bitbucket.org Review

 N/A

HTTP/1.1 301 Moved Permanently
location: https://bitbucket.org/
date: Mon, 15 Jun 2026 07:53:35 GMT
server: envoy
content-length: 0

HTTP/1.1 200 OK
Date: Mon, 15 Jun 2026 07:53:36 GMT
Content-Type: text/html
Server: AtlassianEdge
Set-Cookie: atlCohort={"bucketAll":{"bucketedAtUTC":"2026-06-15T07:53:36.068Z","version":"2","index":36,"bucketId":0}}; Max-Age=31536000; Domain=.atl-paas.net; Path=/; Secure;
Set-Cookie: ajs_anonymous_id=%220d05f5df-6814-a723-ca73-95f0b9a62bc9%22; Max-Age=31536000; Domain=.atl-paas.net; Path=/; Secure;
Set-Cookie: atlCohort={"bucketAll":{"bucketedAtUTC":"2026-06-15T07:53:36.068Z","version":"2","index":36,"bucketId":0}}; Max-Age=31536000; Domain=bitbucket.org; Path=/
Set-Cookie: bxp_gateway_anchor=%7B%22anchor%22%3A%22Brand%22%2C%22type%22%3A%22SEO%22%7D; Max-Age=604800; Domain=bitbucket.org; Path=/; Expires=Mon, 22 Jun 2026 07:53:36 GMT; Secure
Set-Cookie: ajs_anonymous_id=%220d05f5df-6814-a723-ca73-95f0b9a62bc9%22; Max-Age=315360000; Domain=.bitbucketapp.com; Path=/; Expires=Thu, 12 Jun 2036 07:53:36 GMT
Set-Cookie: bxp_gateway_request_id=f2fa4056-2a8b-1282-f466-6887f50b4e2b; Max-Age=300; Domain=.bitbucketapp.com; Path=/; Expires=Mon, 15 Jun 2026 07:58:36 GMT; Secure
Content-Security-Policy: base-uri 'self'; default-src 'self' *.atlassian.com *.intercomcdn.com *.orangelogic.com *.6sc.co *.6sense.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org; script-src 'self' *.gstatic.com *.cookielaw.org *.public.atl-paas.net *.prod.atl-paas.net *.googletagmanager.com *.marketo.net *.atlassian.com utt.impactcdn.com *.google.com *.doubleclick.com *.googleadservices.com *.livechatinc.com *.bing.com *.quora.com *.yimg.jp *.clicktale.net *.linkedin.com *.twitter.com *.licdn.com *.demandbase.com *.doubleclick.net *.facebook.net *.redditstatic.com *.clearbitscripts.com *.clarity.ms *.vimeo.com *.google-analytics.com facebook.com *.facebook.com impactcdn.com *.impactcdn.com clearbitjs.com *.clearbitjs.com yahoo.co.jp *.yahoo.co.jp *.recaptcha.net *.ads-twitter.com *.intercom.io *.intercomcdn.com *.jsdelivr.net *.6sc.co *.6sense.com *.techtarget.com *.capterra.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org roundprincethere.com *.roundprincethere.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' *.public.atl-paas.net *.prod.atl-paas.net fonts.googleapis.com *.googletagmanager.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org 'unsafe-inline'; img-src 'self' blob: data: atlassian.com *.atlassian.com *.cookielaw.org *.gravatar.com *.wp.com fd-assets.prod.atl-paas.net pixel.pointmediatracker.com *.prod.public.atl-paas.net cnv.event.prod.bidr.io *.doubleclick.net *.clicktale.net *.bing.com rlcdn.com reddit.com quora.com *.rlcdn.com *.reddit.com *.quora.com *.ctfassets.net  *.linkedin.com *.google.com *.google.com.au *.company-target.com *.facebook.com *.google-analytics.com *.twitter.com t.co *.intercomcdn.com *.intercomassets.com *.frontend.public.atl-paas.net *.orangelogic.com *.googletagmanager.com img.logo.dev *.atlassian.net sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org bytebucket.org *.bytebucket.org bitbucket-assetroot.s3.amazonaws.com; font-src 'self' *.ctfassets.net *.intercomcdn.com *.gstatic.com *.frontend.public.atl-paas.net *.atl.orangelogic.com; frame-ancestors 'none'; form-action 'self'; report-uri https://web-security-reports.services.atlassian.com/csp-report/wac-web; report-to csp-default-endpoint; connect-src 'self' ws: atlassian.com *.atlassian.com *.cookielaw.org *.onetrust.com *.public.atl-paas.net *.prod.atl-paas.net *.mktoresp.com *.ingest.sentry.io *.workato.com atlassian.sjv.io statsigapi.net *.statsigapi.net *.contentful.com atlassian.net *.clicktale.net *.contentsquare.net *.bing.com google-analytics.com company-target.com linkedin.com *.google-analytics.com *.company-target.com *.linkedin.com *.doubleclick.net *.reddit.com *.redditstatic.com *.google.com *.demandbase.com *.clarity.ms *.clearbit.com *.intercom.io *.algolianet.com *.algolia.net *.algolia.io *.recaptcha.net https://unpkg.com/@rive-app/ *.facebook.com *.orangelogic.com *.adnxs.com *.6sc.co *.6sense.com m.castle.io apis.auxia.io *.atlassian.net https://participant.connect.us-east-1.amazonaws.com wss://participant.connect.us-east-1.amazonaws.com *.connect.us-east-1.amazonaws.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org; worker-src 'self' blob:; frame-src 'self' *.youtube.com *.google.com *.doubleclick.net *.recaptcha.net *.atl-paas.net *.company-target.com *.googletagmanager.com *.atlassian.net; media-src 'self' *.ctfassets.net *.atlassian.com *.orangelogic.com
Content-Security-Policy-Report-Only: 
Reporting-Endpoints: csp-default-endpoint="https://web-security-reports.services.atlassian.com/csp-report/wac-web"
Content-Encoding: br
X-Node-Architecture: arm64
X-Instance-Type: r8g.12xlarge
Cache-Control: max-age=0, stale-if-error=0, no-cache="Set-Cookie"
Vary: Accept-Encoding,Accept-Encoding, Referer
X-Cache: Miss from cloudfront
Via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HIO52-P1
X-Amz-Cf-Id: vlF1Oq1g_6zsu2O88X-kRCjys_n5EsGxxjVSA6zQrqRC7A3sYyugVA==
X-Envoy-Attempt-Count: 1
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none';
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Atl-Traceid: 2052f514a7d8484ba0ea8f74f004b110
Atl-Request-Id: 2052f514-a7d8-484b-a0ea-8f74f004b110
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Report-To: {"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}
Nel: {"failure_fraction": 0.01, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}
Server-Timing: atl-edge;dur=556,atl-edge-internal;dur=1,atl-edge-upstream;dur=555,atl-edge-pop;desc="aws-us-west-2",bifrost;dur=8.776697002351284,tesseract;dur=1
Transfer-Encoding: chunked