geoterraapp[.]com

The domain geoterraapp.com is a generic phishing site designed to steal user credentials through a fraudulent 'Sign In' page. It does not impersonate a specific brand or use a known crypto drainer kit. As of the latest verification, geoterraapp.com has been taken offline, but it previously posed a credential phishing threat to visitors.

Technical indicators show that geoterraapp.com had 0 of 95 VirusTotal vendors flagging it as malicious, and Google Safe Browsing did not list it as unsafe. The domain was registered through OwnRegistrar, Inc. on April 26, 2024, and resolved to the IP address 86.107.77.165, located in Germany under AS216395 (HostBet Cloud Technologies Private Limited). It appeared on 1 security blocklist (PhishDestroy) and had no SSL certificate issued. The observed page title was 'Sign In,' consistent with credential phishing attempts.

Users who may have entered login details on geoterraapp.com should immediately change their passwords, especially for accounts using the same credentials. Enabling two-factor authentication (2FA) on all critical accounts is strongly recommended to prevent unauthorized access. Victims should monitor their accounts for suspicious activity and report the phishing domain to their email provider, browser security teams, or platforms like PhishTank or the Anti-Phishing Working Group (APWG).