CONTINUOUS INTERNET TELEMETRY24H DRIFT1,539 material changesacross 1,339 domains · +117 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination parity.domains · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination pphosted.comNOW718 curated domains not answeringlast probe, steadyERRORS3,199 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,906 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,539 material changesacross 1,339 domains · +117 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination parity.domains · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination pphosted.comNOW718 curated domains not answeringlast probe, steadyERRORS3,199 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,906 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

bitbucket.org

Observed 2026-07-17T19:02:24.157Z (7h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byProofpoint
Also usesFacebook/MetaGoogle Search ConsoleAtlassian
IPv6 · 96 subdomains · dev_tools
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat bitbucket.org actually stands on - every host below is a signed observation
bitbucket.org
A / AAAA
104.192.142.24104.192.142.26104.192.142.252401:1d80:321c::bbc:1:df7c+2 more
Cloudflareserves the site
NS
ns-445.awsdns-55.comns-1746.awsdns-26.co.ukns-584.awsdns-09.netns-1305.awsdns-35.org
awsdns-55.com + awsdns-26.co.uk + moreanswers its DNS
MX
mxa-001d9801.gslb.pphosted.commxb-001d9801.gslb.pphosted.com
Proofpointreceives its email

HTTPS probe

ok Responding normally (2xx) 200 OK
HTTP status200
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time580 ms
DNS resolutionNOERROR
MCP This domain advertises an AI service endpoint at _mcp._tcp.
_1tb6ruf8jsqqv5hyasqil8wwbby7knz.dcv.digicert.com facebook-domain-verification=84vhrka086if54vvfvdk2ezuvfdwyq _kc0m4lhl1awr95c7d38tvu102h1x8jf.dcv.digicert.com google-site-verification=BIhAfAJXWYr-hSVf3rOpm7IIWSX6mA7d0Na7t-GaEwA

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 3

  • 104.192.142.24
  • 104.192.142.26
  • 104.192.142.25

AAAA 3

  • 2401:1d80:321c::bbc:1:df7c
  • 2401:1d80:321c:2:0:bbc:1:df7c
  • 2401:1d80:321c:1:0:bbc:1:df7c

MX 2

  • 10mxa-001d9801.gslb.pphosted.com
  • 10mxb-001d9801.gslb.pphosted.com

TXT 24

  • facebook-domain-verification=84vhrka086if54vvfvdk2ezuvfdwyq
  • google-site-verification=BIhAfAJXWYr-hSVf3rOpm7IIWSX6mA7d0Na7t-GaEwA
  • atlassian-domain-verification=ZRphniOpyvhHV76mRmxnLkHJVrKnbeOIxmhbxb8PF6AarX0FypthxYB/r5XpVC2E
  • google-site-verification=p99sO7SVcXanHfj-NuQZJKocj3_4Hkws2ZNbbieLW1M
  • _1tb6ruf8jsqqv5hyasqil8wwbby7knz.dcv.digicert.com
  • status-page-domain-verification=3fbwzqm8vjhr
  • google-site-verification=QWfM0kROcuH3GIqpbpGM-jg3ajJyj4Ie5t_LZisV6E0
  • v=spf1 ip4:167.89.90.3/32 ip4:167.89.37.79/32 ip4:167.89.38.16/32 ip4:167.89.38.188/32 ip4:167.89.38.218/32 include:atlassian.mail.e.sparkpost.com a:001.lax.mailroute.net include:stspg-customer.com include:_spf.atlassian.net -all
  • google-site-verification=oFmSUhmR77qRC-e8T1kL-eaO7pvT8XUmpw1G0p-lWqM
  • _kc0m4lhl1awr95c7d38tvu102h1x8jf.dcv.digicert.com

NS 4

  • ns-445.awsdns-55.com
  • ns-1746.awsdns-26.co.uk
  • ns-584.awsdns-09.net
  • ns-1305.awsdns-35.org

SOA 1

  • ns-584.awsdns-09.net awsdns-hostmaster.amazon.com

CAA 7

  • issuewild amazon.com
  • issue globalsign.com
  • issue amazon.com
  • iodef mailto:root@bitbucket.org
  • issue digicert.com
  • issuewild digicert.com
  • issue letsencrypt.org

TLS Certificates (0)

None.

Subdomains (96)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for bitbucket.org. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for bitbucket.org <a href="https://domaindrift.io/t/bitbucket.org"> <img src="https://domaindrift.io/badge/bitbucket.org.svg" width="300" height="64" alt="DomainDrift signed observations for bitbucket.org"> </a>

Ed25519 Receipt

Receipt ID
fe419ea7-86a0-41b6-b91b-b18c99942e49
Output Hash
bbe832484e2289c6b208244545c530cfc6eada8450ac9f0f61a615df376afaee
Signature
ed25519:a25509317c824396cc57ccee55280bcf0ea6382768588a1fea8a0a127406d4922ff75b3c6dcff0ee73802539cc0af96fedda458e2e5327cd22d7803869db0b08
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser