> For the complete documentation index, see [llms.txt](https://docs.halosecurity.com/api/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.halosecurity.com/api/events-archive/website-cookie-new-country.md).

# website-cookie-new-country

### Overview

* **Key:** `website-cookie-new-country`
* **Name:** Website Cookie New Country
* **Triggers when:** A cookie is detected loading from a different country than it did during the previous scan

### Fields

| Field          | Type    | Description                    |
| -------------- | ------- | ------------------------------ |
| cookie\_domain | string  | Domain cookie is scoped to     |
| cookie\_name   | string  | Name of cookie                 |
| cookie\_path   | string  | Path cookie is scoped to       |
| country        | string  | Country cookie originates from |
| detail         | string  | Country cookie originates from |
| host           | string  | Hostname of cookie             |
| scan\_id       | string  | ID of the scan                 |
| target\_id     | integer | ID of the target               |

### Example data

```json
{
  "cookie_domain": ".example.com",
  "cookie_name": "_cccc",
  "cookie_path": "/",
  "country": "US",
  "detail": "US",
  "host": "www.example.com",
  "scan_id": "202101010000x1Xx2Xx3Xx4Xx5Xx6Xx7",
  "target_id": 123456
}
```
