ultraround-money[.]entry-cryptolist[.]app

The domain ultraround-money.entry-cryptolist.app is currently classified as an elevated risk phishing site based on multiple converging threat intelligence sources. On July 29, 2026, infrastructure analysis confirmed that this domain resolves to the IP address 188.114.97.3. Notably, the domain lacks valid nameserver records (NS_NOT_FOUND), which is atypical for legitimate online services and may indicate deliberate efforts to hinder traceability or disrupt takedown procedures.

The domain has been actively blocked by PhishDestroy and appears on at least one recognized security blocklist, highlighting that threat prevention systems have independently determined its risk. Further, a scan on VirusTotal shows that 16 out of 91 security vendors have flagged this domain, demonstrating a broad consensus among automated malware and phishing detection engines. However, no additional contextual data—such as brand targeting, page title, or specific scam type—has been observed, and the precise content or tactics employed by the site remain unanalysed at this time.

Given the aggregation of automated detection signals and the domain's presence on threat blocklists, defenders should treat any network traffic to or from ultraround-money.entry-cryptolist.app as potentially harmful. Immediate action is recommended: block this domain at gateways, update threat intelligence feeds, and audit logs for any historical access attempts. Continued monitoring for related domains or infrastructure re-use is also warranted, as malicious operators may pivot to new assets if the site is taken down. While further forensic analysis could provide deeper insight into the specific phishing techniques employed, current evidence strongly supports immediate mitigation.