diff --git a/http/miscellaneous/polyfill-io.yaml b/http/vulnerabilities/backdoor/polyfill-backdoor.yaml
similarity index 92%
rename from http/miscellaneous/polyfill-io.yaml
rename to http/vulnerabilities/backdoor/polyfill-backdoor.yaml
index d0aa0781c2..5aa8e079d0 100644
--- a/http/miscellaneous/polyfill-io.yaml
+++ b/http/vulnerabilities/backdoor/polyfill-backdoor.yaml
@@ -1,4 +1,4 @@
-id: polyfill-io
+id: polyfill-backdoor
 
 info:
   name: Polyfill.io - Detection
@@ -14,7 +14,7 @@ info:
     verified: true
     max-request: 1
     shodan-query: html:"polyfill.io"
-  tags: cdn,polyfill-io,malware
+  tags: cdn,polyfill-io,backdoor,malware
 
 http:
   - method: GET