test-hermes-13--vzyr8k0x[.]dev[.]autobricksai[.]run

This domain is flagged as a generic phishing threat with a high risk level and remains active as of July 16, 2026. Infrastructure analysis reveals the domain resolves to IP address 167.254.241.194. VirusTotal scanning shows 7 of 91 security vendors flagging this domain as malicious, indicating a moderate level of detection across the security community. Notably, nameservers are reported as NS_NOT_FOUND, which may suggest recent configuration changes, incomplete DNS setup, or an attempt to evade tracking. The exact content of the website has not yet been analyzed, so no brand, login form, or specific scam type can be confirmed from the available data. Defenders should treat this domain as actively hostile, block all traffic to it and its resolving IP at network boundaries, and monitor for any related domains or subdomains sharing the same IP or naming pattern. Given the high risk level and ongoing activity, immediate action to contain potential phishing campaigns originating from this domain is recommended.