load-hermes--h5vj3egp[.]dev[.]autobricksai[.]run

The domain load-hermes--h5vj3egp.dev.autobricksai.run is currently active and classified as a generic_phishing threat with a high risk rating. Infrastructure analysis shows the domain resolves to the IPv4 address 167.254.241.194. No authoritative nameservers were identified (NS_NOT_FOUND), indicating that the domain may be using default or hidden DNS configurations. VirusTotal reports that seven of ninety‑one security vendors have flagged the domain, providing independent confirmation of malicious activity. No additional intelligence such as a targeted brand, page title, or phishing kit has been observed, so the exact content of the site remains unknown. Given the active status, the confirmed IP resolution, and the modest but notable detection count, defenders should block DNS resolution for the domain, add the IP address to network‑level deny lists, and monitor for any related traffic patterns. Continuous re‑scanning of the domain on public sandboxes is advised to capture any evolving payloads or changes in the hosted content.