diff --git a/scan.py b/scan.py
index dd8f375..393b7d5 100644
--- a/scan.py
+++ b/scan.py
@@ -575,7 +575,7 @@ def is_hacked(filename):
         score.append(('MANY_LINES3', '%i lines' % line_num))
 
     # Shell super bien caché, toutes les lignes ont la même longueur
-   if len(first_lines) > 12 and line_num < 30  and first_lines[0] == '<?php' and \
+    if len(first_lines) > 12 and line_num < 30  and first_lines[0] == '<?php' and \
             len(first_lines[1]) == len(first_lines[2]) == len(first_lines[3]) == len(first_lines[4]) == len(first_lines[5]) == len(first_lines[6]) == len(first_lines[7]) == len(first_lines[8]) and len(first_lines[3]) > 40 and first_lines[3][0] == ' ':
         score.append(('PHP_OBFUSC_SHELL', ''))