nih.gov

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since nih.gov can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=UTF-8

Cache-Control

max-age=900, public

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nih.gov *.googleapis.com *.govdelivery.com *.hatchbuck.com *.youtube.com *.here.com search.usa.gov *.jquery.com *.crazyegg.com *.addthis.com *.addthisedge.com cdn.jsdelivr.net *.google-analytics.com *.moatads.com *.newrelic.com bam.nr-data.net *.feedgrabbr.com *.recaptcha.net *.gstatic.com *.foresee.com *.4seeresults.com *.answerscloud.com *.foreseeresults.com *.googletagmanager.com *.digitalgov.gov code.ctpprojects.com platform.twitter.com connect.facebook.net assets.pinterest.com unpkg.com *.verint-cdn.com *.static.cloudflareinsights.com *.dap.digitalgov.gov dap.digitalgov.gov static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' *.nih.gov search.usa.gov *.googleapis.com *.here.com cdn.jsdelivr.net *.feedgrabbr.com *.foresee.com style.ctpprojects.com; img-src 'self' *.nih.gov *.google-analytics.com data: *.foresee.com nih.hostexp.com i.vimeocdn.com log.pinterest.com *.verint-cdn.com *.googletagmanager.com; media-src nih.hostexp.com; frame-src 'self' *.nih.gov *.youtube.com *.youtube-nocookie.com *.addthis.com *.recaptcha.net analytics.ctpprojects.com player.vimeo.com *.googletagmanager.com; frame-ancestors 'self' *.nih.gov *.youtube.com *.youtube-nocookie.com *.addthis.com *.recaptcha.net; child-src 'self' blob: *.nih.gov *.youtube.com *.youtube-nocookie.com *.addthis.com *.recaptcha.net; font-src 'self' *.nih.gov *.googleapis.com *.gstatic.com *.feedgrabbr.com *.foresee.com style.ctpprojects.com; connect-src 'self' *.nih.gov *.crazyegg.com *.google-analytics.com *.addthis.com stats.g.doubleclick.net bam.nr-data.net *.foresee.com *.4seeresults.com *.answerscloud.com *.foreseeresults.com maps.googleapis.com nih.hostexp.com vimeo.com *.googletagmanager.com dap.digitalgov.gov static.cloudflareinsights.com; report-uri /report-csp-violation

Strict-Transport-Security

max-age=31536000; includeSubDomains; preload

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

same-origin

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://nih.gov/HTTP 520

Meta tags

Title

National Institutes of Health (NIH) |

Description

Official website of the National Institutes of Health (NIH). NIH is one of the world's foremost medical research centers. An agency of the U.S. Department of Health and Human Services, the NIH is the Federal focal point for health and medical research. The NIH website offers health information for the public, scientists, researchers, medical professionals, patients, educators,

Canonical

https://www.nih.gov/

Robots

index, follow

Generator

Drupal 10 (https://www.drupal.org)

Open Graph title

Not set

Open Graph description

Official website of the National Institutes of Health (NIH). NIH is one of the world's foremost medical research centers. An agency of the U.S. Department of Health and Human Services, the NIH is the Federal focal point for health and medical research. The NIH website offers health information for the public, scientists, researchers, medical professionals, patients, educators,

Open Graph image

https://www.nih.gov/sites/default/files/styles/thumbnail_large/public/2025-01/thumbnail-generic.png

Open Graph type

Article

Twitter card

summary

Twitter title

Not set

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

34

Disallow rules (other agents)

0

No Sitemap declared in robots.txt.

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Drupalcms

  <meta name="generator"> = "Drupal 10 (https://www.drupal.org)"

• Cloudflare Web Analyticsanalytics

  Found "static.cloudflareinsights.com" in the page's HTML

• Cloudflare Bot Managementcdn

  Cookie set: __cf_bm

Related domains