careers[.]nttdata[.]ro

The domain careers.nttdata.ro is actively serving content (HTTP 200) and presents a job posting titled "Frontend Engineer with Angular Job Details | NTT DATA Romania SA," indicating a brand impersonation campaign targeting candidates of NTT DATA. The site was registered on December 06, 2011 through CSC Corporate Domains and uses the nameservers dns1.cscdns.net and dns2.cscdns.net. It resolves to IP 130.214.193.81, which is assigned to an ASN located in Germany (AS35039, SAP SE). The TLS certificate is a DigiCert Global G2 RSA SHA256 2020 CA1, and the server software is Apache HTTP Server with HSTS enabled. Detected client‑side technologies include YouTube embeds, Bootstrap, Lightbox, jQuery, jQuery Migrate, and Google Tag Manager. The domain holds a Gridinsoft trust score of 0/100 and has been flagged by 3 of 91 VirusTotal scanners. It is currently listed on a single security blocklist and has been blocked by PhishDestroy. Defenders should block the domain and its resolving IP at perimeter and endpoint layers, monitor DNS queries for the associated nameservers, and investigate any credential submissions or credential‑only traffic that may have been directed to this infrastructure. Given the active status and the confirmed brand impersonation, continued vigilance and remediation are advised.