0x2711d73d559f62f4f855ee21f38378f528e07985

Reported crypto scam address

Stablecoin freeze: Frozen by Circle (USDC) on 2026-07-13; Frozen by Tether (USDT) on 2026-07-13 (dates in UTC, read from the token contract).

This EVM (Ethereum, BNB Chain, Base and other EVM chains) address was named in 2 public crypto scam reports: Ransomware, OFAC designation. First reported 2026-09-19. Last updated 2026-10-21.

Websites linked to this address: 1vpns.com, 1vpns.net, 1vpns.org, 1jabber.com

First VPN Service (1VPNS) and admin Dmytro Rashevskyi - OFAC ransomware enablers

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-10-14
  • Last updated: 2026-10-16

On 2026-07-13 OFAC designated First VPN Service (1VPNS), a VPN provider whose principal clients include ransomware groups, and its administrator Dmytro Rashevskyi (Dnipro, Ukraine), for enabling ransomware attacks against U.S. businesses, hospitals and municipal governments. Treasury says the action followed a May 2026 takedown of 1VPNS infrastructure by European law enforcement with FBI Boston support. These are ransomware-enabler wallets, not ransom-payment addresses. Addresses from the SDN entries (20): Rashevskyi - BTC 1MTndG4K..., 1DfyWkiX...; ETH 0x1d19b52b..., 0x2C7DcD77...; LTC (2);…

Other addresses in this report: 1MTndG4K51RRMvkzyvguaHnQpiMLnxFGzM, 1DfyWkiXVVqWfcSduj23qTDis9kb2qvRDa, 0x1d19b52b54e7ef5ea1a4b40b616165e798eac9f8, 0x2c7dcd774b33e10367f7d6385479e04f97d179dc, TTLRNgLpz5H5tLPuNU4FViUs7zmmAtyvzW, TBFW9gF4oDX5cG44gS7AoxQeujScmm3z6h, Fc1EwQUZyTEagaDvA1utHXCcZNyG1x2PLt2DfNu1cJdH, FuCC7GoYwt5TsNTjWL23Xx9UKCvC18chjMEFPL3vJDCC, bc1qdnr88f4d2yqunnc4mjsguezm6g3mlwe44z5dw8, bc1qr4ankqmvmrhce3ydvzse86dfx5s3zhehfr9tg9, TUuaxBAWfA5nmsqNfycxYrzEvz4a5GJMGY

Websites in this report: 1vpns.com, 1vpns.net, 1vpns.org, 1jabber.com

OFAC Designation: FIRST VPN SERVICE

  • Scam type: OFAC designation
  • Chain: Bitcoin
  • Project or site name: FIRST VPN SERVICE
  • Incident date: 2026-07-13
  • Reported: 2026-09-19
  • Last updated: 2026-10-21

Official OFAC designation or update for FIRST VPN SERVICE. Action date: 2026-07-13 Source: https://ofac.treasury.gov/recent-actions/20260713 Digital Currency Addresses: XBT: bc1qdnr88f4d2yqunnc4mjsguezm6g3mlwe44z5dw8 XBT: bc1qr4ankqmvmrhce3ydvzse86dfx5s3zhehfr9tg9 ETH: 0x2711d73d559f62f4f855ee21f38378f528e07985 LTC: ltc1qr8ntsedq8tv0svmxqhzvdcdl5k7kntdmnhwep7 TRX: TUuaxBAWfA5nmsqNfycxYrzEvz4a5GJMGY OFAC selectors: FIRST VPN SERVICE (a.k.a. 1VPNS; a.k.a. FIRSTVPN; a.k.a. "FVPNS"), Dnipro, Ukraine; Website 1vpns.com; alt. Website 1vpns.net; alt. Website 1vpns.org; alt. Website 1jabber.com; alt.…

Other addresses in this report: bc1qdnr88f4d2yqunnc4mjsguezm6g3mlwe44z5dw8, bc1qr4ankqmvmrhce3ydvzse86dfx5s3zhehfr9tg9, ltc1qr8ntsedq8tv0svmxqhzvdcdl5k7kntdmnhwep7, TUuaxBAWfA5nmsqNfycxYrzEvz4a5GJMGY

Report a crypto scam · How to report a crypto scam