{"report_id":"b6938394-79e6-49d3-8b72-84ab77f4867c","version":6,"status":"done","tags":["suspicious"],"date":"2026-02-22T13:34:50Z","url":{"schema":"http","addr":"customerservicesconsult.bitbucket.io","fqdn":"customerservicesconsult.bitbucket.io","domain":"customerservicesconsult.bitbucket.io","tld":"bitbucket.io"},"ip":{"addr":"185.166.143.50","port":0,"asn":16509,"as":"AMAZON-02","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"customerservicesconsult.bitbucket.io/","fqdn":"customerservicesconsult.bitbucket.io","domain":"customerservicesconsult.bitbucket.io","tld":"bitbucket.io"},"title":"Our Organisation Fax Portal.xls","dom":{"size":318194,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"6c4501370e30d1c94d7837eb748ba05b","sha1":"964699e0e87c2c390968570836709126b18b1be7","sha256":"823df37ff7da2614d413294d4afed5c2b3bf7dec3279ce8322c4cd3c90c43408","sha512":"92e12e00a72af7d84e1fabfb0ccd228ebc9aaaebd148d06551c2ba4bf6284379f65e25468b31d40e6dec872a4ea0bcdf5f0ec36ee0363f6cd19fc363cde19fd7","ssdeep":"1536:4vRNhrCBXFtmuVSJC3vaz5I16eypDNZ4gp+Ev48a4+PWDbczdOgXsxi2S/oEbgS1:MZ4gp+Ev4XWnAogcE2moMg8QXo","tlshash":"9064dd787601f84e6e2358bfeca81ed19c14dd5fedccabc55048446e6be34bb21182da","dom_hash":"domhashebb564d423659dd50ff1973f38802512","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"customerservicesconsult.bitbucket.io","fqdn":"customerservicesconsult.bitbucket.io","domain":"customerservicesconsult.bitbucket.io","tld":"bitbucket.io"},"ip":{"addr":"185.166.143.50","port":0,"asn":16509,"as":"AMAZON-02","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-29T13:34:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"customerservicesconsult.bitbucket.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-22","alert":"Phishing Block","trigger":"customerservicesconsult.bitbucket.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"customerservicesconsult.bitbucket.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"customerservicesconsult.bitbucket.io","ip":{"addr":"185.166.143.50","port":443,"asn":16509,"as":"AMAZON-02","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-03-07","domain_rank":0,"first_seen":"2025-08-11T14:10:24.012306Z","last_seen":"2026-02-22T12:29:28.080544Z","alert_count":10,"request_count":3,"received_data":243138,"sent_data":1481,"comment":"","tags":null,"fingerprints":[{"name":"Zipkin","description":"","website":"https://zipkin.io/","common_platform_enumeration":"","icon":"Zipkin.png","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-15T22:32:42.929582Z","alert_count":0,"request_count":1,"received_data":2829,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"customerservicesconsult.bitbucket.io/","fqdn":"customerservicesconsult.bitbucket.io","domain":"customerservicesconsult.bitbucket.io","tld":"bitbucket.io"},"ip":{"addr":"185.166.143.50","port":443,"asn":16509,"as":"AMAZON-02","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7896aee086fe1dab925df21505f8afad","sha1":"28b4730da2c4b54d3b3a0c89cf1cb63cc3df0471","sha256":"039533aca3fc179033e5c51f048e343475533ddcf729afa6a95d755b8bdc110d","sha512":"43d146da4c88ac17ceee2e2819fed5ea2a89a0ab60d845062875f9338918e822e6c0b7efc834122732626d9ad8765b00471413ec891dd3c3dd6d3eb9a374f3a1","ssdeep":"","tlshash":"9f31e90561fb58a04263b2bc939f9104642642473d45ee697b8c27044fae92da5fabcd","size":1849,"data