asvdf-455312475075[.]southamerica-east1[.]run[.]app

Analysis of the domain asvdf-455312475075.southamerica-east1.run.app indicates active malicious use. The domain was created on 5 April 2018 and is hosted on Google Cloud Run, a service that provides on‑demand container execution. DNS resolution returns the IPv4 address 34.143.73.2, which is the sole host observed for this indicator. VirusTotal records show that two of ninety‑one security vendors have flagged the domain, suggesting that at least a subset of scanners have identified suspicious characteristics.

The domain is currently listed on one external blocklist and has been explicitly blocked by the PhishDestroy mitigation service, confirming that defensive feeds consider it malicious. The risk rating assigned by the source intelligence is elevated and the status remains active, implying ongoing operation. No additional public intelligence such as Safe Browsing, OTX, SSL certificate details, or HTTP response codes is available, leaving the full scope of the payload and targeted brand undefined. Defenders should add the domain and its resolved IP address to deny‑list rules across network perimeter devices, endpoint firewalls, and proxy filters.

Continuous monitoring of the IP reputation and periodic re‑scans with multi‑engine services are advised to capture any changes in detection rates. Because the hosting provider is a large cloud platform, typical takedown channels may be slower; incident response teams should consider filing a abuse report with Google Cloud, citing the observed blocklist entries and the VirusTotal detections. Organizations that employ web‑filtering or URL‑category services should ensure that the domain is classified under a malicious or phishing category to prevent user exposure.