now rejected // sending "BM" for country is now rejected // sending "BS" for country is now rejected // sending "BZ" for country is now rejected // sending "CF" for country is now rejected // sending "CG" for country is now rejected // sending "CN" for country is now rejected // sending "CU" for country is now rejected // sending "CV" for country is now rejected // sending "DM" for country is now rejected // sending "ER" for country is now rejected // sending "FM" for country is now rejected // sending "GA" for country is now rejected // sending "GL" for country is now rejected // sending "GM" for country is now rejected // sending "GN" for country is now rejected // sending "GQ" for country is now rejected // sending "GW" for country is now rejected // sending "IR" for country is now rejected // sending "KI" for country is now rejected // sending "KM" for country is now rejected // sending "KN" for country is now rejected // sending "KP" for country is now rejected // sending "KY" for country is now rejected // sending "LC" for country is now rejected // sending "LI" for country is now rejected // sending "LS" for country is now rejected // sending "LY" for country is now rejected // sending "MC" for country is now rejected // sending "ML" for country is now rejected // sending "MR" for country is now rejected // sending "MS" for country is now rejected // sending "NE" for country is now rejected // sending "NI" for country is now rejected // sending "NR" for country is now rejected // sending "PG" for country is now rejected // sending "SB" for country is now rejected // sending "SC" for country is now rejected // sending "SD" for country is now rejected // sending "SH" for country is now rejected // sending "SL" for country is now rejected // sending "SM" for country is now rejected // sending "SO" for country is now rejected // sending "SS" for country is now rejected // sending "ST" for country is now rejected // sending "SV" for country is now rejected // sending "SY" for country is now rejected // sending "SZ" for country is now rejected // sending "TD" for country is now rejected // sending "TG" for country is now rejected // sending "TL" for country is now rejected // sending "TM" for country is now rejected // sending "TO" for country is now rejected // sending "UY" for country is now rejected // sending "VC" for country is now rejected // sending "VE" for country is now rejected // sending "VU" for country is now rejected // sending "WS" for country is now rejected // sending "YE" for country is now rejected Based on Cloudflare’s published API specification. How severity is decided https://driftwatch.et/method .