First VPN Service (1VPNS) and admin Dmytro Rashevskyi - OFAC ransomware enablers
- Scam type: Ransomware
- Chain: Bitcoin
- Reported: 2026-10-14
- Last updated: 2026-10-16
On 2026-07-13 OFAC designated First VPN Service (1VPNS), a VPN provider whose principal clients include ransomware groups, and its administrator Dmytro Rashevskyi (Dnipro, Ukraine), for enabling ransomware attacks against U.S. businesses, hospitals and municipal governments. Treasury says the action followed a May 2026 takedown of 1VPNS infrastructure by European law enforcement with FBI Boston support. These are ransomware-enabler wallets, not ransom-payment addresses. Addresses from the SDN entries (20): Rashevskyi - BTC 1MTndG4K..., 1DfyWkiX...; ETH 0x1d19b52b..., 0x2C7DcD77...; LTC (2);…
Other addresses in this report: 1MTndG4K51RRMvkzyvguaHnQpiMLnxFGzM, 1DfyWkiXVVqWfcSduj23qTDis9kb2qvRDa, 0x1d19b52b54e7ef5ea1a4b40b616165e798eac9f8, 0x2c7dcd774b33e10367f7d6385479e04f97d179dc, TTLRNgLpz5H5tLPuNU4FViUs7zmmAtyvzW, TBFW9gF4oDX5cG44gS7AoxQeujScmm3z6h, Fc1EwQUZyTEagaDvA1utHXCcZNyG1x2PLt2DfNu1cJdH, FuCC7GoYwt5TsNTjWL23Xx9UKCvC18chjMEFPL3vJDCC, bc1qdnr88f4d2yqunnc4mjsguezm6g3mlwe44z5dw8, bc1qr4ankqmvmrhce3ydvzse86dfx5s3zhehfr9tg9, 0x2711d73d559f62f4f855ee21f38378f528e07985, TUuaxBAWfA5nmsqNfycxYrzEvz4a5GJMGY
Websites in this report: 1vpns.com, 1vpns.net, 1jabber.com