HTTP/2 301
server: nginx
date: Fri, 16 Jan 2026 12:55:16 GMT
content-type: text/html; charset=utf-8
content-length: 322
location: https://www.neh.gov
content-language: en
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
expires: Sun, 19 Nov 1978 05:00:00 GMT
cache-control: max-age=31536000, public
vary: Cookie
x-generator: Drupal 10 (https://www.drupal.org)
content-security-policy: default-src 'self' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com fonts.gstatic.com api.kudoway.com stats.g.doubleclick.net cdn-broadcast002-iad.tokbox.com prd.jwpltx.com blob: cdn-broadcast002-pdx.tokbox.com *.tokbox.com www.odwebp.svc.ms public.tableau.com recapd.com *.googleapis.com *.google-analytics.com; connect-src 'self' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com fonts.gstatic.com api.kudoway.com stats.g.doubleclick.net cdn-broadcast002-iad.tokbox.com prd.jwpltx.com blob: cdn-broadcast002-pdx.tokbox.com *.tokbox.com www.odwebp.svc.ms public.tableau.com recapd.com *.googleapis.com *.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' fast.fonts.net fonts.gstatic.com; img-src 'self' i.ytimg.com www.gstatic.com www.google-analytics.com translate.googleapis.com data: fonts.gstatic.com www.google.com translate.google.com https://www.google-analytics.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com stats.g.doubleclick.net ssl.p.jwpcdn.com content.jwplatform.com developer.jwplayer.com www.gstatic.com *.googleapis.com blob: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://dap.digitalgov.gov https://polyfill-fastly.io https://www.google.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com ssl.p.jwpcdn.com content.jwplatform.com translate.google.com *.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://dap.digitalgov.gov https://polyfill-fastly.io https://www.google.com; style-src 'self' 'unsafe-inline' www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com fast.fonts.net kudo-widget.s3.amazonaws.com www.gstatic.com *.googleapis.com fonts.googleapis.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self'
x-xss-protection: 1
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-drupal-cache: HIT
last-modified: Fri, 19 Dec 2025 20:24:18 GMT
etag: "1766175858"
x-request-id: v-c115d070-dd18-11f0-bbde-8b6a224d9dd4
x-ah-environment: prod
age: 2392232
via: varnish
x-cache: HIT
x-cache-hits: 4043
HTTP/2 200
server: nginx
date: Fri, 16 Jan 2026 12:55:17 GMT
content-type: text/html; charset=UTF-8
content-length: 11582
cache-control: max-age=31536000, public
x-drupal-dynamic-cache: MISS
content-language: en
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
expires: Sun, 19 Nov 1978 05:00:00 GMT
vary: Cookie,Accept-Encoding
x-generator: Drupal 10 (https://www.drupal.org)
content-security-policy: default-src 'self' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com fonts.gstatic.com api.kudoway.com stats.g.doubleclick.net cdn-broadcast002-iad.tokbox.com prd.jwpltx.com blob: cdn-broadcast002-pdx.tokbox.com *.tokbox.com www.odwebp.svc.ms public.tableau.com recapd.com *.googleapis.com *.google-analytics.com; connect-src 'self' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com fonts.gstatic.com api.kudoway.com stats.g.doubleclick.net cdn-broadcast002-iad.tokbox.com prd.jwpltx.com blob: cdn-broadcast002-pdx.tokbox.com *.tokbox.com www.odwebp.svc.ms public.tableau.com recapd.com *.googleapis.com *.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' fast.fonts.net fonts.gstatic.com; img-src 'self' i.ytimg.com www.gstatic.com www.google-analytics.com translate.googleapis.com data: fonts.gstatic.com www.google.com translate.google.com https://www.google-analytics.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com stats.g.doubleclick.net ssl.p.jwpcdn.com content.jwplatform.com developer.jwplayer.com www.gstatic.com *.googleapis.com blob: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://dap.digitalgov.gov https://polyfill-fastly.io https://www.google.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com ssl.p.jwpcdn.com content.jwplatform.com translate.google.com *.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://dap.digitalgov.gov https://polyfill-fastly.io https://www.google.com; style-src 'self' 'unsafe-inline' www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com fast.fonts.net kudo-widget.s3.amazonaws.com www.gstatic.com *.googleapis.com fonts.googleapis.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self'
x-xss-protection: 1
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-drupal-cache: MISS
last-modified: Thu, 15 Jan 2026 14:57:40 GMT
etag: "1768489060-gzip"
content-encoding: gzip
x-request-id: v-89ba84ee-f222-11f0-aca3-7793b5c2b2cc
x-ah-environment: prod
age: 79056
via: varnish
x-cache: HIT
x-cache-hits: 23351
accept-ranges: bytes
National Endowment for the Humanities