x.com

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since x.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare envoy

Content-Type

text/html; charset=UTF-8

Cache-Control

no-cache, no-store, max-age=0

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self';script-src 'self' 'nonce-6XWKqXrkINGUFwJo7jSzoQ==' 'unsafe-inline' 'wasm-unsafe-eval' 'report-sample' https://*.twimg.com https://abs.twimg.com https://accounts.google.com/gsi/client https://appleid.cdn-apple.com https://*.stripe.com https://cdn.plaid.com/link/v2/stable/link-initialize.js https://sdk.dv.socure.io/latest/device-risk-sdk.js https://cdn.getpinwheel.com/pinwheel-v3.2.1.js https://maps.googleapis.com/ https://maps.gstatic.com/ https://*.x.com https://js.braintreegateway.com https://assets.braintreegateway.com https://www.paypalobjects.com https://*.paypal.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://recaptcha.net/recaptcha/ https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/;script-src-attr 'none' 'report-sample';style-src 'self' 'unsafe-inline' https://*.twimg.com https://accounts.google.com/gsi/style;style-src-elem 'self' 'unsafe-inline' https://*.twimg.com https://accounts.google.com/gsi/style;img-src 'self' https://x.com:443 https://twitter.com https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv https://abs.twimg.com data: blob: https://play-lh.googleusercontent.com https://img.youtube.com https://i.ytimg.com https://ton.twitter.com/twitter-assets/ https://ton.twitter.com/onboarding/ https://cm.g.doubleclick.net https://analytics.twitter.com https://*.plaid.com https://*.x.com/core/embed/ https://assets.braintreegateway.com https://checkout.paypal.com https://www.paypalobjects.com https://assets.grok.com https://computer-hub.grok.com https://*.grokusercontent.com https://*.gstatic.com https://serpapi.com https://*.grok.me https://media.riffsy.com https://*.giphy.com https://media.tenor.com https://c.tenor.com https://cdn.7tv.app https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://messenger-apps.eu.intercom.io https://messenger-apps.au.intercom.io https://*.intercom-attachments-1.com https://*.intercom-attachments.eu https://*.au.intercom-attachments.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://static.intercomassets.eu https://static.au.intercomassets.com https://*.cdn.x.com https://ton.x.com https://grok.com https://*.grok.com https://analytics.x.com https://ads-api.x.com;manifest-src 'self' https://x.com:443;font-src 'self' https://*.twimg.com data: https://js.intercomcdn.com https://fonts.intercomcdn.com;media-src 'self' https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv blob: data: https://*.watch.x.com https://js.intercomcdn.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://x.com;connect-src 'self' https://api.x.com https://api.twitter.com https://t.co https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv wss://*.pscp.tv https://upload.x.com https://sentry.io https://*.sentry.io wss://localhost.x.com:* https://m.castle.io wss://chat-ws.x.com https://*.x.com https://accounts.google.com/gsi/ https://csi.gstatic.com https://appleid.cdn-apple.com https://appleid.apple.com https://places.googleapis.com https://*.prelude.dev data: https://analytics.twitter.com https://*.stripe.com https://*.plaid.com https://*.dv.socure.io https://checkoutshopper-live.adyen.com https://maps.googleapis.com https://maps.gstatic.com https://x-money-dev-sensitive-documents.s3.us-west-2.amazonaws.com https://x-money-dev-safe-sensitive-documents.s3.us-west-2.amazonaws.com https://x-money-staging-sensitive-documents.s3.us-west-2.amazonaws.com https://x-money-staging-safe-sensitive-documents.s3.us-west-2.amazonaws.com https://x-money-prod-sensitive-documents.s3.us-west-2.amazonaws.com https://x-money-prod-safe-sensitive-documents.s3.us-west-2.amazonaws.com https://api.braintreegateway.com https://api.sandbox.braintreegateway.com https://client-analytics.braintreegateway.com https://*.braintree-api.com https://www.paypal.com https://www.sandbox.paypal.com https://www.paypalobjects.com https://grok.com https://*.grok.com wss://grok.com wss://*.grok.com wss://*.cursorvm.com https://*.x.ai wss://*.x.ai https://storage.googleapis.com https://media.riffsy.com https://*.giphy.com https://media.tenor.com https://c.tenor.com https://7tv.io wss://events.7tv.io https://cognito-identity.us-east-1.amazonaws.com https://streaming-rekognition.us-east-1.amazonaws.com wss://streaming-rekognition.us-east-1.amazonaws.com https://cdn.liveness.rekognition.amazonaws.com https://via.intercom.io https://api.intercom.io https://api.au.intercom.io https://api.eu.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.intercomcdn.eu https://uploads.au.intercomcdn.com https://uploads.eu.intercomcdn.com https://uploads.intercomusercontent.com https://x.com https://*.cloudfront.net https://*.watch.x.com https://recaptcha.net/recaptcha/ https://www.recaptcha.net/recaptcha/;frame-src 'self' https://accounts.google.com https://appleid.apple.com https://platform.twitter.com https://platform.x.com https://x.com https://studio.x.com https://studio-dev.x.com https://iframe.arkoselabs.com https://*.x.com https://*.crbcos.com https://*.plaid.com https://*.stripe.com https://cdn.getpinwheel.com/ https://checkoutshopper-live.adyen.com https://assets.braintreegateway.com https://*.paypal.com https://artifacts.grokusercontent.com https://intercom-sheets.com https://www.intercom-reporting.com https://player.vimeo.com https://fast.wistia.net https://recaptcha.net/recaptcha/ https://www.recaptcha.net/recaptcha/ https://recaptcha.google.com/recaptcha/;worker-src 'self' blob: https://*.twimg.com https://abs.twimg.com;frame-ancestors 'self' https://x.com https://x.com:443 https://twitter.com https://twitter.com:443;base-uri 'self';form-action 'self' https://accounts.google.com https://*.paypal.com https://intercom.help https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io;object-src 'none';upgrade-insecure-requests

Strict-Transport-Security

max-age=631138519; includeSubdomains

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://x.com/HTTP 301

   → https://x.com/

2. 2.https://x.com/HTTP 200

Meta tags

Title

X. It’s what’s happening / X

Description

From breaking news and entertainment to sports and politics, get the full story with all the live commentary.

Canonical

https://x.com/

Robots

index, follow

Generator

Not set

Open Graph title

X. It’s what’s happening

Open Graph description

From breaking news and entertainment to sports and politics, get the full story with all the live commentary.

Open Graph image

https://abs.twimg.com/responsive-web/client-web/icon-ios.77d25eba.png

Open Graph type

website

Twitter card

summary_large_image

Twitter title

X. It’s what’s happening

Twitter image

https://abs.twimg.com/responsive-web/client-web/icon-ios.77d25eba.png

robots.txt

Disallow rules (User-agent: *)

2

Disallow rules (other agents)

43

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare envoy

• Cloudflare Bot Managementcdn

  Cookie set: __cf_bm

Related domains