# PhishDestroy domain threat record: aaterrainc.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/aaterrainc.com/
Machine-readable companion: https://phishdestroy.io/domain/aaterrainc.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 14:22:48 UTC
- Last availability or vendor check: 2026-10-22 14:22:48 UTC
- Stored record updated: 2026-10-22 17:28:24 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 159.195.15.232
- Registrar in stored WHOIS data: Cloudflare, Inc.
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-12 17:35:36 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a163fc-62a9-7559-ab8a-b64718bd9872/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/aaterrainc.com
- Certificate Transparency search: https://crt.sh/?q=%25.aaterrainc.com
- Web Archive lookup: https://web.archive.org/web/*/https://aaterrainc.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added aaterrainc.com to its internal blocklist following an administrator review on 2026-10-22. The page title advertises web design, online stores, apps and AI services for businesses. An automatic AI check on the same day reported the site as clean, but the domain was still listed because it matched external blocklists. An HTTP 200 response was recorded on 2026-10-22.

How the scam works
The listing does not demonstrate a specific fraud technique; it only indicates that the domain is considered suspicious and could be used for phishing, credential harvesting, or other deceptive activities. In general, newly registered domains that mimic legitimate service offerings may lure visitors into providing personal or financial information. Without observed malicious behavior on the page, the risk remains a potential impersonation or lure scenario.

Evidence
VirusTotal scanned the domain on 2026-10-22 with 92 engines and reported zero malicious or suspicious detections. Google Safe Browsing checked the same day and did not flag the site. urlscan.io recorded a 307 redirect to HTTPS and an engine‑generated malicious tag with a score of 87, but its overall verdict was non‑malicious (score 0) on 2026-10-22. External blocklists MetaMask and SEAL listed the domain (2 listings) on 2026-10-22. OTX recorded four pulses mentioning the domain on the same date. PhishDestroy’s internal list marks the domain as blocked.

Infrastructure
The domain was registered with Cloudflare, Inc. on 2026-10-12, giving it an age of nine days at first sight. The recorded IP address 159.195.15.232 belongs to Netcup GmbH in the United States. TLS was provided by Let’s Encrypt, valid from 2026-10-13 to 2027-01-11, using TLS 1.3 with AES_128_GCM cipher. Open ports observed were 22, 80 and 443. No DNSSEC records were present.

What to do
Visitors should avoid entering login credentials, payment details, or personal data on the site until its legitimacy can be verified. Organizations should block the exact domain aaterrainc.com in web filters and monitor outbound traffic for connections to its IP address. If any credentials were submitted, change them immediately; if no credentials were entered, no further action is required beyond continued vigilance.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a163fc-62a9-7559-ab8a-b64718bd9872/
Cloudflare Radar report: https://radar.cloudflare.com/scan/f6e9f62b-a626-409e-af3c-720356817658
URLQuery report: https://urlquery.net/report/5ba4cebd-8160-4e8a-9764-37fd6f428be5
Stored capture screenshot: https://urlscan.io/screenshots/01a163fc-62a9-7559-ab8a-b64718bd9872.png
Cloudflare Radar screenshot (2026-10-22T14:53:36Z): https://screenshots.phishdestroy.io/cf/f6e9f62b-a626-409e-af3c-720356817658.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/5ba4cebd-8160-4e8a-9764-37fd6f428be5.png
VirusTotal report: https://www.virustotal.com/gui/domain/aaterrainc.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=aaterrainc.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 17:24:10 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a163fc-62a9-7559-ab8a-b64718bd9872.png
  Captured: 2026-10-22 14:22:48 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a163fc-62a9-7559-ab8a-b64718bd9872.png
  Captured: 2026-10-22 14:22:48 UTC
  Source report: https://urlscan.io/result/01a163fc-62a9-7559-ab8a-b64718bd9872/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/f6e9f62b-a626-409e-af3c-720356817658.png
  Captured: 2026-10-22 14:53:36 UTC
  Source report: https://radar.cloudflare.com/scan/f6e9f62b-a626-409e-af3c-720356817658
  SHA-256: a39bf02c3298552076cb77a05e2e779985bca46e796444253c5a482a12b242fc
- URLQuery: https://screenshots.phishdestroy.io/uq/5ba4cebd-8160-4e8a-9764-37fd6f428be5.png
  Source report: https://urlquery.net/report/5ba4cebd-8160-4e8a-9764-37fd6f428be5
  SHA-256: 1b88c10b8050c45d3fbfeef561a4a9b029d055ecf6e34b844a1d00d8c1054d30

