bitbucket.org
Classification: Whitelisted
bitbucket.org is a whitelisted (trusted) hostname. Reported by 14 threat sources, last seen 2026-06-16.
Current activity
- Online — resolving/reachable. Last checked 2026-07-30 20:49:11.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: AGENT TESLA (S0331) TRICKBOT (S0266) EMOTET (S0367) REMCOS (S0332) REDLINE STEALER (S1240)
Blacklist sightings showing the 100 most recent of 109
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malware Download | URLhaus Abuse.ch | 2022-03-02 09:15:09 | 2026-06-16 07:27:11 | malicious-activity | |
| Malicious URL | Triage | 2026-02-10 20:42:32 | 2026-03-15 12:24:45 | malicious-activity | |
| Top Popularity Site | Tranco | 2026-03-01 14:53:28 | 2026-03-01 14:53:28 | ||
| Top Popularity Site | Cisco Umbrella | 2022-07-18 21:01:15 | 2025-08-25 17:00:47 | benign | |
| Unknown malware | ThreatFox Abuse.ch | 2025-06-05 09:56:29 | 2025-06-05 10:17:11 | malicious-activity | |
| Rhadamanthys | ThreatFox Abuse.ch | 2024-12-04 12:17:04 | 2024-12-04 12:17:04 | malicious-activity | |
| RedLine Stealer | ThreatFox Abuse.ch | 2024-11-01 15:17:08 | 2024-11-01 15:17:08 | malicious-activity | S1240 RedLine Stealer |
| ClearFake | ThreatFox Abuse.ch | 2024-08-28 05:17:08 | 2024-09-12 19:17:03 | malicious-activity | |
| Remcos | ThreatFox Abuse.ch | 2024-01-30 19:17:03 | 2024-01-30 19:17:03 | malicious-activity | S0332 Remcos |
| Malicious URL | Hybrid-Analysis | 2023-08-16 07:45:06 | 2023-08-16 07:45:06 | ||
| URLhaus Abuse.ch | 2023-06-12 07:18:08 | 2023-06-12 07:18:08 | malicious-activity | ||
| 2023-06-08 06:11:20 | URLhaus Abuse.ch | 2023-06-08 07:18:14 | 2023-06-08 07:18:14 | malicious-activity | |
| 2023-05-31 08:43:11 | URLhaus Abuse.ch | 2023-05-31 09:20:07 | 2023-05-31 09:20:07 | malicious-activity | |
| 2023-05-27 07:59:08 | URLhaus Abuse.ch | 2023-05-27 08:19:20 | 2023-05-27 08:19:20 | malicious-activity | |
| 2023-05-25 06:22:11 | URLhaus Abuse.ch | 2023-05-25 07:21:53 | 2023-05-25 07:21:53 | malicious-activity | |
| Malicious url | 2022-08-05 04:42:59 | 2022-10-02 05:10:56 | malicious-activity | ||
| Safe Site | Cisco Umbrella | 2022-07-14 23:38:27 | 2022-07-16 01:30:07 | benign | |
| Alexa Top 1 Million | Alexa | 2020-04-20 21:26:52 | 2022-07-14 00:07:12 | benign | |
| Agent Tesla | ThreatFox Abuse.ch | 2022-06-21 11:18:23 | 2022-06-21 11:18:23 | malicious-activity | S0331 Agent Tesla |
| Malware | Hybrid-Analysis | 2021-07-07 06:00:11 | 2022-01-12 13:00:27 | ||
| MSIL.Downloader | Hybrid-Analysis | 2022-01-08 18:45:09 | 2022-01-08 18:45:09 | ||
| Trojan.Generic | Hybrid-Analysis | 2018-05-29 09:15:46 | 2022-01-02 17:00:06 | ||
| Trojan.Autoruns.GenericKDS | Hybrid-Analysis | 2022-01-02 03:00:55 | 2022-01-02 03:00:55 | ||
| MSIL.Trojan.BSE | Hybrid-Analysis | 2021-12-15 00:30:22 | 2021-12-18 11:30:04 | ||
| Evo | Hybrid-Analysis | 2021-11-19 16:45:27 | 2021-12-17 15:15:51 | ||
| Malicious site | Hybrid-Analysis | 2018-09-07 16:00:37 | 2021-12-14 14:15:07 | ||
| Gen:Variant.Fragtor | Hybrid-Analysis | 2021-09-23 12:15:20 | 2021-12-12 11:15:12 | ||
