diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 8629386e..24e26de5 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2689,7 +2689,6 @@
           "https://dragos.com/blog/crashoverride/CrashOverride-01.pdf",
           "https://www.us-cert.gov/ncas/alerts/TA17-163A",
           "https://ics.sans.org/blog/2016/01/09/confirmation-of-a-coordinated-attack-on-the-ukrainian-power-grid",
-          "https://www.cfr.org/interactive/cyber-operations/black-energy",
           "https://web.archive.org/web/20141016132823/https://www.symantec.com/connect/blogs/sandworm-windows-zero-day-vulnerability-being-actively-exploited-targeted-attacks",
           "https://ics.sans.org/blog/2015/12/30/current-reporting-on-the-cyber-attack-in-ukraine-resulting-in-power-outage",
           "https://blog.trendmicro.com/trendlabs-security-intelligence/timeline-of-sandworm-attacks/",