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T14:30:14Z",
        "uuid": "01a163fc-62a9-7559-ab8a-b64718bd9872",
        "scanned_at": "2026-10-22T14:20:57Z",
        "final_url": "https://aaterrainc.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://aaterrainc.com/",
                "from": "http://aaterrainc.com/",
                "status": 307
            }
        ],
        "ip": "159.195.15.232",
        "ptr": "v2202610436125537610.happysrv.de",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.251.110.94",
            "142.251.14.95",
            "159.195.15.232"
        ],
        "asns": [
            "15169",
            "214996"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "c47d0ba77d2b4b0494c2e2b567bbf233a879e2a6346328f7811606609063bf14",
        "script_hashes": [
            "28033e449a31ebcc396e5be8b13b63152bf03094288fb5867034321927bce087",
            "ad33c2df9ada8a663c2147357828f980d0b7ca731ef33eb3c6e4f327c3b2cda5",
            "b2958f142f832f0d5e547cdef77e6fadfce16bea60982fc8bbf50395a2439df8",
            "dab8c57620a633219de9d4af936fd2eae711c6f4653d2998da169bf8e36c2fff"
        ],
        "globals": [
            "gsapVersions",
            "Linear",
            "Power0",
            "Quad",
            "Power1",
            "Cubic",
            "Power2",
            "Quart",
            "Power3",
            "Quint",
            "Power4",
            "Strong",
            "Elastic",
            "Bounce",
            "Expo",
            "Circ",
            "Sine",
            "Back",
            "SteppedEase",
            "TweenLite",
            "TweenMax",
            "TimelineMax",
            "TimelineLite",
            "AttrPlugin",
            "EndArrayPlugin",
            "RoundPropsPlugin",
            "ModifiersPlugin",
            "SnapPlugin",
            "gsap",
            "CSSPlugin",
            "Observer",
            "ScrollTrigger",
            "Lenis",
            "lenisVersion",
            "_gsap",
            "_scrollTop",
            "_scrollLeft"
        ],
        "tls": {
            "san": [
                "aaterrainc.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "aaterrainc.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-11T00:53:00Z",
            "valid_from": "2026-10-13T00:53:01Z"
        },
        "domain_age_days": 9,
        "apex_age_days": 9,
        "tls_age_days": 9,
        "tls_valid_days": 89,
        "requests": 14,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 87,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T14:54:54Z",
        "uuid": "f6e9f62b-a626-409e-af3c-720356817658",
        "scanned_at": "2026-10-22T14:53:36Z",
        "final_url": "https://aaterrainc.com/",
        "status": 200,
        "history": [
            {
                "url": "https://aaterrainc.com/",
                "status": 200
            }
        ],
        "dom_hash": "6606d3d41efa73e9a11aa14afbeae3bcc8dc8430ec16fd799db061d8020040bd",
        "doc_hash": "c47d0ba77d2b4b0494c2e2b567bbf233a879e2a6346328f7811606609063bf14",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "aaterrainc.com",
                "type": "A",
                "value": "159.195.15.232"
            }
        ],
        "dnssec_valid": false,
        "ip": "159.195.15.232",
        "whois": {
            "registrar": "Cloudflare, Inc.",
            "created": "2026-10-12T19:35:36Z",
            "updated": "2026-10-12T19:35:37Z",
            "expires": "2027-10-12T19:35:36Z",
            "nameservers": [
                "princess.ns.cloudflare.com",
                "watson.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T17:23:27Z",
        "analysis_at": "2026-10-22T15:41:02Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "registrar": "Cloudflare, Inc.",
        "created": "2026-10-12T19:35:36Z",
        "expires": "2027-10-12T19:35:36Z",
        "updated": "2026-10-12T19:35:38Z",
        "first_seen": "2026-10-12T21:11:24Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "princess.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "159.195.15.232"
            },
            {
                "ttl": 3600,
                "type": "TXT",
                "value": "google-site-verification=0BBBDKJSCfC5-h9pS_LGeqydjC3y5LWjaxU1qIc9YsE"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "watson.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "princess.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-22T15:46:33Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "aaterrainc.com"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "5ffd4159d75abdea6016e63e68e6e575b37",
            "sha256": "f82187a7d50d6a780d0e5ff0ecf3d6bd708549169193275587f0a5cc0bb3f061",