| Malware.Generic | Hybrid-Analysis | 2021-07-01 08:00:40 | 2021-12-11 09:00:19 | ||
| Gen:Variant.Jaik | Hybrid-Analysis | 2021-12-06 18:45:24 | 2021-12-06 18:45:24 | ||
| BScope.TrojanPSW.MSIL | Hybrid-Analysis | 2021-12-05 22:00:15 | 2021-12-05 22:00:15 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2018-07-15 12:00:12 | 2021-12-03 01:30:42 | ||
| Packed.Asprotect | Hybrid-Analysis | 2021-12-02 17:32:09 | 2021-12-02 17:32:09 | ||
| Gen:NN.ZemsilF.34062 | Hybrid-Analysis | 2021-11-29 19:00:40 | 2021-11-29 19:00:40 | ||
| Malware site | Hybrid-Analysis | 2019-11-15 20:30:10 | 2021-11-26 00:15:10 | ||
| Trojan | Mr.Looquer | 2021-03-21 15:33:23 | 2021-11-03 02:13:17 | ||
| Agent.pwc | Hybrid-Analysis | 2021-10-27 19:45:10 | 2021-10-27 19:45:10 | ||
| Themida.J.gen | Hybrid-Analysis | 2021-10-16 15:00:13 | 2021-10-16 15:00:13 | ||
| Gen:Variant.Zusy | Hybrid-Analysis | 2021-08-07 23:17:13 | 2021-10-10 23:45:18 | ||
| Gen:NN.ZemsilF.34170.io0@aC | Hybrid-Analysis | 2021-10-06 18:15:52 | 2021-10-06 18:15:52 | ||
| Gen:Variant.Cerbu | Hybrid-Analysis | 2021-10-02 18:30:43 | 2021-10-02 18:30:43 | ||
| FileRepMalware | Hybrid-Analysis | 2018-10-24 00:45:14 | 2021-09-28 22:45:35 | ||
| Gen:Variant.Bulz | Hybrid-Analysis | 2021-08-11 21:00:30 | 2021-09-24 05:15:13 | ||
| PE.Heur | Hybrid-Analysis | 2021-09-23 12:45:27 | 2021-09-23 12:45:27 | ||
| Gen:Variant.FakeAlert | Hybrid-Analysis | 2021-09-14 23:45:11 | 2021-09-15 00:00:34 | ||
| HEUR:Trojan.MSIL.Tasker | Hybrid-Analysis | 2021-07-28 12:00:24 | 2021-09-12 09:00:13 | ||
| Trojan.Heur | Hybrid-Analysis | 2021-09-12 02:30:12 | 2021-09-12 02:30:12 | ||
| Trojan.MSIL.Tasker.4 | Hybrid-Analysis | 2021-09-08 15:01:01 | 2021-09-08 15:01:01 | ||
| HEUR:Trojan.MSIL.Miner | Hybrid-Analysis | 2021-08-01 15:17:21 | 2021-09-01 22:15:55 | ||
| Cryptos.42267a93 | Hybrid-Analysis | 2021-08-16 00:00:13 | 2021-08-16 00:00:13 | ||
| HEUR:Trojan.MSIL.Witch | Hybrid-Analysis | 2021-08-15 14:45:09 | 2021-08-15 14:45:09 | ||
| Trojan.PowerShell | Hybrid-Analysis | 2021-08-13 15:15:55 | 2021-08-13 15:15:55 | ||
| Unsafe.AI_Score_99% | Hybrid-Analysis | 2019-11-11 04:45:11 | 2021-08-12 23:45:19 | ||
| Msil.Trojan.Cryptos | Hybrid-Analysis | 2021-08-09 01:15:30 | 2021-08-09 01:15:30 | ||
| HEUR:Trojan.MSIL.Cryptos | Hybrid-Analysis | 2021-08-07 13:15:35 | 2021-08-07 13:15:35 | ||
| Trojan.MSIL | Hybrid-Analysis | 2021-07-30 12:15:34 | 2021-08-03 19:45:26 | ||
| Gen:Trojan.Heur.GM | Hybrid-Analysis | 2021-07-03 16:00:22 | 2021-07-03 16:00:22 | ||
| Anomalous.100% | Hybrid-Analysis | 2021-06-17 12:00:06 | 2021-06-17 12:00:06 | ||
| Malware Download | Abuse.ch | 2018-12-16 06:27:05 | 2021-04-23 16:16:48 | malicious-activity | |
| Malware distribution site | VxVault | 2021-03-18 19:54:42 | 2021-04-21 17:46:53 | malicious-activity | |
| Unwanted Software | Abuse.ch | 2021-03-22 08:15:48 | 2021-04-08 07:15:16 | malicious-activity | |
| Unwanted Software | VxVault | 2021-03-26 12:28:30 | 2021-04-08 01:14:22 | malicious-activity | |
| Generic.Malware | Hybrid-Analysis | 2018-04-20 16:00:45 | 2021-03-31 04:15:34 | ||