":"","first_seen":"2025-08-11T08:36:04.282826Z","last_seen":"2026-02-22T13:34:51.390682Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"customerservicesconsult.bitbucket.io/","fqdn":"customerservicesconsult.bitbucket.io","domain":"customerservicesconsult.bitbucket.io","tld":"bitbucket.io"},"ip":{"addr":"185.166.143.50","port":443,"asn":16509,"as":"AMAZON-02","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4450e794c38dfde525d31cdd30e21041","sha1":"5caa826bb0d064caea58cb8ed2195d02d5606ef0","sha256":"bdad41190be221631902b910d41035c3b37323e6f6137fb30eda37771582dd68","sha512":"795e65ffa710b6f2b0e9d962ce0975351532412247bd67a54e082432d3c53f27855e6bcc300e4dfbc4ab6e3297bb946023b2889eb6fb2010bd90942ca4a2203c","ssdeep":"","tlshash":"40f0c2eae69f80210710b7b809dd0186d6f4d9a3e84ccc4ab40c32067f4033844ba614","size":516,"data":"","first_seen":"2025-08-11T08:36:04.281768Z","last_seen":"2026-02-22T13:34:51.394794Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"customerservicesconsult.bitbucket.io/","fqdn":"customerservicesconsult.bitbucket.io","domain":"customerservicesconsult.bitbucket.io","tld":"bitbucket.io"},"ip":{"addr":"185.166.143.50","port":443,"asn":16509,"as":"AMAZON-02","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"345df9719afc0b30490527524f36a7c1","sha1":"f8c25e790d5061cf0ba59ff5877b6bfafd8259d9","sha256":"8938892b56a223936da55095119a6b65cc1ad3484c17beb48f083dd1643de66b","sha512":"f7dc0c66954fc8e817461254bfc0bbf79ca1e0546236d22f0d364d773ffc0735aebe90b84cf5fedd0edae54f74b7313b8e4016e06f58ef6dac49b60fac32990d","ssdeep":"768:kvVLkd9LtQFwdNeFcg2VCKgAFV090QkOf72fON+lRlOd9RNLUm7ZocINKnnnPfIC:WvRNhrCBXFtmuVSJC3vaz5I16ey3","tlshash":"c0342578b601f84eae2358bfeda81ed19014dd5fedcc6bc54048446e6be34bb35182da","size":238831,"data":"","first_seen":"2025-08-11T08:36:04.28687Z","last_seen":"2026-02-22T13:34:51.397712Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@emailjs/browser@3/dist/email.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aaf4b4c066039688024b3eb28b99260d","sha1":"3d7499d713898a2798f449d8b3528d4094475208","sha256":"249f5139f01396e20b067fbe6db17315981fb1c36c64d64df224bcf0f8750eab","sha512":"9bf344ac90c909cb03955757565b9e442bdc411bdf90303c894fb571005f9c1ed211852bca4503be8b59c1f2980b2d94b6e511690db475a51ad7672fb05e22dc","ssdeep":"","tlshash":"fa41615613f4f0f663edc3ea54bd2200e107c468be92d4e1d6f80e272847c976269e22","size":2058,"data":"","first_seen":"2024-01-11T04:46:50Z","last_seen":"2026-06-08T03:57:58.722222Z","times_seen":763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"customerservicesconsult.bitbucket.io/","fqdn":"customerservicesconsult.bitbucket.io","domain":"customerservicesconsult.bitbucket.io","tld":"bitbucket.io"},"ip":{"addr":"185.166.143.50","port":443,"asn":16509,"as":"AMAZON-02","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ee3bc26094bbc708d3a5ec0e7aab305","sha1":"1917f930505a0b4ed6522f74f1f21fcf273e9767","sha256":"bb3cec8fa0859bb446bac3789427a111265a7480710be89711ef78a1a0847628","sha512":"737d7c7ae25039861a02cc4fee130ae28a2209a959812a4248a00c37cf786bdc26ae9c44385e2adb741536d6a57406b0da99bea08b923fbe679eb20c501821d4","ssdeep":"","tlshash":"2e3161e5d0a09eb65be320f40cb20217cb7c6ce0c70ec101884b986f6bd4969722dda8","size":1698,"data":"","first_seen":"2025-08-11T08:36:04.28401Z","last_seen":"2026-02-22T13:34:51.402111Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"customerservicesconsult.bitbucket.io/","fqdn":"customerservicesconsult.bitbucket.io","domain":"customerservicesconsult.bitbucket.io","tld":"bitbucket.io"},"ip":{"addr":"185.166.143.50","port":443,"asn":16509,"as":"AMAZON-02","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"78654c27584572ede596fbb9174972e3","sha1":"9098ff2d542c88d943e9e0395bf5bcaf43d4d848","sha256":"b2b4bf511ce78e71c6df471aafef35bd57ad19ba60010e6f673ec11af6bfd31b","sha512":"9ce1f49ba6445dac71a228c963535e4db5af299786e47c9b0d58f2210c07951ea8c8b52705cf49486fb1ff8f5cef00ca006ff8535170eb6151131b75d84ceb59","ssdeep":"","tlshash":"ed4121dad0f11da15ad330f50cbf4112d72428e7c70ec6017d4f986a1fc46197129fa8","size":1944,"data":"","first_seen":"2025-08-11T08:36:04.285655Z","last_seen":"2026-02-22T13:34:51.413035Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"1608a814ea308b1a16ce7914f4148aff","sha1":"3c36eab53b84d3a0fa5cb8514e78f468ffec4485","sha256":"a4745b43298a634a63df05ff38625087ae1b5467ff8b46d58da5699f5164e1cd","sha512":"1258ad31827f40bb46af3c5754f381711b95a1f66e09aadd49af33c3fbafbfda56ca96462ad05d67434171582931f2f2564d10a1c6e2db18bad5a4282c9f2e22","ssdeep":"1536:vDNZ4gp+Ev48a4+PWDbczdOgXsxi2S/oEbgS5Qx8kq9O:xZ4gp+Ev4XWnAogcE2moMg8Q2u","tlshash":"a673d0b019e73855b717286dfaab03457f3691830943cbe53a9cb366cf805b072697ac","size":79601,"data":"","first_seen":"2025-08-11T08:36:04.289664Z","last_seen":"2026-02-22T13:34:51.428013Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"customerservicesconsult.bitbucket.io/","fqdn":"customerservicesconsult.bitbucket.io","domain":"customerservicesconsult.bitbucket.io","tld":"bitbucket.io"},"ip":{"addr":"185.166.143.50","port":443,"asn":16509,"as":"AMAZON-02","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-22T13:34:28.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bitbucket.io","organization":"Atlassian US, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Tue, 30 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:B7:2A:D0:41:06:2E:1C:55:83:99:71:5B:40:04:D4:76:67:25:FE","sha256":"36:A8:2A:3D:4F:69:95:9E:B9:89:0C:1A:B4:F1:67:9C:AA:87:20:5E:A8:FF:A4:17:FF:2C:33:E4:03:6B:44:CD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: customerservicesconsult.bitbucket.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 13:34:28 GMT\r\ncontent-type: text/html\r\nserver: AtlassianEdge\r\nlast-modified: Mon, 04 Aug 2025 10:52:14 GMT\r\netag: W/\"4fe7ccb77c536da847bc5ff62a1a2a18\"\r\nx-used-mesh: False\r\nvary: Accept-Language, origin\r\ncontent-language: en\r\nx-view-name: bitbucket.apps.hosted.views.serve\r\nx-dc-location: Micros-3\r\nx-served-by: ae0be863cc77\r\nx-version: 54fb6eab17da\r\nx-static-version: 54fb6eab17da\r\nx-request-count: 235\r\nx-render-time: 0.40468859672546387\r\nx-b3-traceid: b01cb608add548cdb6c4a552c576b1c3\r\nx-b3-spanid: e22149368106d470\r\ncache-control: max-age=900\r\nx-usage-quota-remaining: 987902.917\r\nx-usage-request-cost: 12209.60\r\nx-usage-user-time: 0.354867\r\nx-usage-system-time: 0.011421\r\nx-usage-input-ops: 0\r\nx-usage-output-ops: 0\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\natl-traceid: b01cb608add548cdb6c4a552c576b1c3\r\natl-request-id: b01cb608-add5-48cd-b6c4-a552c576b1c3\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"endpoints\": [{\"url\": \"https://dz8aopenkvv6s.cloudfront.net\"}], \"group\": \"endpoint-1\", \"include_subdomains\": true, \"max_age\": 