diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index 337b634..14b9231 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -1877,11 +1877,11 @@
         ],
         "refs": [
           "https://id-ransomware.blogspot.co.il/2017/01/netflix-ransomware.html",
-                  "http://blog.trendmicro.com/trendlabs-security-intelligence/netflix-scam-delivers-ransomware/",
-                  "https://www.bleepingcomputer.com/news/security/rogue-netflix-app-spreads-netix-ransomware-that-targets-windows-7-and-10-users/",
-                  "http://www.darkreading.com/attacks-breaches/netflix-scam-spreads-ransomware/d/d-id/1328012",
-                  "https://4.bp.blogspot.com/-bQQ4DTIClvA/WJCIh6Uq2nI/AAAAAAAADfY/hB5HcjuGgh8rRJKeLHo__IRz3Ezth22-wCEw/s1600/form1.jpg",
-                  "https://4.bp.blogspot.com/-ZnWdPDprJOg/WJCPeCtP4HI/AAAAAAAADfw/kR0ifI1naSwTAwSuOPiw8ZCPr0tSIz1CgCLcB/s1600/netflix-akk.png"
+          "http://blog.trendmicro.com/trendlabs-security-intelligence/netflix-scam-delivers-ransomware/",
+          "https://www.bleepingcomputer.com/news/security/rogue-netflix-app-spreads-netix-ransomware-that-targets-windows-7-and-10-users/",
+          "http://www.darkreading.com/attacks-breaches/netflix-scam-spreads-ransomware/d/d-id/1328012",
+          "https://4.bp.blogspot.com/-bQQ4DTIClvA/WJCIh6Uq2nI/AAAAAAAADfY/hB5HcjuGgh8rRJKeLHo__IRz3Ezth22-wCEw/s1600/form1.jpg",
+          "https://4.bp.blogspot.com/-ZnWdPDprJOg/WJCPeCtP4HI/AAAAAAAADfw/kR0ifI1naSwTAwSuOPiw8ZCPr0tSIz1CgCLcB/s1600/netflix-akk.png"
         ]
       }
     },
@@ -3222,7 +3222,6 @@
         "ransomnotes": [
           "HOW_TO_DECRYPT_YOUR_FILES_[random_3_chars].html",
           "HOW_TO_DECRYPT_YOUR_FILES_[random_3_chars].txt"
-
         ],
         "refs": [
           "https://id-ransomware.blogspot.co.il/2016/11/paydos-ransomware-serpent.html",