build-81688[.]bubbleapps[.]io

This domain is flagged as a high-risk generic phishing target as of August 02, 2026. It is hosted on Bubble Group's platform, a legitimate app-building service, but the specific subdomain build-81688.bubbleapps.io has been identified as malicious. The domain resolves to IP address 104.18.246.24, which is associated with Cloudflare's infrastructure, providing content delivery and proxy services. No nameserver information is available for this domain, which is unusual and may indicate recent configuration changes or incomplete DNS setup.

Security telemetry shows significant malicious signaling. VirusTotal reports that 12 out of 91 security vendors flag this domain as malicious, indicating broad consensus among detection engines. Additionally, the domain appears on at least one security blocklist and is specifically blocked by PhishDestroy, a specialized phishing protection service. The domain is currently active, meaning it remains operational and potentially accessible to targets.

The exact content of the hosted page has not been analyzed in this report. The threat classification is generic phishing, but no specific brand impersonation, page title, or scam category has been documented. Defenders should treat this domain as an active phishing infrastructure and consider blocking it at DNS and email gateway levels. Users encountering links to this domain should be advised to avoid interaction. Monitoring for related subdomains under bubbleapps.io may reveal additional phishing campaigns. The IP address 104.18.246.24 should also be reviewed for other malicious domains hosted on the same infrastructure. Given the high risk level and active status, immediate action is recommended.