diff --git a/http/technologies/adfs-detect.yaml b/http/technologies/adfs-detect.yaml
index 257b4245e4..1f95fb82e6 100644
--- a/http/technologies/adfs-detect.yaml
+++ b/http/technologies/adfs-detect.yaml
@@ -2,7 +2,7 @@ id: adfs-detect
 
 info:
   name: ADFS Detect
-  author: Adam Crosser
+  author: Adam Crosser,Mys7ic
   severity: info
   description: Detects ADFS with forms-based authentication enabled.
   metadata:
@@ -21,4 +21,12 @@ http:
         words:
           - '/adfs/portal/css/style.css'
 
+    extractors:
+      - type: regex
+        part: body
+        name: domain
+        group: 1
+        regex:
+          - 'var\s+userNameValue\s*=\s*''([^\\]*)\\'
+
 # digest: 4a0a0047304502200fd3109b341765721cc300a6fc04830ccc8d78a68883b3b08ed48841c3ba1ad3022100a01920ae98b24f8b98962e684308e29f8f3f285540b18504211ad783d94990e4:922c64590222798bb761d5b6d8e72950