600}\r\nnel: {\"failure_fraction\": 0.01, \"include_subdomains\": true, \"max_age\": 600, \"report_to\": \"endpoint-1\"}\r\nserver-timing: atl-edge;dur=704,atl-edge-internal;dur=2,atl-edge-upstream;dur=703,atl-edge-pop;desc=\"aws-eu-central-1\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Zipkin","description":"","website":"https://zipkin.io/","common_platform_enumeration":"","icon":"Zipkin.png","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238868,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"f35db5468fe8c3ba1fb534d7a09f2149","sha1":"7ab1852338ea16788f1e3c2982ed86f98320a936","sha256":"0f1bc1e97d81f208f7940b40b3d3f0cb808d6a57632bd89c8dbfd01ed4a332fe","sha512":"aaa680e5b6eea48b8d2ef1b274edd16f5164e05dfd27c1115e2ef89b083676119ffa30fd42096e679373494e99272f58e84b92ec435e934461860e8a44d59d48","ssdeep":"768:fvVLkd9LtQFwdNeFcg2VCKgAFV090QkOf72fON+lRlOd9RNLUm7ZocINKnnnPfIK:lvRNhrCBXFtmuVSJC3vaz5I16eyJ","tlshash":"39342578b601f84eae2358bfeda81ed19014dd5fedcc6bc54048446e6be34bb35182da","first_seen":"2025-08-11T08:36:04.277829Z","last_seen":"2026-02-22T13:34:51.380859Z","times_seen":4,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":110,"dns":18,"connect":26,"send":0,"wait":734,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"customerservicesconsult.bitbucket.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-22","alert":"Phishing Block","trigger":"customerservicesconsult.bitbucket.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"customerservicesconsult.bitbucket.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@emailjs/browser@3/dist/email.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://customerservicesconsult.bitbucket.io/","date":"2026-02-22T13:34:29.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@emailjs/browser@3/dist/email.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://customerservicesconsult.bitbucket.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.12.1\r\nx-jsd-version-type: version\r\netag: W/\"80a-PXSZ1xOJiieY9EnYs1KNQJRHUgg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 22 Feb 2026 13:34:29 GMT\r\nage: 30684\r\nx-served-by: cache-fra-etou8220105-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 967\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2058,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2058), with no line terminators","md5":"aaf4b4c066039688024b3eb28b99260d","sha1":"3d7499d713898a2798f449d8b3528d4094475208","sha256":"249f5139f01396e20b067fbe6db17315981fb1c36c64d64df224bcf0f8750eab","sha512":"9bf344ac90c909cb03955757565b9e442bdc411bdf90303c894fb571005f9c1ed211852bca4503be8b59c1f2980b2d94b6e511690db475a51ad7672fb05e22dc","ssdeep":"","tlshash":"fa41615613f4f0f663edc3ea54bd2200e107c468be92d4e1d6f80e272847c976269e22","first_seen":"2024-01-11T04:46:50Z","last_seen":"2026-06-08T03:57:58.722222Z","times_seen":763,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":32,"dns":1,"connect":13,"send":0,"wait":14,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"customerservicesconsult.bitbucket.io/images/index_Form1_bkgrnd.png","fqdn":"customerservicesconsult.bitbucket.io","domain":"customerservicesconsult.bitbucket.io","tld":"bitbucket.io"},"ip":{"addr":"185.166.143.50","port":443,"asn":16509,"as":"AMAZON-02","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://customerservicesconsult.bitbucket.io/","date":"2026-02-22T13:34:29.