> For the complete documentation index, see [llms.txt](https://docs.halosecurity.com/api/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.halosecurity.com/api/events-archive/website-whois-change.md).

# website-whois-change

### Overview

* **Key:** `website-whois-change`
* **Name:** Domain Registration Changes
* **Triggers when:** The ICANN domain registration details are different than during the previous website scan

### Fields

| Field         | Type    | Description                                      |
| ------------- | ------- | ------------------------------------------------ |
| email\_add    | string  | Email that was added to registration details     |
| email\_remove | string  | Email that was removed from registration details |
| scan\_id      | string  | ID of the scan                                   |
| target\_id    | integer | ID of the target                                 |

### Example data

```json
{
  "email_add": "new@example.com",
  "email_remove": "old@example.com",
  "scan_id": "202101010000x1Xx2Xx3Xx4Xx5Xx6Xx7",
  "target_id": 123456
}
```