AntiMalwareJuly 14, 2026🇷🇺Translated from Russian

Telegram Loses Global Short Links as t.me Domain Disabled Worldwide by .me Registry

On July 13, internet users around the world noticed that Telegram short links using the t.me format had stopped opening in web browsers. The problem was first highlighted by the Russian publication Kode Durova.

Despite the disruption, the messenger itself continues to operate normally. Both the desktop version and mobile applications remain fully accessible, and t.me links continue to work when opened inside the Telegram app. The only affected functionality is external access through regular web browsers.

Technical Cause of the Outage

According to preliminary data, the t.me domain was effectively excluded from the DNS system at the registry level of the .me top-level domain. This domain zone belongs to Montenegro, and its operator is the company doMEn, selected by the local authorities.

Why the registry decided to disable the domain remains unclear. Among the possible reasons are a legal dispute, a compliance check, requests from government agencies, or a violation of the domain zone’s registration rules. No official statements have been issued at the time of publication.

Registration Status

Importantly, the domain remains officially registered to Telegram until 2035. This means the registration period has not expired, and the situation cannot be explained by simple administrative oversight or failure to renew the domain.

The resulting outage has created an unusual situation: Telegram services continue to function, channels and chats work without interruption, yet the familiar short links opened from a browser lead nowhere.

Until the cause is clarified and the domain is restored in the global DNS, users are advised to open t.me links directly through the Telegram application or wait for the technical issue to be resolved.

Related articles

AntiMalwarePolicy & Regulation

FSB Russia Certifies Rutoken Chip 3127 with Five-Year Cryptographic Key Validity

Aktiv has received an FSB Russia certificate for the embedded Rutoken Chip 3127 microcontroller under security classes KS1 and KS2. The certification followed additional research that extended the validity period of the device's private cryptographic keys to five years. The chip belongs to the Rutoken ECP 3.0 3127 product line and targets long-term cryptographic protection in servers, ATMs, workstations, tablets, biometric systems, industrial equipment, and IoT devices. It stores keys in non-extractable form, performs user and device authentication, verifies component integrity, and supports trusted boot processes by controlling executable code at each stage. Additional capabilities include data encryption, derivation of session keys, secure software updates, and protected TLS and VPN connections using the CRISP protocol that complies with GOST R 71252-2024. The chip incorporates hardware-level defenses such as voltage monitoring, protective layer detection, and dummy branch execution to counter physical tampering and side-channel attacks. Pilot deployments have already occurred, including integration into the OVISION biometric access control systems, paving the way for serial use in critical infrastructure.

AntiMalwarePolicy & Regulation

Durov's Addition to Terrorist List Triggers Russian Account Blocks but Does Not Automatically Ban Telegram or Classify Transfers as Terrorism Financing

Russian financial institutions must suspend operations on Pavel Durov's domestic accounts following his inclusion in the Rosfinmonitoring terrorist and extremist list on July 30. The restrictions primarily target his personal finances and property inside Russia, as confirmed by attorney Dmitry Roshchin. Telegram itself remains unaffected as a platform because the messenger and its founder are legally distinct entities. Transfers to Durov do not automatically constitute terrorism financing; criminal liability requires proof that the funds were specifically intended for terrorist activities. The FSB has accused Durov of aiding terrorism by failing to remove channels allegedly used by Ukrainian services for sabotage planning, yet he has not been convicted by a court. Media outlets RIA Novosti and Izvestia reported these clarifications on compliance with Russian anti-terrorism legislation.

AntiMalwarePolicy & Regulation

Russian Ministry Proposes Mandatory Phone-Number Authentication for Foreign Websites and Apps

The Russian Ministry of Digital Development has drafted new rules requiring foreign websites and applications to authenticate users in Russia exclusively through phone numbers. The measure forms part of the third anti-fraud package known as Antifraud 3.0 and would eliminate email, social-media logins and other traditional methods. Foreign service operators would also be obliged to retain registration, login and account-deletion records for three years and to hand them over to Russian law-enforcement agencies upon request. Amendments are planned for Article 8 of the law On Information, with submission to the State Duma scheduled for autumn 2026. Experts warn that many international companies may refuse to build separate authentication flows for the Russian market, potentially leading some services to exit Russia entirely. The proposal also raises enforcement questions for already-blocked platforms such as Facebook and Instagram owned by Meta.

HabrPolicy & Regulation

Google's Android Developer Verification Rollout: Implications for Russian Devices and MDM-Managed Phones

Google is introducing mandatory Android Developer Verification on certified devices starting in select countries in September 2026, requiring developers to register and sign apps with verified identities. The policy aims to curb fraudulent and malicious applications by linking package names to registered developer signatures checked via the new Android Developer Verifier system component. Devices without Google services, including many Russian and Chinese firmware builds as well as AOSP variants, remain completely unaffected since the verification mechanism relies on Google Play services. Russia is explicitly excluded from the initial rollout and subsequent waves due to sanctions, allowing continued distribution of in-house and third-party applications. Corporate MDM deployments are also exempt because administrators are considered to have already vetted the apps for safety. Google plans to offer both full registration requiring D-U-N-S numbers for organizations and a limited option for hobbyists capped at 20 devices. The company has already registered SafeMobile as a verified developer, ensuring seamless installation of its client on supported devices.