diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index f8c7cb6..bbe81bf 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -3828,7 +3828,6 @@
         "cfr-type-of-incident": "Espionage",
         "country": "IR",
         "refs": [
-          "https://www.clearskysec.com/oilrig/",
           "https://blog.morphisec.com/iranian-fileless-cyberattack-on-israel-word-vulnerability",
           "https://unit42.paloaltonetworks.com/unit42-striking-oil-closer-look-adversary-infrastructure/",
           "https://unit42.paloaltonetworks.com/unit42-introducing-the-adversary-playbook-first-up-oilrig/",
@@ -8312,5 +8311,5 @@
       "value": "GALLIUM"
     }
   ],
-  "version": 170
+  "version": 171
 }