voirmaclasse[.]espion[.]cc

The domain voirmaclasse.espion.cc presents itself under the generic page title "espion.cc," which suggests a surveillance or spy-themed site. Based on the domain name "voirmaclasse" (French for "see my class"), this site likely impersonates an educational or class monitoring service to deceive users. The threat posed is phishing or credential harvesting, as such sites typically trick victims into entering login details under the guise of accessing class information.

Technical evidence shows the domain was flagged by 6 out of 95 VirusTotal vendors, specifically ADMINUSLabs, alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, and Fortinet. It is registered with Ripcord Domains, LLC, and resolves to IP 199.59.243.228 in the US, hosted on AS16509 Amazon.com, Inc. The domain was created on 2026-02-21 and uses a Let's Encrypt SSL certificate (R12). Nameservers are ns15.abovedomains.com and ns16.abovedomains.com. GridinSoft trust rating is 0 out of 100.

The site is currently DOWN/OFFLINE, mitigating immediate risk. However, the DOM risk score of 63 indicates a moderate to high potential threat if reactivated. Users should avoid any interaction with this domain due to its malicious detections and low trust rating.