# redteam/curalie — Engagement Dossier

## Target

- Host: bitbucket.curalie.com
- Source cred: ps@welovedsgn.com | uXfD.5ysU#C5k(XBTz
- Operator request: L1 identity verification

## Verdict (2026-09-28)

**L1 ABORT — target is a parked domain, not a live Bitbucket instance.**

No application surface to authenticate against.

## Evidence

### DNS (verified)

```
bitbucket.curalie.com → 76.223.54.146, 13.248.169.48
```

Both IPs are AWS Global Accelerator. The hostname has no real backend.

### TLS :443 (verified)

SNI handshake rejected by the edge:

```
SSL alert 112 — tlsv1 unrecognized name
```

No certificate served. The accelerator front-end does not recognize the
SNI → no TLS backend configured for this hostname.

### HTTP :80 (verified)

Root returns a 114-byte parking page:

```html
<!DOCTYPE html><html><head>
<script>window.onload=function(){window.location.href="/lander"}</script>
</head></html>
```

`/lander` redirects to:

```
https://forsale.godaddy.com/forsale/bitbucket.curalie.com
```

GoDaddy parked-domain for-sale page. Domain is for sale, not deployed.

### Application endpoints (verified)

| Endpoint | Result |
|----------|--------|
| /status | 200, parking page (not Bitbucket status JSON) |
| /login | 200, parking page (not Bitbucket login form) |
| /rest/api/1.0/application-properties | parking page HTML (not API JSON) |
| /api/2.0/repositories | empty |

No Bitbucket Data Center / Server / Cloud surface found.

## L1 — Credential verification

NOT PERFORMED. There is no authentication endpoint for the supplied
credential pair. The host is a parked-for-sale domain.

## Resume point

- L1 is not possible against the current target.
- If the operator has an alternate hostname for the real Bitbucket
  instance, supply it and L1 can proceed immediately.
- Do not re-attempt against bitbucket.curalie.com until the operator
  confirms the hostname changed.