| Adload.AD81 | Hybrid-Analysis | 2021-02-15 01:17:37 | 2021-02-15 01:17:37 | ||
| Worm.Win64.AutoRun | Hybrid-Analysis | 2020-12-30 03:00:27 | 2020-12-30 03:00:27 | ||
| AIT.Heur.Cottonmouth.8.78F19BD7 | Hybrid-Analysis | 2020-12-07 16:30:58 | 2020-12-07 16:30:58 | ||
| Gen:Variant.Mikey | Hybrid-Analysis | 2020-11-13 01:45:09 | 2020-11-13 01:45:09 | ||
| Trojan.Agent | Hybrid-Analysis | 2020-01-28 12:16:10 | 2020-11-10 01:45:05 | ||
| Pua.Gen | Hybrid-Analysis | 2020-10-23 08:00:20 | 2020-10-23 08:00:20 | ||
| Trojan.Downloader.Generic | Hybrid-Analysis | 2020-08-19 14:15:37 | 2020-08-19 14:15:37 | ||
| W32.AIDetectVM | Hybrid-Analysis | 2020-07-16 10:00:07 | 2020-07-16 10:00:07 | ||
| Covid19 scam | CCN-CERT | 2020-04-12 22:01:59 | 2020-04-16 11:17:54 | malicious-activity | |
| Suspected of Trojan.Downloader.gen | Hybrid-Analysis | 2020-04-14 13:45:23 | 2020-04-14 13:45:23 | ||
| Legit domain | Maltiverse Research Team | 2020-04-13 00:25:09 | 2020-04-13 00:25:09 | ||
| suspicious.low.ml | Hybrid-Analysis | 2020-04-01 15:45:24 | 2020-04-01 15:45:24 | ||
| Elf | Mr.Looquer | 2019-08-27 02:47:12 | 2020-03-05 08:59:22 | ||
| DangerousObject.Multi | Hybrid-Analysis | 2018-07-31 10:45:28 | 2020-02-16 22:45:06 | ||
| CVE-2015-1650 | Hybrid-Analysis | 2020-02-16 00:30:06 | 2020-02-16 00:30:06 | ||
| malicious.high.ml | Hybrid-Analysis | 2020-02-09 13:30:05 | 2020-02-09 13:30:05 | ||
| Heur.BZC.YAX.Pantera.10 | Hybrid-Analysis | 2020-01-31 14:30:08 | 2020-01-31 14:30:08 | ||
| Dropper.Trojan.Agent | Hybrid-Analysis | 2020-01-31 11:45:23 | 2020-01-31 11:45:23 | ||
| Trojan.Win64 | Hybrid-Analysis | 2020-01-28 12:16:56 | 2020-01-28 12:16:56 | ||
| Gen:Variant.Ulise | Hybrid-Analysis | 2020-01-14 09:45:20 | 2020-01-28 12:16:48 | ||
| Ransom.Win64.PORNOASSET.SM1 | Hybrid-Analysis | 2020-01-28 12:16:13 | 2020-01-28 12:16:45 | ||
| Trojan.PornoAsset | Hybrid-Analysis | 2020-01-28 12:16:04 | 2020-01-28 12:16:04 | ||
| Emotet | Mr.Looquer | 2019-12-23 02:16:55 | 2019-12-29 08:24:21 | S0367 Emotet | |
| Trickbot | Mr.Looquer | 2019-10-17 02:00:49 | 2019-12-26 08:23:19 | S0266 TrickBot | |
| PSW.Stealer | Hybrid-Analysis | 2019-12-16 09:00:08 | 2019-12-16 09:00:08 | ||
| AGEN.1043164 | Hybrid-Analysis | 2019-11-20 21:45:21 | 2019-11-20 21:45:21 | ||
| Packed.Themida | Hybrid-Analysis | 2019-11-12 12:45:23 | 2019-11-19 23:17:05 | ||
| Packed.Themida.Gen | Hybrid-Analysis | 2019-11-16 12:00:09 | 2019-11-16 12:00:09 | ||
| Gen:Variant.Ser.Strictor | Hybrid-Analysis | 2019-11-13 21:45:16 | 2019-11-14 19:45:12 | ||
| Artemis | Hybrid-Analysis | 2018-06-28 19:45:33 | 2019-11-12 20:30:12 | ||
| AGEN.1038489 | Hybrid-Analysis | 2019-11-11 16:00:27 | 2019-11-11 16:00:27 | ||
| AIT.Cottonmouth.3 | Hybrid-Analysis | 2019-10-31 19:30:14 | 2019-10-31 19:30:14 | ||
| HEUR:Trojan.OLE2.Alien | Hybrid-Analysis | 2019-09-19 13:15:26 | 2019-09-19 13:15:26 | ||
| Autoit.bimwt | Hybrid-Analysis | 2019-08-02 14:45:15 | 2019-08-02 14:45:15 | ||
| AgentTesla | Mr.Looquer | 2019-07-14 03:14:05 | 2019-08-01 08:30:57 | S0331 Agent Tesla | |
