MEDIUM SEVERITYHOSTINGCVSS 7.5Immediate (<90s)ID: bitbucket
Bitbucket Cloud Dangling DNS & Takeover Fingerprint
CNAME points to Bitbucket Cloud Pages where the workspace or repository has been renamed or deleted.
DNS CNAME Delegation Rules
bitbucket.io
CNAME points to bitbucket.io. Returns 404 'Repository not found'.
404 Not Found
Authoritative Response Token
“Repository not found”
curl -sI http://subdomain.example.com | grep 'Repository not found'When SubdomainWatch scanner identifies this response on an unresolved CNAME target, an automated alert is triggered within 800ms.
Remediation Guide & Defensive Action Plan
Immediate Action Required: Remove the CNAME pointing to bitbucket.io.
Defensive Verification Checklist:
- Audit authoritative DNS zone records for any CNAME pointing to
bitbucket.io. - Verify whether the target resource or bucket still exists under your organization's cloud tenant.
- If decommissioned, delete the DNS record immediately to close the public exposure window.
- Deploy a pre-merge IaC security gate (such as SubdomainWatch Takeover Guard) to intercept dangling records before pull requests merge.
Terraform Remediation Example
# Remove Bitbucket Pages CNAME
ATTACK SURFACE DETECTION COMPARISON
Why Static DNS Scanners Miss Bitbucket Cloud Takeovers
Passive DNS repositories like SecurityTrails and heavy scanners like Detectify record domain records retrospectively or trigger alert fatigue. SubdomainWatch conducts active recursive CNAME testing with zero false positives.
Bitbucket Cloud Takeover FAQs
Always delete the CNAME record in your DNS provider before deleting or renaming the Bitbucket repository.
FREE UNRESTRICTED SCANNER
Scan Your Domain for Bitbucket Cloud Orphans
Test any hostname live. Our diagnostic engine traverses CNAME hops and verifies authoritative provider tokens in seconds without requiring an account.
Related Cloud Provider Signatures (7)
View All 26 Signatures →HOSTINGCRITICAL
GitHub Pages
*.github.io
HOSTINGHIGH
Vercel
*.vercel-dns.com / cname.vercel-dns.com
HOSTINGCRITICAL
Heroku App
*.herokudns.com / *.herokuapp.com
HOSTINGHIGH
Firebase Hosting
*.web.app / *.firebaseapp.com
CLOUDCRITICAL
AWS S3
*.s3.amazonaws.com / *.s3-website-*.amazonaws.com
CLOUDCRITICAL
AWS CloudFront
*.cloudfront.net
CLOUDCRITICAL
Microsoft Azure App Service
*.azurewebsites.net / *.cloudapp.net / *.trafficmanager.net