Telegram’s widely used shortlink domain, t.me, experienced a sudden outage on Monday, rendering numerous shared links inoperable. This disruption stemmed from the domain being placed on “serverHold” status by the Montenegro-based registrar, DomainME, effectively removing it from the global Domain Name System (DNS).
The “serverHold” status is a registry-level action that suspends a domain, preventing it from resolving to its intended destination. Such measures are typically employed for various reasons, including compliance with regulatory requirements.
In this instance, the suspension was linked to the U.S. Treasury’s Office of Foreign Assets Control (OFAC) sanctions. On the same day as the t.me outage, OFAC imposed sanctions on First VPN, a VPN provider allegedly utilized by cybercriminals for ransomware attacks. The Treasury’s sanctions listing included a link to First VPN’s public group on Telegram, accessed via the t.me domain.
To adhere to these sanctions, DomainME suspended the entire t.me domain, rather than targeting the specific link associated with First VPN. This broad action resulted in widespread inaccessibility of Telegram’s shortlinks.
Following the suspension, Telegram’s founder, Pavel Durov, acknowledged the issue on X (formerly Twitter), noting that t.me links had ceased functioning. In response, DomainME confirmed that the domain was “on hold due to the OFAC compliance” but assured that it was back online.
By early Tuesday, the “serverHold” status was lifted, and the t.me domain was restored to full functionality. Throughout the outage, Telegram’s primary services remained operational, and the alternative domain, telegram.me, continued to function without interruption.
This incident underscores the intricate interplay between global digital services and international regulatory frameworks. It highlights the potential for widespread service disruptions resulting from compliance actions, even when targeting specific entities. As digital platforms continue to expand their global reach, navigating and adhering to diverse regulatory landscapes becomes increasingly critical to maintain uninterrupted service.