| ml.Generic | Hybrid-Analysis | 2019-07-16 20:45:31 | 2019-07-16 20:45:31 | ||
| Kryptik.GUCB | Hybrid-Analysis | 2019-07-05 06:15:11 | 2019-07-07 14:30:04 | ||
| CVE-2017-11882 | Hybrid-Analysis | 2018-11-11 00:15:06 | 2018-11-11 00:15:06 |
Tags
exe dropped-by-privateloader agenttesla dropped-by-smokeloader none 123 4545 password-protected additional_payloads dropped-by-amadey 1375 2022 malware_download twitter https://twitter.com/0xtoxin/status/1575734812731547648 https://twitter.com/inquest/status/1554943248011075584 agentesla negasteal malware misc banker ramnit azorult coinminer #ursnif predator stealer binary hta arkeistealer mshta.exe masad covid19 coronavirus scam phishing elf bigip dridex bitrat buerloader amadey curriculo asyncrat encoded miner avemariarat avaddon redlinestealer darkcomet diamondfox hack123 1234 nigalulli aggah kjv2pk vialumma remcosrat remvio socmer htlfeb24 benzema viaclearfake trojan.dangeroussig ascii lummastealer jpg-base64-loader clearfake lumma rat clickfix rar cmd xworm txt base64 bitbucket babadeda rev_base64_loader arechclient2 recordstealer formbook connectwise pw-gt79df3 archive 185-196-11-18 rhadamanthys guloader ps1 reversedbase64 booking comina998-ddns-ip-net 147-45-44-200 win32.pua.connectwise stego ottercookie discovery defense_evasion persistence privilege_escalation e73f7ff7572070d56a631ac6796adabd limidos.com remcos dcratIP addresses resolved by this hostname
- 104.192.141.1 (2023-01-02 22:34:53)
- 104.192.143.1 (2018-09-02 04:00:09)
- 104.192.143.2 (2018-08-30 04:00:46)
- 104.192.143.3 (2018-08-22 03:01:03)
- 131.103.20.167 (2013-10-19 00:00:00)
- 131.103.20.168 (2013-10-18 00:00:00)
- 178.33.126.200 (2015-02-28 00:00:00)
- 18.205.93.0 (2020-02-08 02:56:17)
- 18.205.93.1 (2020-01-05 20:05:47)
- 18.205.93.2 (2020-04-09 19:21:47)
- 18.234.32.155 (2019-07-03 06:36:36)
- 18.234.32.156 (2019-09-10 09:18:30)
- 192.185.4.133 (2015-03-05 00:00:00)
- 207.223.240.181 (2013-07-07 00:00:00)
- 207.223.240.182 (2013-07-07 00:00:00)
- 72.47.248.46 (2015-03-09 00:00:00)
- 104.192.142.26 (2026-07-30 20:49:11)
- 2401:1d80:321c::bbc:1:df7c (2026-07-30 20:49:11)
- 2401:1d80:321c:2:0:bbc:1:df7c (2026-07-30 20:49:11)
- 104.192.142.25 (2026-07-30 20:49:11)
- 2401:1d80:321c:1:0:bbc:1:df7c (2026-07-30 20:49:11)
- 104.192.142.24 (2026-07-30 20:49:11)
Whois information
- AS name
- AS14618 Atlassian Network Services, Inc.
- Domain
- bitbucket.org
- TLD
- org
- DNSSEC
- ['unsigned']
- Nameservers
- ns-1305.awsdns-35.org, ns-1746.awsdns-26.co.uk, ns-445.awsdns-55.com, ns-584.awsdns-09.net, NS-1305.AWSDNS-35.ORG, NS-584.AWSDNS-09.NET, NS-1746.AWSDNS-26.CO.UK, NS-445.AWSDNS-55.COM
- Whois server
- whois.enom.com
- Registrant
- MarkMonitor, Inc.
- Address
- REDACTED
- City
- REDACTED
- State
- NSW
- Country
- AU — Australia 🇦🇺
- Contact email
- [email protected], [email protected], [email protected], [email protected], [email protected]
- Domain created
- 1997-11-24 05:00:00
- Domain expires
- 2026-11-23 05:00:00
- First indexed
- 2018-02-05 04:38:59
- Last updated
- 2026-07-30 20:49:12