bibleproject.com

HTML metadata

Title

Study the Story of the Bible With Free Tools | BibleProject™

Description

Learn the Bible with media tools that guide individuals and groups in studying its story. Use our videos and other free online resources.

Language

en

Canonical

https://bibleproject.com/

Translations

af
afb
am
apc
ar
arz
bg
bn-bd
bn-in
cs
de
el
en
es
fa
fi
fr
gu
hi
hr
hu
id
it
ja
km
kn
ko
lt
ml
mn
mr
my
ne
nl
no
pa
pl
pt-br
ro
ru
rw
si
sk
sv
sw
ta
te
th
tl
tr
uk
ur
vi
yue
zh-hans
zh-hant

Open Graph

title: Study the Story of the Bible With Free Tools | BibleProject™
description: Learn the Bible with media tools that guide individuals and groups in studying its story. Use our videos and other free online resources.

Technology

CDN: Amazon CloudFront
CMS: Gatsby

Cookie consent

Usercentrics

Third-party hosts loaded (4)

ik.imagekit.io×15
app.usercentrics.eu×2
api.usercentrics.eu×1
proyectobiblia.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

1998-12-22

Expires

2027-12-22 581 days left

Updated

2025-12-23

Name servers

ns-1224.awsdns-25.org
ns-1808.awsdns-34.co.uk
ns-2.awsdns-00.com
ns-627.awsdns-14.net

DNS records live

NS

ns-1224.awsdns-25.org
ns-1808.awsdns-34.co.uk
ns-2.awsdns-00.com
ns-627.awsdns-14.net

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
30 alt2.aspmx.l.google.com
40 aspmx2.googlemail.com
50 aspmx3.googlemail.com

TXT

Show 14 TXT records

google-site-verification=dB-DVO73ECdazRH7JalpmuiZTDHfEDInnR0dV8CSITg
google-site-verification=ZH42A8boD7rRf6xMaFxrpVndgVxBLzhhWBx6HLoZKp0
proxy-ssl.webflow.com
openai-domain-verification=dv-Wvl6VQXrBEolEiuSL0mErETb
apple-domain-verification=UUQsVKbkKkh1NJfl
facebook-domain-verification=4ze3k5nraxvxtdq3mycjodxdimvga8
google-site-verification=jqGeao_L-cs_0L2VKTgcDaHDgxRuLGOf3eJ8IAk14VE
pardot296292=c8b99f9f38ee6537adf75b96ebed53b44b1fd2f86cd55400666b9cf9bf84c6c7
google-site-verification=C8HX29If0A2cKEwTX6QDAt2VsSXWlyKYc3lbf5herQ8
amazon-business-verification=f11f48112998fb517d0812c4e5ffaa634b2c715be1fa438fafacd63e441fc0b3
atlassian-domain-verification=zargVyTq3wjSditfJt3vwkMUfcMTAq5URXnPi7QrTz11Ly43xGVN72PFYWDpyaOa
bw=7MCf4kNCIvVwOMUJnqCI3HxlVPe9Wybt0QrOm96D8nij
slack-domain-verification=HlJFCtDzU2NUmOzSsSbh1lJNaGEAB0q7FNzeJ9by
google-site-verification=Mhbl0dJ7B52brpcEhJ-U27XLLinbdrFXGx1sOA3NvWU

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:aspmx.pardot.com include:mail.zendesk.com include:_spf.salesforce.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzISbDlH0XD14fHd7HWUyua+0D7fgWipSR39Ttxqyqz5WShBHl+MW/oj+acGg476o8A91QwfR88zO/kc0ZI…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD3RwW31EVRXvwWffZy5CfQ3eEBoGU2PDd3mhLZmbFhLK/ZwHyVl6A02L5SoA49ikmk8FGIVw0Hubv33JAMCMusbF…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-03-02 to 2026-09-16

Expires in 119 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://bibleproject.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' *.bibleproject.com;script-src 'self' *.bibleproject.com static.bibleproject.com 'unsafe-eval' 'unsafe-inline' *.doubleclick.net *.google-analytics.com *.googletagmanager.com *.gstatic.com pagead2.googlesyndication.com tagmanager.google.com www.google.com www.googleadservices.com connect.facebook.net bat.bing.com cdn.heapanalytics.com cdn.us.heap-api.com heapanalytics.com js-agent.newrelic.com *.js.stripe.com js.stripe.com maps.googleapis.com places.googleapis.com *.mux.com src.litix.io js.appboycdn.com www.youtube.com *.usercentrics.eu 'wasm-unsafe-eval';style-src 'self' *.bibleproject.com static.bibleproject.com 'unsafe-inline' fonts.googleapis.com googletagmanager.com tagmanager.google.com heapanalytics.com *.mux.com;img-src 'self' *.bibleproject.com static.bibleproject.com data: blob: dpl8xh3azv1ec.cloudfront.net d3kfvpfexuy5fk.cloudfront.net *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.g
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin