diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index f26dd38..08efafb 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -13565,9 +13565,9 @@
       "meta": {
         "encryption": "ChaCha20 and RSA",
         "refs": [
-         "https://malpedia.caad.fkie.fraunhofer.de/details/win.maze",
-         "https://www.bleepingcomputer.com/news/security/maze-ransomware-now-delivered-by-spelevo-exploit-kit/",
-         "https://www.proofpoint.com/us/threat-insight/post/ta2101-plays-government-imposter-distribute-malware-german-italian-and-us"
+          "https://malpedia.caad.fkie.fraunhofer.de/details/win.maze",
+          "https://www.bleepingcomputer.com/news/security/maze-ransomware-now-delivered-by-spelevo-exploit-kit/",
+          "https://www.proofpoint.com/us/threat-insight/post/ta2101-plays-government-imposter-distribute-malware-german-italian-and-us"
         ]
       },
       "uuid": "7cea8846-1f3d-331a-3ebf-055d452351b6",