diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 59ecb2d..8e0af57 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -118,7 +118,6 @@
         "country": "CN",
         "refs": [
           "https://www.proofpoint.com/us/exploring-bergard-old-malware-new-tricks",
-          "http://www.isightpartners.com/2015/02/codoso/#sthash.VJMDVPQB.dpuf",
           "http://researchcenter.paloaltonetworks.com/2016/01/new-attacks-linked-to-c0d0s0-group/",
           "https://www.nytimes.com/2016/06/12/technology/the-chinese-hackers-in-the-back-office.html",
           "https://www.ncsc.gov.uk/content/files/protected_files/article_files/Joint%20report%20on%20publicly%20available%20hacking%20tools%20%28NCSC%29.pdf"