[
 {
  "value": "wp2shell.com",
  "type": "domain",
  "first_seen": "2026-07-17",
  "last_seen": "2026-07-19",
  "status": "expired",
  "confidence": "reported",
  "n_sources": 1,
  "stories": [
   "wp2shell-cisa-adds-to-kev-wiz-details-webshell-installation-at-s"
  ],
  "sources": [
   "https://www.slcyber.io/research/wp2shell-pre-authentication-rce-in-wordpress-core",
   "https://www.bleepingcomputer.com/news/security/wordpress-core-wp2shell-rce-flaws-get-public-exploits-patch-now/"
  ],
  "reason": "C2 domain for WP2Shell WordPress exploit kit (public exploits, in-the-wild confirmed)"
 }
]