diff --git a/miscellaneous/detect-dns-over-https.yaml b/miscellaneous/detect-dns-over-https.yaml
index 4cceb85c62..6eb28ebe87 100644
--- a/miscellaneous/detect-dns-over-https.yaml
+++ b/miscellaneous/detect-dns-over-https.yaml
@@ -25,3 +25,6 @@ requests:
         words:
           - "application/dns-message"
         part: header
+      - type: regex
+        regex:
+          - "(C|c)ontent-(L|l)ength: 49"