diff --git a/http/exposed-panels/bynder-panel.yaml b/http/exposed-panels/bynder-panel.yaml
index b50e915a15..b2527899e2 100644
--- a/http/exposed-panels/bynder-panel.yaml
+++ b/http/exposed-panels/bynder-panel.yaml
@@ -10,8 +10,8 @@ info:
     - https://www.bynder.com/en/
   metadata:
     max-request: 1
-    shodan-query: http.html:"Bynder"
     verified: true
+    shodan-query: http.favicon.hash:1017650009
   tags: panel,bynder,login,detect
 
 http:
@@ -23,7 +23,7 @@ http:
       - type: dsl
         dsl:
           - 'status_code == 200'
-          - 'contains(to_lower(body), "bynder.") && contains(to_lower(body), "login")'
+          - 'contains_any(to_lower(body), "bynder.", "bynder brand portal", "bynder login")'
         condition: and
 
     extractors:
@@ -31,4 +31,4 @@ http:
         part: body
         group: 1
         regex:
-          - 'http-equiv="version"\s+content="([0-9\.]+)"'
\ No newline at end of file
+          - 'http-equiv="version"\s+content="([0-9\.]+)"'