wp-mail[.]netDomain
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 5 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor“Accounts: administrator usernames beginning wpsupport_, or accounts with email addresses ending @wp-mail[.]net.”
Indicators reported together
named in the same reports- rank1cdn[.]comin 1 report
- rankmath[.]comin 1 report
- group[.]onein 1 report
Copy these 3 indicators · defanged
Also named with it: CVE-2026-111862
Thanks — we review every report.