added additional matcher to make it strict

http/cves/2022/CVE-2022-3980.yaml

@@ -18,7 +18,8 @@ info:
     max-request: 1
     verified: "true"
     shodan-query: title:"Sophos Mobile"
-  tags: cve,cve2022,xxe,ssrf
+    fofa-query: title="Sophos Mobile"
+  tags: cve,cve2022,xxe,ssrf,sophos
 
 http:
   - raw:
@@ -34,15 +35,10 @@ http:
 
     redirects: true
     max-redirects: 3
-    matchers-condition: and
     matchers:
-      - type: word
-        part: interactsh_protocol
-        words:
-          - "dns"
-          - "http"
-        condition: or
-
-      - type: status
-        status:
-          - 400
+      - type: dsl
+        dsl:
+          - contains(interactsh_protocol, 'http')
+          - status_code == 400
+          - contains_all(to_lower(interactsh_request), 'user-agent','java')
+        condition: and