HTTP/2 200 date: Sun, 19 Jul 2026 09:12:04 GMT content-type: text/html; charset=UTF-8 perf: 7402827104 server: cloudflare envoy cache-control: no-cache, no-store, max-age=0 referrer-policy: strict-origin-when-cross-origin x-frame-options: SAMEORIGIN x-transaction-id: c16b1d1a443b2073 x-xss-protection: 0 x-download-options: noopen origin-agent-cluster: ?1 x-content-type-options: nosniff x-dns-prefetch-control: off content-security-policy: default-src 'self';script-src 'self' 'nonce-16IHUp+cC3TJPFCgNYm83A==' 'unsafe-inline' 'wasm-unsafe-eval' 'report-sample' https://*.twimg.com https://abs.twimg.com https://accounts.google.com/gsi/client https://appleid.cdn-apple.com https://*.stripe.com https://cdn.plaid.com/link/v2/stable/link-initialize.js https://sdk.dv.socure.io/latest/device-risk-sdk.js https://cdn.getpinwheel.com/pinwheel-v3.2.1.js https://*.x.com;script-src-attr 'none' 'report-sample';style-src 'self' 'unsafe-inline' https://*.twimg.com https://accounts.google.com/gsi/style;style-src-elem 'self' 'unsafe-inline' https://*.twimg.com https://accounts.google.com/gsi/style;img-src 'self' https://x.com:443 https://twitter.com https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv https://abs.twimg.com data: blob: https://play-lh.googleusercontent.com https://img.youtube.com https://i.ytimg.com https://*.plaid.com https://assets.grok.com https://media.riffsy.com https://*.giphy.com https://media.tenor.com https://c.tenor.com;manifest-src 'self' https://x.com:443;font-src 'self' https://*.twimg.com data:;media-src 'self' https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv blob: data: https://*.watch.x.com;connect-src 'self' https://api.x.com https://api.twitter.com https://t.co https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv wss://*.pscp.tv https://upload.x.com https://sentry.io https://*.sentry.io wss://localhost.x.com:* https://m.castle.io wss://chat-ws.x.com https://*.x.com https://accounts.google.com/gsi/ https://csi.gstatic.com https://appleid.cdn-apple.com https://appleid.apple.com https://*.prelude.dev data: https://*.stripe.com https://*.plaid.com https://*.dv.socure.io https://checkoutshopper-live.adyen.com https://grok.com https://*.grok.com wss://grok.com wss://*.grok.com https://*.x.ai wss://*.x.ai https://media.riffsy.com https://*.giphy.com https://media.tenor.com https://c.tenor.com;frame-src 'self' https://accounts.google.com https://appleid.apple.com https://www.youtube.com https://w.soundcloud.com https://www.pscp.tv https://studio.x.com https://studio-dev.x.com https://iframe.arkoselabs.com https://*.x.com https://*.crbcos.com https://*.plaid.com https://*.stripe.com https://cdn.getpinwheel.com/ https://checkoutshopper-live.adyen.com https://artifacts.grokusercontent.com;worker-src 'self' blob: https://*.twimg.com https://abs.twimg.com;frame-ancestors 'self' https://x.com https://x.com:443 https://twitter.com https://twitter.com:443;base-uri 'self';form-action 'self' https://accounts.google.com;object-src 'none';upgrade-insecure-requests cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: same-origin x-permitted-cross-domain-policies: none x-response-time: 761 origin-cf-ray: a1d89a2f4b4241e7-EWR strict-transport-security: max-age=631138519; includeSubdomains x-served-by: t4_a vary: Accept-Encoding cf-cache-status: DYNAMIC set-cookie: guest_id_marketing=v1%3A178445232375843810; Max-Age=63072000; Expires=Tue, 18 Jul 2028 09:12:04 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A178445232375843810; Max-Age=63072000; Expires=Tue, 18 Jul 2028 09:12:04 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: personalization_id="v1_pxkjs4ylbgFO+NJV/HinVA=="; Max-Age=63072000; Expires=Tue, 18 Jul 2028 09:12:04 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: guest_id=v1%3A178445232375843810; Max-Age=63072000; Expires=Tue, 18 Jul 2028 09:12:04 GMT; Path=/; Domain=.x.com; Secure; SameSite=None set-cookie: ct0=; Max-Age=-1784452323; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.x.com; Secure; SameSite=Lax set-cookie: __cf_bm=b2oV3S71fkNFOt39kuNGmoXrfhp3rMnvVsEMIrQNP7A-1784452323.7270045-1.0.1.1-06qSfCbhe.W87P7HseMx8b0pTphWy6ADU8WzN3WgPeySrhBSHFRTs8E23hm9xyabszOqojiN7jvIc7uh38b8L0zF5XYUTyFneUEjeTEY0nC83qQJ.IIwuQkYYKfjZYlq; HttpOnly; SameSite=None; Secure; Path=/; Domain=x.com; Expires=Sun, 19 Jul 2026 09:42:04 GMT cf-ray: a1d89a2f4b4241e7-EWR