Additional possible causes could be DNS poisoning, man in the middle attacks, or even a nefarious browser extension/plugin-in which displayed the message (all could describe the odd behavior seen by the OP). Regardless of the cause, that the actual AA.com serving malicious content is just as likely as project Oasis getting rolled back in the near future.