            "subject": "aaterrainc.com",
            "valid_to": "2027-01-11T00:53:00Z",
            "valid_from": "2026-10-13T00:53:01Z"
        },
        "whois": {
            "registrar": "Cloudflare, Inc.",
            "registrar_iana_id": "1910",
            "registrar_url": "http://www.cloudflare.com",
            "created": "2026-10-12T19:35:36Z",
            "updated": "2026-10-12T19:35:37Z",
            "expires": "2027-10-12T19:35:36Z",
            "status": [
                "addperiod",
                "clientTransferProhibited",
                "clienttransferprohibited"
            ],
            "nameservers": [
                "princess.ns.cloudflare.com",
                "watson.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-12T19:35:36Z",
                "last changed": "2026-10-20T08:33:23Z",
                "registration": "2026-10-12T19:35:36Z",
                "last update of RDAP database": "2026-10-20T08:33:23Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T14:55:16Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "aaterrainc.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-22T14:24:44Z",
            "first": "2026-10-13T06:09:38Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.11,
            "avg_page_bytes": 6368
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://aaterrainc.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 1
        },
        "social_tags": {
            "ogUrl": "https://aaterrainc.com/",
            "title": "A&A Terra Inc | Website Design, Online Stores, Apps & AI for Business",
            "ogType": "website",
            "robots": "index, follow, max-image-preview:large",
            "ogImage": "https://aaterrainc.com/og.png",
            "ogTitle": "A&A Terra | Websites, Apps & AI for Business",
            "ogSiteName": "A&A Terra Inc",
            "themeColor": "#04060a",
            "description": "A&A Terra Inc builds custom websites, online stores, booking and ordering systems, iOS & Android apps and AI assistants for businesses in Texas and across the US. From $49/mo, 0% commission, free preview in 48 hours.",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://aaterrainc.com/",
            "ogDescription": "Your own website, store or app on your own domain, with AI built in. No marketplace commissions. Free preview in 48 hours."
        },
        "trackers": {
            "requests": 10,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 173,
                "tls": 127,
                "wait": 109,
                "connect": 109,
                "download": 219
            },
            "response_ms": 737
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 41063,
            "co2_grams": 0.0015,
            "cleaner_than": 41
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.195.23",
                    "host": "watson.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.38.17",
                    "host": "princess.ns.cloudflare.com"
                }
            ],
            "zone": "aaterrainc.com"
        },
        "location": {
            "ip": "159.195.15.232",
            "asn": "214996",
            "org": "netcup GmbH",
            "city": "Manassas",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "aaterrainc.com"
        },
        "dns": {
            "A": [
                "159.195.15.232"
            ],
            "NS": [
                "watson.ns.cloudflare.com",
                "princess.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"princess.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417523588, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "google-site-verification=0BBBDKJSCfC5-h9pS_LGeqydjC3y5LWjaxU1qIc9YsE"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "159.195.15.232",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://aaterrainc.com"
            ]
        },
        "subdomains": {
            "count": 4,
            "subdomains": [
                "kebabs.aaterrainc.com",
                "party.aaterrainc.com",
                "vintage.aaterrainc.com",
                "www.aaterrainc.com"
            ]
        },
        "tech_stack": {
            "technologies": [
                "GSAP",
                "Lenis",
                "Google Font API",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 8
        },
        "whois": {
            "registrar": "Cloudflare, Inc.",
            "created": "2026-10-12T19:35:36Z",
            "updated": "2026-10-12T19:35:37Z",
            "expires": "2027-10-12T19:35:36Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "princess.ns.cloudflare.com",
                "watson.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin"
            }
        }
    }
}
```