pywert[.]com

Analysis indicates that the domain pywert.com was registered on 17 April 2026 through Global Domain Group LLC and is currently hosted on Cloudflare name servers hassan.ns.cloudflare.com and tess.ns.cloudflare.com. DNS resolution points to the IPv4 address 91.92.243.12, which remains reachable as of the report date, confirming the domain’s active status. The domain is classified as a generic phishing site and assigned a high risk rating. VirusTotal scans have resulted in three of ninety‑one security vendors flagging the domain, providing limited but notable malicious indication. No additional intelligence such as associated malware families, command‑and‑control infrastructure, or targeted brands has been disclosed. Consequently, the primary uncertainty surrounds the specific phishing campaign details, including the lured victim profile and the exact payload or credential‑harvesting mechanisms employed. Defenders should block outbound and inbound traffic to 91.92.243.12, add pywert.com to domain blocklists, and monitor DNS queries for the associated Cloudflare name servers. Continuous re‑evaluation of VirusTotal and other sandbox results is recommended to capture any escalation in detection counts. Organizations are advised to educate users about unsolicited messages that may reference this domain and to enforce multi‑factor authentication to mitigate credential compromise.