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bitbucket.io","organization":"Atlassian US, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Tue, 30 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:B7:2A:D0:41:06:2E:1C:55:83:99:71:5B:40:04:D4:76:67:25:FE","sha256":"36:A8:2A:3D:4F:69:95:9E:B9:89:0C:1A:B4:F1:67:9C:AA:87:20:5E:A8:FF:A4:17:FF:2C:33:E4:03:6B:44:CD"}}},"request":{"raw":"GET /images/index_Form1_bkgrnd.png HTTP/1.1\r\nHost: customerservicesconsult.bitbucket.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://customerservicesconsult.bitbucket.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 22 Feb 2026 13:34:29 GMT\r\ncontent-type: text/plain\r\ncontent-length: 14\r\nserver: AtlassianEdge\r\nlast-modified: Mon, 04 Aug 2025 10:52:14 GMT\r\netag: \"4fe7ccb77c536da847bc5ff62a1a2a18\"\r\nx-used-mesh: False\r\nvary: Accept-Language, origin\r\ncontent-language: en\r\nx-view-name: bitbucket.apps.hosted.views.serve\r\nx-dc-location: Micros-3\r\nx-served-by: ae0be863cc77\r\nx-version: 54fb6eab17da\r\nx-static-version: 54fb6eab17da\r\nx-request-count: 2161\r\nx-render-time: 0.05452227592468262\r\nx-b3-traceid: 4181b767e2a64fa886b5f6b9779f15ca\r\nx-b3-spanid: 59ab25ae8b429177\r\ncache-control: max-age=900\r\nx-usage-quota-remaining: 986806.998\r\nx-usage-request-cost: 1261.50\r\nx-usage-user-time: 0.034887\r\nx-usage-system-time: 0.002958\r\nx-usage-input-ops: 0\r\nx-usage-output-ops: 0\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\natl-traceid: 4181b767e2a64fa886b5f6b9779f15ca\r\natl-request-id: 4181b767-e2a6-4fa8-86b5-f6b9779f15ca\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"endpoints\": [{\"url\": \"https://dz8aopenkvv6s.cloudfront.net\"}], \"group\": \"endpoint-1\", \"include_subdomains\": true, \"max_age\": 600}\r\nnel: {\"failure_fraction\": 0.01, \"include_subdomains\": true, \"max_age\": 600, \"report_to\": \"endpoint-1\"}\r\nserver-timing: atl-edge;dur=162,atl-edge-internal;dur=3,atl-edge-upstream;dur=160,atl-edge-pop;desc=\"aws-eu-central-1\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Zipkin","description":"","website":"https://zipkin.io/","common_platform_enumeration":"","icon":"Zipkin.png","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"5251010ec9e364492c236bf8b9983928","sha1":"a22e9c3b6a9f5c70de4f76a464810ecba1fb97c3","sha256":"3521021a2e875fbc52ae82e2a3fea5024d507bbc919f504ca8521292c3fe14d3","sha512":"81c689b517f86f4325fbc92414ebb6c5fac71f1fe10c3f010fd30aca8f7548b8d7de046390b2e1dc1c84bad9807f6c12d0626a7c0d8f08fcd03fe467809c0e1d","ssdeep":"","tlshash":"9c60000c03030f0c0000c03c03c00030000c03000cc003300000c00c00000003cc00fc","first_seen":"2023-04-16T19:13:01Z","last_seen":"2026-06-06T19:28:35.773923Z","times_seen":596,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"customerservicesconsult.bitbucket.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-22","alert":"Phishing Block","trigger":"customerservicesconsult.bitbucket.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"customerservicesconsult.bitbucket.