claim-pandu[.]com

This domain, claim-pandu.com, is flagged as a fake airdrop scam targeting the Across brand, according to infrastructure analysis conducted on July 24, 2026. The domain was registered on October 4, 2025, through NiceNIC International Group Co., Limited and currently resolves to the IP address 172.67.191.247, hosted on Cloudflare's network (AS13335) in the United States. No SSL certificate is present, increasing the risk of unencrypted data interception. The page title, 'Pandu Pandas,' does not directly reference the targeted brand but aligns with the reported scam type of a fake airdrop, a common tactic used to deceive users into disclosing sensitive information or transferring assets. Security vendors have detected malicious activity associated with this domain, with 7 out of 95 engines on VirusTotal flagging it as harmful.

Additionally, the domain appears on two security blocklists, including PhishDestroy and ScamSniffer, reinforcing its classification as a high-risk entity. Gridinsoft assigns a trust score of 0/100, further indicating its fraudulent nature. The domain is currently offline, which may limit immediate user exposure but does not eliminate the risk of reactivation or reuse in future campaigns. Defenders should treat this domain as compromised infrastructure.

Blocking the domain and its resolving IP at the network level is recommended to prevent potential access. Monitoring for reactivation or similar domains registered through the same registrar or hosted on the same IP range may help mitigate further threats. Given the use of Cloudflare nameservers (bill.ns.cloudflare.com and peaches.ns.cloudflare.com), organizations should also assess whether other domains under these nameservers exhibit similar patterns of abuse. The exact content and mechanics of the scam remain unverified due to the domain's offline status, but the available evidence strongly supports its classification as a brand impersonation threat.