Telegram shortlinks knocked offline over sanctioned VPN connection

Telegram's t.me shortlinks were briefly knocked offline after the.ME registry suspended the domain while verifying OFAC's designation of First VPN Service (1VPNS), a VPN advertised on criminal forums and used by at least 25 ransomware groups and other cybercriminals; the suspension was lifted once Telegram removed links tied to the sanctioned service. The report outlines the OFAC sanctions, a prior European takedown of 1VPNS infrastructure, and the service's alleged use for ransomware operations, botnets, DDoS, scanning, and other illicit activity.