diff --git a/misp_modules/modules/expansion/dnstrails.py b/misp_modules/modules/expansion/dnstrails.py
index 5f2cc63..5a0cfcc 100644
--- a/misp_modules/modules/expansion/dnstrails.py
+++ b/misp_modules/modules/expansion/dnstrails.py
@@ -230,7 +230,7 @@ def expand_whois(api, domain):
                 'values': [item_registrant['email'],
                            item_registrant['telephone'],
                            item_registrant['name'], results['registrarName'],
-                           results['creationDate']],
+                           results['createdDate']],
                 'categories': ['attribution'],
                 'comment': 'whois information of %s by securitytrails' % domain
             }