diff --git a/ransomware-roles/machinetag.json b/ransomware-roles/machinetag.json
index b3d6a89..edec216 100644
--- a/ransomware-roles/machinetag.json
+++ b/ransomware-roles/machinetag.json
@@ -3,7 +3,7 @@
   "expanded": "Ransomware Actor Roles",
   "description": "The seven roles seen in most ransomware incidents.",
   "refs": [
-    "[TODO NIEUWSUUR]"
+    "https://www.northwave-security.com/"
   ],
   "version": 1,
   "predicates": [