careers-trustwallet[.]com

The domain careers-trustwallet.com was registered on 19 May 2026 through Global Domain Group LLC and resolves to the IPv4 address 89.34.219.36, which is assigned to Play2go International Limited in Germany. The hosting stack reports Nginx serving PHP content, and the site presented a TLS certificate issued by Let’s Encrypt (R12), indicating that HTTPS was available while the site was active. The page title returned by the HTTP response was “Trust Wallet Jobs”, directly referencing the Trust Wallet brand, confirming a brand‑impersonation intent.

VirusTotal analysis shows that three of ninety‑two scanning engines flagged the domain, and the domain appears on three public blocklists. Additional intelligence from AlienVault OTX lists the domain in a single pulse, and commercial blocklist services PhishDestroy, MetaMask and SEAL have already marked it as malicious. The site was also assigned a Gridinsoft trust score of zero out of one hundred, reflecting an extremely low reputation.

The domain is currently taken offline, so active probing is not possible, but the historical evidence suggests a short‑lived phishing or credential‑harvesting campaign targeting Trust Wallet users, possibly through a fake job posting. Defenders should continue to block the IP address 89.34.219.36 and the domain itself at DNS and proxy layers, monitor for any re‑registration attempts, and update email and web filters with the domain and its associated indicators of compromise. Organizations using Trust Wallet should educate users that legitimate employment communications from Trust Wallet will never originate from a third‑party domain such as careers‑trustwallet.com, and that any unsolicited job offers should be verified through official channels.