bitbucket.org Review

 N/A

HTTP/1.1 301 Moved Permanently
location: https://bitbucket.org/
date: Thu, 08 Oct 2026 19:15:24 GMT
server: envoy
content-length: 0

HTTP/1.1 200 OK
Date: Thu, 08 Oct 2026 19:15:24 GMT
Content-Type: text/html; charset=utf-8
Server: AtlassianEdge
Set-Cookie: atlCohort={"bucketAll":{"bucketedAtUTC":"2026-10-08T19:15:24.587Z","version":"2","index":81,"bucketId":0}}; Max-Age=31536000; Domain=.atl-paas.net; Path=/; Secure;
Set-Cookie: ajs_anonymous_id=%22dd363684-b8b0-76cc-706e-c222858700cd%22; Max-Age=31536000; Domain=.atl-paas.net; Path=/; Secure;
Set-Cookie: atlCohort={"bucketAll":{"bucketedAtUTC":"2026-10-08T19:15:24.587Z","version":"2","index":81,"bucketId":0}}; Max-Age=31536000; Domain=bitbucket.org; Path=/
Set-Cookie: bxp_gateway_anchor=%7B%22anchor%22%3A%22Brand%22%2C%22type%22%3A%22SEO%22%7D; Max-Age=604800; Domain=bitbucket.org; Path=/; Expires=Thu, 15 Oct 2026 19:15:24 GMT; Secure
Set-Cookie: ajs_anonymous_id=%22dd363684-b8b0-76cc-706e-c222858700cd%22; Max-Age=315360000; Domain=.bitbucketapp.com; Path=/; Expires=Sun, 05 Oct 2036 19:15:24 GMT
Set-Cookie: bxp_gateway_request_id=101bad93-9a1e-fa40-2833-4400361c3182; Max-Age=300; Domain=.bitbucketapp.com; Path=/; Expires=Thu, 08 Oct 2026 19:20:24 GMT; Secure
Content-Security-Policy: base-uri 'self'; default-src 'self' *.atlassian.com *.intercomcdn.com *.orangelogic.com *.6sc.co *.6sense.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org; script-src 'self' *.1mind.com *.gstatic.com *.cookielaw.org *.public.atl-paas.net *.prod.atl-paas.net *.googletagmanager.com *.marketo.net *.marketo.com *.atlassian.com utt.impactcdn.com *.google.com *.doubleclick.com *.googleadservices.com *.livechatinc.com *.bing.com *.quora.com *.yimg.jp *.clicktale.net *.linkedin.com *.twitter.com *.licdn.com *.demandbase.com *.doubleclick.net *.facebook.net *.redditstatic.com *.clearbitscripts.com *.clarity.ms *.vimeo.com *.google-analytics.com facebook.com *.facebook.com impactcdn.com *.impactcdn.com clearbitjs.com *.clearbitjs.com yahoo.co.jp *.yahoo.co.jp *.recaptcha.net *.ads-twitter.com *.intercom.io *.intercomcdn.com *.jsdelivr.net *.6sc.co *.6sense.com *.techtarget.com *.capterra.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org roundprincethere.com *.roundprincethere.com bzrcdn.openai.com dyv6f9ner1ir9.cloudfront.net *.adsrvr.org analytics.o11.tech https://s3.amazonaws.com/beehiiv-adnetwork-production/pixel-v2.js 'unsafe-eval' 'unsafe-inline'; style-src 'self' *.public.atl-paas.net *.prod.atl-paas.net fonts.googleapis.com *.googletagmanager.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org 'unsafe-inline'; img-src 'self' *.1mind.com blob: data: atlassian.com *.atlassian.com *.cookielaw.org *.gravatar.com *.wp.com fd-assets.prod.atl-paas.net pixel.pointmediatracker.com *.prod.public.atl-paas.net cnv.event.prod.bidr.io *.doubleclick.net *.clicktale.net *.bing.com rlcdn.com reddit.com quora.com *.rlcdn.com *.reddit.com *.quora.com *.ctfassets.net  *.linkedin.com *.google.com *.google.com.au *.company-target.com *.facebook.com *.google-analytics.com *.twitter.com t.co *.intercomcdn.com *.intercomassets.com *.frontend.public.atl-paas.net *.orangelogic.com *.googletagmanager.com img.logo.dev *.atlassian.net sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org bytebucket.org *.bytebucket.org bitbucket-assetroot.s3.amazonaws.com b.6sc.co obs.roundprincethere.com cdn.blisspointmedia.com connect.facebook.net; font-src 'self' *.1mind.com *.ctfassets.net *.intercomcdn.com *.gstatic.com *.frontend.public.atl-paas.net *.atl.orangelogic.com; frame-ancestors 'none'; form-action 'self' pages.eml.atlassian.com app-ab35.marketo.com *.marketo.com *.mktoresp.com *.facebook.com; report-uri https://web-security-reports.services.atlassian.com/csp-report/wac-web; report-to csp-default-endpoint; media-src 'self' *.1mind.com *.ctfassets.net *.atlassian.com *.orangelogic.com; worker-src 'self' blob:; frame-src 'self' *.1mind.com *.loom.com *.youtube.com *.google.com *.doubleclick.net *.recaptcha.net *.atl-paas.net pages.eml.atlassian.com app-ab35.marketo.com *.marketo.com *.mktoresp.com *.company-target.com *.googletagmanager.com *.atlassian.net *.facebook.com atlassian931.outgrow.us atlassian.wvc-test.ecosystems.io https://support-forms-ui.atlassian.com analytics.o11.tech *.adsrvr.org; connect-src 'self' *.1mind.com wss://*.1mind.com ws: atlassian.com *.atlassian.com *.cookielaw.org *.onetrust.com *.public.atl-paas.net *.prod.atl-paas.net *.mktoresp.com *.marketo.com *.ingest.sentry.io *.workato.com atlassian.sjv.io statsigapi.net *.statsigapi.net *.contentful.com atlassian.net *.clicktale.net *.contentsquare.net *.bing.com google-analytics.com company-target.com linkedin.com *.google-analytics.com *.company-target.com *.linkedin.com *.doubleclick.net *.reddit.com *.redditstatic.com *.google.com *.demandbase.com *.clarity.ms *.clearbit.com *.intercom.io *.algolianet.com *.algolia.net *.algolia.io *.recaptcha.net https://unpkg.com/@rive-app/ *.facebook.com *.orangelogic.com *.adnxs.com *.6sc.co *.6sense.com m.castle.io apis.auxia.io *.atlassian.net https://participant.connect.us-east-1.amazonaws.com wss://participant.connect.us-east-1.amazonaws.com *.connect.us-east-1.amazonaws.com sourcetreeapp.com *.sourcetreeapp.com bitbucket.org *.bitbucket.org obs.roundprincethere.com ibc-flow.techtarget.com *.googleadservices.com *.ingest.us.sentry.io bzrcdn.openai.com bzr.openai.com *.adsrvr.org ingestion.prod.apiarydata.net
Content-Security-Policy-Report-Only: 
Reporting-Endpoints: csp-default-endpoint="https://web-security-reports.services.atlassian.com/csp-report/wac-web"
Content-Encoding: br
Cache-Control: max-age=0, stale-if-error=0, no-cache="Set-Cookie"
Vary: Accept-Encoding,Accept-Encoding, Referer
X-Cache: Miss from cloudfront
Via: 1.1 1cbc126937aab64e42a05f9bf2f8daee.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HIO52-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 1Jx6EPUpwN39hSwGJkLziOmnhYNCB2LQN-zSsVdaW5MXt9fQrXUHeA==
X-Envoy-Attempt-Count: 1
X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none';
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Atl-Traceid: fc66fc8b684c41a395aeb637d0442993
Atl-Request-Id: fc66fc8b-684c-41a3-95ae-b637d0442993
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Report-To: {"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}
Nel: {"failure_fraction": 0.01, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}
Server-Timing: atl-edge;dur=445,atl-edge-internal;dur=3,atl-edge-upstream;dur=442,atl-edge-pop;desc="aws-us-west-2",bifrost;dur=10.029697999358177,tesseract;dur=2
Transfer-Encoding: chunked