bitbucket.org Review

 N/A

HTTP/1.1 301 Moved Permanently
location: https://bitbucket.org/
date: Mon, 21 Sep 2026 22:06:01 GMT
server: envoy
content-length: 0

HTTP/1.1 200 OK
Date: Mon, 21 Sep 2026 22:06:02 GMT
Content-Type: text/html; charset=utf-8
Server: AtlassianEdge
Set-Cookie: atlCohort={"bucketAll":{"bucketedAtUTC":"2026-09-21T22:06:01.970Z","version":"2","index":20,"bucketId":0}}; Max-Age=31536000; Domain=.atl-paas.net; Path=/; Secure;
Set-Cookie: ajs_anonymous_id=%225722bf2b-6178-88b3-59bc-9b6f945acabd%22; Max-Age=31536000; Domain=.atl-paas.net; Path=/; Secure;
Set-Cookie: atlCohort={"bucketAll":{"bucketedAtUTC":"2026-09-21T22:06:01.970Z","version":"2","index":20,"bucketId":0}}; Max-Age=31536000; Domain=bitbucket.org; Path=/
Set-Cookie: bxp_gateway_anchor=%7B%22anchor%22%3A%22Brand%22%2C%22type%22%3A%22SEO%22%7D; Max-Age=604800; Domain=bitbucket.org; Path=/; Expires=Mon, 28 Sep 2026 22:06:01 GMT; Secure
Set-Cookie: ajs_anonymous_id=%225722bf2b-6178-88b3-59bc-9b6f945acabd%22; Max-Age=315360000; Domain=.bitbucketapp.com; Path=/; Expires=Thu, 18 Sep 2036 22:06:01 GMT
Set-Cookie: bxp_gateway_request_id=8cf52a35-b2e6-fe88-40b9-7a8fb730af03; Max-Age=300; Domain=.bitbucketapp.com; Path=/; Expires=Mon, 21 Sep 2026 22:11:01 GMT; Secure
Content-Security-Policy: base-uri 'self'; default-src 'self' *.atlassian.com *.intercomcdn.com *.orangelogic.com *.6sc.co *.6sense.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org; script-src 'self' *.1mind.com *.gstatic.com *.cookielaw.org *.public.atl-paas.net *.prod.atl-paas.net *.googletagmanager.com *.marketo.net *.marketo.com *.atlassian.com utt.impactcdn.com *.google.com *.doubleclick.com *.googleadservices.com *.livechatinc.com *.bing.com *.quora.com *.yimg.jp *.clicktale.net *.linkedin.com *.twitter.com *.licdn.com *.demandbase.com *.doubleclick.net *.facebook.net *.redditstatic.com *.clearbitscripts.com *.clarity.ms *.vimeo.com *.google-analytics.com facebook.com *.facebook.com impactcdn.com *.impactcdn.com clearbitjs.com *.clearbitjs.com yahoo.co.jp *.yahoo.co.jp *.recaptcha.net *.ads-twitter.com *.intercom.io *.intercomcdn.com *.jsdelivr.net *.6sc.co *.6sense.com *.techtarget.com *.capterra.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org roundprincethere.com *.roundprincethere.com bzrcdn.openai.com dyv6f9ner1ir9.cloudfront.net *.adsrvr.org analytics.o11.tech 'unsafe-eval' 'unsafe-inline'; style-src 'self' *.public.atl-paas.net *.prod.atl-paas.net fonts.googleapis.com *.googletagmanager.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org 'unsafe-inline'; img-src 'self' *.1mind.com blob: data: atlassian.com *.atlassian.com *.cookielaw.org *.gravatar.com *.wp.com fd-assets.prod.atl-paas.net pixel.pointmediatracker.com *.prod.public.atl-paas.net cnv.event.prod.bidr.io *.doubleclick.net *.clicktale.net *.bing.com rlcdn.com reddit.com quora.com *.rlcdn.com *.reddit.com *.quora.com *.ctfassets.net  *.linkedin.com *.google.com *.google.com.au *.company-target.com *.facebook.com *.google-analytics.com *.twitter.com t.co *.intercomcdn.com *.intercomassets.com *.frontend.public.atl-paas.net *.orangelogic.com *.googletagmanager.com img.logo.dev *.atlassian.net sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org