Domain > app.behindtheknife.org

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-09-18	18.165.83.62 (ClassC)
2025-11-27	3.163.24.100 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 5542Connection: keep-aliveDate: Wed, 26 Nov 2025 14:24:13 GMTx-amz-meta-codebuild-content-sha256: 2a14d52de24e3235d0fdcf729aa0bc4ce3899f6af8b7d32b2a6e9e8e6ddb5deax-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:447454059132:build/FlutterBuild:835869d8-9ebe-40b9-ba3c-2e36a396ae61x-amz-meta-codebuild-content-md5: 21f825171e186b0b2e4a382e39e368f5Last-Modified: Thu, 20 Nov 2025 14:20:34 GMTServer: AmazonS3ETag: 02e989f508e22fc1f82af1607e715252X-Cache: Hit from cloudfrontVia: 1.1 6a52d37737133b0b8a09947e5c586ec4.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: j19NNRJeeVEtEePFv2ZN0GMo9q8Rxv39trLK5485ysXtz1ABSnPGvQAge: 63154

!DOCTYPE html>html>head>  base href/>  meta charsetUTF-8>  meta contentIEEdge http-equivX-UA-Compatible>  meta namedescription contentBehind The Knife>  meta namerobots contentnoindex, follow />  !-- iOS meta tags & icons -->  meta nameapple-mobile-web-app-capable contentyes>  meta nameapple-mobile-web-app-status-bar-style contentblack>  meta nameapple-mobile-web-app-title contentBehind The Knife>  !-- Favicon -->  link relapple-touch-icon sizes57x57 href./icons/apple-icon-57x57.png>  link relapple-touch-icon sizes60x60 href./icons/apple-icon-60x60.png>  link relapple-touch-icon sizes72x72 href./icons/apple-icon-72x72.png>  link relapple-touch-icon sizes76x76 href./icons/apple-icon-76x76.png>  link relapple-touch-icon sizes114x114 href./icons/apple-icon-114x114.png>  link relapple-touch-icon sizes120x120 href./icons/apple-icon-120x120.png>  link relapple-touch-icon sizes144x144 href./icons/apple-icon-144x144.png>  link relapple-touch-icon sizes152x152 href./icons/apple-icon-152x152.png>  link relapple-touch-icon sizes180x180 href./icons/apple-icon-180x180.png>  link relicon typeimage/png sizes192x192 href./icons/android-icon-192x192.png>  link relicon typeimage/png sizes32x32 href./icons/favicon-32x32.png>  link relicon typeimage/png sizes96x96 href./icons/favicon-96x96.png>  link relicon typeimage/png sizes16x16 href./icons/favicon-16x16.png>  link relmanifest href./icons/manifest.json>  meta namemsapplication-TileColor content#ffffff>  meta namemsapplication-TileImage content./icons/ms-icon-144x144.png>  meta nametheme-color content#ffffff>  title>Behind The Knife/title>  link relmanifest hrefmanifest.json>  !-- Google Tag Manager -->  script>(function (w, d, s, l, i) {      wl  wl || ; wl.push({        gtm.start:          new Date().getTime(), event: gtm.js      }); var f  d.getElementsByTagName(s)0,        j  d.createElement(s), dl  l ! dataLayer ? &l + l : ; j.async  true; j.src           https://www.googletagmanager.com/gtm.js?id + i + dl; f.parentNode.insertBefore(j, f);    })(window, document, script, dataLayer, GTM-PWHHRKT);/script>  !-- End Google Tag Manager -->  !-- Reddit Pixel -->  script>    !function (w, d) { if (!w.rdt) { var p  w.rdt  function () { p.sendEvent ? p.sendEvent.apply(p, arguments) : p.callQueue.push(arguments) }; p.callQueue  ; var t  d.createElement(script); t.src  https://www.redditstatic.com/ads/pixel.js, t.async  !0; var s  d.getElementsByTagName(script)0; s.parentNode.insertBefore(t, s) } }(window, document); rdt(init, a2_ftvlgklj8kqy); rdt(track, PageVisit);  /script>  !-- DO NOT MODIFY UNLESS TO REPLACE A USER IDENTIFIER -->  !-- End Reddit Pixel -->  !-- LinkedIn Insight Tag -->  script typetext/javascript>    _linkedin_partner_id  7878188;    window._linkedin_data_partner_ids  window._linkedin_data_partner_ids || ;    window._linkedin_data_partner_ids.push(_linkedin_partner_id);  /script>  script typetext/javascript>    (function (l) {      if (!l) {        window.lintrk  function (a, b) { window.lintrk.q.push(a, b) };        window.lintrk.q        }      var s  document.getElementsByTagName(script)0;      var b  document.createElement(script);      b.type  text/javascript; b.async  true;      b.src  https://snap.licdn.com/li.lms-analytics/insight.min.js;      s.parentNode.insertBefore(b, s);    })(window.lintrk);  /script>  noscript>    img height1 width1 styledisplay:none; alt      srchttps://px.ads.linkedin.com/collect/?pid7878188&fmtgif />  /noscript>  !-- End LinkedIn Insight Tag -->/head>body>  !-- Google Tag Manager (noscript) -->  noscript>iframe srchttps://www.googletagmanager.com/ns.html?idGTM-PWHHRKT height0 width0      styledisplay:none;visibility:hidden>/iframe>/noscript>  !-- End Google Tag Manager (noscript) -->  script srchttps://www.gstatic.com/firebasejs/9.10.0/firebase-app-compat.js>/script>  script srchttps://www.gstatic.com/firebasejs/9.10.0/firebase-messaging-compat.js>/script>  script src./scripts/hls.js typeapplication/javascript>/script>  !-- Firebase Configuration -->  script>    firebase.initializeApp({      apiKey: AIzaSyDoduC--_ughxwdawQVoYa4633ZAdSp0xk,      appId: 1:790663296003:web:ad6b4b805b5b7bf6ed8a36,      messagingSenderId: 790663296003,      projectId: behind-the-knife-f061a,      authDomain: behind-the-knife-f061a.firebaseapp.com,      storageBucket: behind-the-knife-f061a.appspot.com,      measurementId: G-52Q3Z4JFE1,    });    // Necessary to receive background messages:    // check if current browser is supported    // safari will print `This browser doesnt support required to use Firebase SDK.`    if (firebase.messaging.isSupported()) {      const messaging  firebase.messaging();    }  /script>  script>    window.addEventListener(load, function () {      if (document.location.pathname.includes(/checkout_success/)) {        gtag(event, conversion, {          send_to: AW-16482838227/f4ZkCMnsipsZENPN0LM9        });      }    });  /script>  script srcflutter_bootstrap.js async>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > app.behindtheknife.org

Is this malicious?

DNS Resolutions

Port 80

Port 443