classicinema[.]pl

Analysis of classicinema.pl shows a high‑risk phishing infrastructure that remains active as of 12 July 2026. The domain was registered on 23 February 2026 through a European registrar and resolves to IP address 104.21.26.123, which is part of a large content‑delivery network located in the United States. The site presents a valid TLS certificate issued by a widely trusted certificate authority, and the HTTP response returns status 200 while advertising HTTP/3 support. DNS configuration includes two authoritative name servers operated by the same CDN provider, and mail routing is handled by external mail hosts with priorities 10 and 20. Reputation data is poor: a trust scoring service rates the domain 0 / 100, and one open‑source threat‑intel pulse references it. Virus scanning services flagged the domain on 11 of 93 checks, and it appears on a known blocklist used by anti‑phishing tools. The page title "Classic1900Cinema" does not match any verified brand, and no further content analysis is available. Defenders should block the domain at perimeter firewalls and DNS filters, monitor for any outbound connections to the associated IP, and treat any communications bearing this domain as malicious. Ongoing observation is advised to detect possible credential‑harvesting pages that may be deployed under the same infrastructure.