diff --git a/http/cves/2022/CVE-2022-3980.yaml b/http/cves/2022/CVE-2022-3980.yaml
index f67674e0fe..e1acfb278a 100644
--- a/http/cves/2022/CVE-2022-3980.yaml
+++ b/http/cves/2022/CVE-2022-3980.yaml
@@ -17,7 +17,7 @@ info:
   metadata:
     max-request: 1
     verified: "true"
-    shodan-query: title:"Sophos Mobile"
+    shodan-query: http.favicon.hash:-1274798165
     fofa-query: title="Sophos Mobile"
   tags: cve,cve2022,xxe,ssrf,sophos