Indicator
ransomware.live
Type domain · source telegram_monitoring
Investigation
18
Verdict
MENTIONED — 2 reports, unverified
- What is this
- Domain observed in Telegram Monitoring. Registered 2022 (3 years ago).
- Should you care
- Weak signal — mentioned in 2 reports, not corroborated across feeds.
- What to do
- No action — weak signal.
What this is
Domain indicator: ransomware.live
Mentioned in Palo Alto Networks Unit 42 research ingest
Live page
Screenshot of the actual page, via urlscan.io — hover to view full.
via urlscan.io· scanned 2026-07-17
Threat detail
Exploitation status and malware-family attribution from stored fields.
exploitation: unknown
Graph preview
Neighborhood topology — open the graph for interactive pivots.
Loading graph…
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
- Related alerts, reports, and entities
Structured pivots from local graph context.
- Open intel graph (neighborhood)
See edges, pivots, and corroboration at a glance.
- Investigation canvas
Full inspector with neighbor expansion.