HTTP/2 301 server: nginx date: Sat, 18 Jul 2026 23:04:53 GMT content-type: text/html; charset=UTF-8 location: https://wikimediafoundation.org/what-we-do/wikimedia-projects/ host-header: a9130478a60e5f9135f765b23f26593b content-security-policy: default-src 'self'; connect-src 'self' https://api.mapbox.com https://events.mapbox.com https://www.tiktok.com https://*.givechariot.com https://*.wikipedia.org https://*.wikimedia.org; font-src data: 'self' https://*.givechariot.com https://*.wp.com; frame-src 'self' https://videopress.com https://www.tiktok.com https://www.instagram.com https://platform.instagram.com https://secure.dafpay.com https://*.wp.com https://www.youtube.com https://player.vimeo.com https://platform.instagram.com https://www.instagram.com https://embed.bsky.app; img-src data: 'self' https://wikipedia.org https://*.givechariot.com https://www.paypalobjects.com https://*.wp.com https://*.wikimedia.org; media-src 'self' https://videos.files.wordpress.com https://commons.wikimedia.org https://upload.wikimedia.org; script-src 'unsafe-eval' 'unsafe-inline' 'self' https://www.tiktok.com https://*.tiktokcdn-us.com https://*.tiktokcdn-eu.com https://*.ttwstatic.com https://www.instagram.com https://platform.instagram.com https://*.givechariot.com https://*.wp.com https://www.youtube.com https://player.vimeo.com https://platform.instagram.com https://www.instagram.com https://embed.bsky.app https://*.wikimedia.org https://api.mapbox.com; style-src 'unsafe-inline' 'self' https://www.tiktok.com https://*.tiktokcdn-us.com https://*.tiktokcdn-eu.com https://*.ttwstatic.com https://*.wp.com https://*.wikimedia.org https://api.mapbox.com; worker-src blob: 'self'; base-uri 'self'; form-action 'self' https://donate.wikimedia.org; frame-ancestors 'self'; object-src 'none'; block-all-mixed-content x-xss-protection: 1; mode=block x-dns-prefetch-control: off referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=106384710;includeSubdomains;preload x-frame-options: SAMEORIGIN x-content-type-options: nosniff permissions-policy: fullscreen=(self) x-redirect-by: WordPress x-rq: jfk2 181 253 80 x-cache: EXPIRED HTTP/2 200 server: nginx date: Sat, 18 Jul 2026 23:04:53 GMT content-type: text/html; charset=UTF-8 vary: Accept-Encoding host-header: a9130478a60e5f9135f765b23f26593b content-security-policy: default-src 'self'; connect-src 'self' https://api.mapbox.com https://events.mapbox.com https://www.tiktok.com https://*.givechariot.com https://*.wikipedia.org https://*.wikimedia.org; font-src data: 'self' https://*.givechariot.com https://*.wp.com; frame-src 'self' https://videopress.com https://www.tiktok.com https://www.instagram.com https://platform.instagram.com https://secure.dafpay.com https://*.wp.com https://www.youtube.com https://player.vimeo.com https://platform.instagram.com https://www.instagram.com https://embed.bsky.app; img-src data: 'self' https://wikipedia.org https://*.givechariot.com https://www.paypalobjects.com https://*.wp.com https://*.wikimedia.org; media-src 'self' https://videos.files.wordpress.com https://commons.wikimedia.org https://upload.wikimedia.org; script-src 'unsafe-eval' 'unsafe-inline' 'self' https://www.tiktok.com https://*.tiktokcdn-us.com https://*.tiktokcdn-eu.com https://*.ttwstatic.com https://www.instagram.com https://platform.instagram.com https://*.givechariot.com https://*.wp.com https://www.youtube.com https://player.vimeo.com https://platform.instagram.com https://www.instagram.com https://embed.bsky.app https://*.wikimedia.org https://api.mapbox.com; style-src 'unsafe-inline' 'self' https://www.tiktok.com https://*.tiktokcdn-us.com https://*.tiktokcdn-eu.com https://*.ttwstatic.com https://*.wp.com https://*.wikimedia.org https://api.mapbox.com; worker-src blob: 'self'; base-uri 'self'; form-action 'self' https://donate.wikimedia.org; frame-ancestors 'self'; object-src 'none'; block-all-mixed-content x-xss-protection: 1; mode=block x-dns-prefetch-control: off referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=106384710;includeSubdomains;preload x-frame-options: SAMEORIGIN x-content-type-options: nosniff permissions-policy: fullscreen=(self) link: ; rel=shortlink content-encoding: br x-cache: STALE cache-control: max-age=300, must-revalidate accept-ranges: bytes x-rq: jfk2 181 253 80