uphold-desktopapp[.]com

This domain, uphold-desktopapp.com, operates as a fraudulent distribution point for a counterfeit Uphold desktop application targeting Windows users. The site mimics legitimate Uphold branding to deceive victims into downloading malicious software, likely designed to harvest credentials, cryptocurrency wallet details, or deploy additional malware payloads. The page title explicitly states 'Uphold Desktop — Download the Uphold App for Windows,' directly impersonating the official Uphold platform to exploit user trust in the brand's digital asset management services.

Analysis indicates this infrastructure is actively malicious, with 16 out of 95 security vendors on VirusTotal flagging the domain as phishing or malicious. The domain was registered on June 7, 2026, through Squarespace Domains LLC, an unusually future-dated registration that may indicate domain generation algorithm abuse or registrar manipulation. It appears on three independent security blocklists and has been referenced in two AlienVault OTX threat intelligence pulses. The domain resolves to IP address 91.92.241.250, a host previously associated with other phishing campaigns. Gridinsoft's trust scoring system assigned a 0/100 rating, further confirming its malicious classification.

Users who visited uphold-desktopapp.com or downloaded files from this domain should immediately disconnect affected devices from networks and perform a full security scan using updated detection tools. Any credentials, wallet addresses, or sensitive information entered on this site must be considered compromised and rotated across all services. Cryptocurrency users should transfer assets to new wallets using clean devices, as private keys may have been exposed. Monitor financial accounts for unauthorized transactions and report the incident to relevant cybersecurity authorities or financial fraud teams. Future interactions with Uphold services should only occur through verified official channels.