bytebucket.org *.bytebucket.org bitbucket-assetroot.s3.amazonaws.com b.6sc.co obs.roundprincethere.com cdn.blisspointmedia.com; font-src 'self' *.1mind.com *.ctfassets.net *.intercomcdn.com *.gstatic.com *.frontend.public.atl-paas.net *.atl.orangelogic.com; frame-ancestors 'none'; form-action 'self' pages.eml.atlassian.com app-ab35.marketo.com *.marketo.com *.mktoresp.com *.facebook.com; report-uri https://web-security-reports.services.atlassian.com/csp-report/wac-web; report-to csp-default-endpoint; worker-src 'self' blob:; media-src 'self' *.1mind.com *.ctfassets.net *.atlassian.com *.orangelogic.com; connect-src 'self' *.1mind.com wss://*.1mind.com ws: atlassian.com *.atlassian.com *.cookielaw.org *.onetrust.com *.public.atl-paas.net *.prod.atl-paas.net *.mktoresp.com *.marketo.com *.ingest.sentry.io *.workato.com atlassian.sjv.io statsigapi.net *.statsigapi.net *.contentful.com atlassian.net *.clicktale.net *.contentsquare.net *.bing.com google-analytics.com company-target.com linkedin.com *.google-analytics.com *.company-target.com *.linkedin.com *.doubleclick.net *.reddit.com *.redditstatic.com *.google.com *.demandbase.com *.clarity.ms *.clearbit.com *.intercom.io *.algolianet.com *.algolia.net *.algolia.io *.recaptcha.net https://unpkg.com/@rive-app/ *.facebook.com *.orangelogic.com *.adnxs.com *.6sc.co *.6sense.com m.castle.io apis.auxia.io *.atlassian.net https://participant.connect.us-east-1.amazonaws.com wss://participant.connect.us-east-1.amazonaws.com *.connect.us-east-1.amazonaws.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org obs.roundprincethere.com ibc-flow.techtarget.com *.googleadservices.com *.ingest.us.sentry.io bzrcdn.openai.com; frame-src 'self' *.1mind.com *.loom.com *.youtube.com *.google.com *.doubleclick.net *.recaptcha.net *.atl-paas.net pages.eml.atlassian.com app-ab35.marketo.com *.marketo.com *.mktoresp.com *.company-target.com *.googletagmanager.com *.atlassian.net *.facebook.com atlassian931.outgrow.us atlassian.wvc-test.ecosystems.io
Content-Security-Policy-Report-Only: 
Reporting-Endpoints: csp-default-endpoint="https://web-security-reports.services.atlassian.com/csp-report/wac-web"
Content-Encoding: br
Cache-Control: max-age=0, stale-if-error=0, no-cache="Set-Cookie"
Vary: Accept-Encoding,Accept-Encoding, Referer
X-Cache: Miss from cloudfront
Via: 1.1 b5695e36d7fbc522ece27885d73757ae.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HIO52-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 4EfQrGDUL1taGzPET-l-rl7DqVN5ROIwSyaMyYfJrb1mCZtJVJSdBg==
X-Envoy-Attempt-Count: 1
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none';
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Atl-Traceid: 7b6ff8a80c18465c838d4e520b891e33
Atl-Request-Id: 7b6ff8a8-0c18-465c-838d-4e520b891e33
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Report-To: {"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}
Nel: {"failure_fraction": 0.01, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}
Server-Timing: atl-edge;dur=429,atl-edge-internal;dur=5,atl-edge-upstream;dur=424,atl-edge-pop;desc="aws-us-west-2",bifrost;dur=17.368271000683308,tesseract;dur=2
Transfer-Encoding: chunked