HTTP/2 200 vary: Accept-Encoding set-cookie: csrftoken=zsZAb5XS5LF8G6wf_Oz4ue; expires=Mon, 23-Aug-2027 06:18:58 GMT; Max-Age=34560000; path=/; domain=.threads.com; secure accept-ch-lifetime: 4838400 accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.threads.com/ajax/barcelona_error_reports/?device_level=unknown&brsid=7664119766937919987&comet_app_key=122&cpp=C3&cv=1043435019&st=1784441938147", permissions_policy="https://www.threads.com/ajax/barcelona_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.threads.com\/ajax\/barcelona_error_reports\/?device_level=unknown&brsid=7664119766937919987&comet_app_key=122&cpp=C3&cv=1043435019&st=1784441938147"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.threads.com\/ajax\/barcelona_error_reports\/"}],"group":"permissions_policy"} x-frame-options: DENY content-security-policy: default-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-lCcGQbsE' blob: 'self' static.cdninstagram.com 'unsafe-eval';style-src data: blob: 'unsafe-inline' *.fbcdn.net *.threads.com *.threads.net *.facebook.com *.instagram.com static.cdninstagram.com;connect-src *.threads.com *.threads.net wss://*.threads.com:* wss://*.threads.net:* *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* ws://localhost:* blob: *.instagram.com *.cdninstagram.com wss://*.instagram.com:* 'self';font-src data: static.cdninstagram.com;img-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net *.cdninstagram.com data: blob: about.fb.com engineering.fb.com *.fbsbx.com android-webview-video-poster: pps.whatsapp.net *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://www.gstatic.com;media-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net *.cdninstagram.com data: blob: *.fbsbx.com android-webview-video-poster: *.tenor.co *.tenor.com https://*.giphy.com https://www.gstatic.com;child-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net data: blob:;frame-src *.fbsbx.com *.facebook.net 'self';manifest-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net data: blob:;object-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net data: blob:;worker-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0; document-policy: force-load-at-top document-policy: include-js-call-stacks-in-crash-reports permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(self), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: same-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups pragma: no-cache cache-control: private, no-cache, no-store, must-revalidate expires: Sat, 01 Jan 2000 00:00:00 GMT x-content-type-options: nosniff x-xss-protection: 0 origin-agent-cluster: ?1 strict-transport-security: max-age=31536000; preload; includeSubDomains x-stack: www content-type: text/html; charset="utf-8" x-fb-debug: vVmgOPV1Z0XkMOnNcLMASHTSlPzWdxyV48S9NVICAjsSBpjraK5DSMU6jNKu+I6gD1ufrux8Vy6PqM4E0b5r9A== date: Sun, 19 Jul 2026 06:18:58 GMT alt-svc: h3=":443"; ma=86400 x-fb-connection-quality: EXCELLENT; q=0.9, rtt=9, rtx=0, c=16, mss=1380, tbw=4123, tp=-1, tpl=-1, uplat=66, ullat=0