diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 866302d6..dd641f1f 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -500,7 +500,7 @@
           "https://www.recordedfuture.com/hidden-lynx-analysis/",
           "https://www.secureworks.com/research/threat-profiles/bronze-keystone",
           "https://attack.mitre.org/groups/G0025/",
-          "cfr.org/cyber-operations/axiom",
+          "https://cfr.org/cyber-operations/axiom",
           "https://attack.mitre.org/groups/G0001/",
           "https://www.youtube.com/watch?v=NFJqD-LcpIg",
           "https://www.mandiant.com/resources/insights/apt-groups"