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"customerservicesconsult.bitbucket.io/favicon.ico","fqdn":"customerservicesconsult.bitbucket.io","domain":"customerservicesconsult.bitbucket.io","tld":"bitbucket.io"},"ip":{"addr":"185.166.143.50","port":443,"asn":16509,"as":"AMAZON-02","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://customerservicesconsult.bitbucket.io/","date":"2026-02-22T13:34:29.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bitbucket.io","organization":"Atlassian US, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Tue, 30 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:B7:2A:D0:41:06:2E:1C:55:83:99:71:5B:40:04:D4:76:67:25:FE","sha256":"36:A8:2A:3D:4F:69:95:9E:B9:89:0C:1A:B4:F1:67:9C:AA:87:20:5E:A8:FF:A4:17:FF:2C:33:E4:03:6B:44:CD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: customerservicesconsult.bitbucket.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://customerservicesconsult.bitbucket.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 22 Feb 2026 13:34:29 GMT\r\ncontent-type: text/plain\r\ncontent-length: 14\r\nserver: AtlassianEdge\r\nlast-modified: Mon, 04 Aug 2025 10:52:14 GMT\r\netag: \"4fe7ccb77c536da847bc5ff62a1a2a18\"\r\nx-used-mesh: False\r\nvary: Accept-Language, origin\r\ncontent-language: en\r\nx-view-name: bitbucket.apps.hosted.views.serve\r\nx-dc-location: Micros-3\r\nx-served-by: 6ee17e53ec99\r\nx-version: 54fb6eab17da\r\nx-static-version: 54fb6eab17da\r\nx-request-count: 770\r\nx-render-time: 0.11054158210754395\r\nx-b3-traceid: fc820547ac4942b8b96cf0bc21ce17b0\r\nx-b3-spanid: 4c809bd6fd0601eb\r\ncache-control: max-age=900\r\nx-usage-quota-remaining: 984568.859\r\nx-usage-request-cost: 2291.07\r\nx-usage-user-time: 0.063044\r\nx-usage-system-time: 0.005688\r\nx-usage-input-ops: 0\r\nx-usage-output-ops: 0\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\natl-traceid: fc820547ac4942b8b96cf0bc21ce17b0\r\natl-request-id: fc820547-ac49-42b8-b96c-f0bc21ce17b0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"endpoints\": [{\"url\": \"https://dz8aopenkvv6s.cloudfront.net\"}], \"group\": \"endpoint-1\", \"include_subdomains\": true, \"max_age\": 600}\r\nnel: {\"failure_fraction\": 0.01, \"include_subdomains\": true, \"max_age\": 600, \"report_to\": \"endpoint-1\"}\r\nserver-timing: atl-edge;dur=233,atl-edge-internal;dur=4,atl-edge-upstream;dur=230,atl-edge-pop;desc=\"aws-eu-central-1\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Zipkin","description":"","website":"https://zipkin.io/","common_platform_enumeration":"","icon":"Zipkin.png","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"5251010ec9e364492c236bf8b9983928","sha1":"a22e9c3b6a9f5c70de4f76a464810ecba1fb97c3","sha256":"3521021a2e875fbc52ae82e2a3fea5024d507bbc919f504ca8521292c3fe14d3","sha512":"81c689b517f86f4325fbc92414ebb6c5fac71f1fe10c3f010fd30aca8f7548b8d7de046390b2e1dc1c84bad9807f6c12d0626a7c0d8f08fcd03fe467809c0e1d","ssdeep":"","tlshash":"9c60000c03030f0c0000c03c03c00030000c03000cc003300000c00c00000003cc00fc","first_seen":"2023-04-16T19:13:01Z","last_seen":"2026-06-06T19:28:35.773923Z","times_seen":596,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"customerservicesconsult.bitbucket.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"customerservicesconsult.bitbucket.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-22","alert":"Phishing Block","trigger":"customerservicesconsult.bitbucket.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}