Notices

Submit an abuse notice (DSA Article 16)

Unauthenticated by requirement. Article 16 of Regulation (EU) 2022/2065 obliges us to let "any individual or entity" notify us of content they consider illegal. A sign-in wall would exclude exactly the people most likely to find a phishing page — the recipients of the message that carried it.

reporterName and reporterEmail are optional, and that is required rather than lenient: Article 16(2) exempts notices concerning offences under Directive 2011/93/EU (child sexual abuse material) from identifying the submitter, so demanding an identity on every notice would make us non-compliant for the most urgent category. Where an email is given, receipt is acknowledged under Article 16(4).

Rate-limited per network address. The reporter's address is stored only as a salted hash.

post/api/reports

Request

  • Base URL: https://scanduro.com
  • URL: https://scanduro.com/api/reports
  • Auth: none required

Request body

reportedUrlstring required
category'csam' | 'phishing_or_malware' | 'illegal_content' | 'intellectual_property' | 'impersonation' | 'privacy' | 'other' required
explanationstring required

Article 16(2)(a): a sufficiently substantiated explanation of why the content is alleged to be illegal.

reporterNamestring
reporterEmailstring email

Optional. Article 16(2) exempts CSAM notices from identifying the submitter.

goodFaithboolean

Article 16(2)(d). Recorded as given, including when withheld — a provider that drops notices lacking it is refusing notices it must accept.

Response

Notice recorded; returns a quotable reference

referencestring required
messagestring

Changes

No recorded changes to this operation across all 1 revision of this API.