pray.com

Live preview

This site's Content-Security-Policy restricts embedding to specific origins ("frame-ancestors 'none'"), which does not include StatsMyWeb.

Since pray.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

private, no-cache, no-store, max-age=0, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self'; img-src 'self' data: blob: https://www.facebook.com https://maps.gstatic.com https://maps.googleapis.com https://pagead2.googlesyndication.com/pcs/activeview https://pubads.g.doubleclick.net/pagead/interaction/ https://cdn.prod.website-files.com https://uploads-ssl.webflow.com https://d2alqht3442852.cloudfront.net https://d339bgihw9yfmi.cloudfront.net https://www.omnycontent.com https://d3wo5wojvuv7l.cloudfront.net https://feeds.podetize.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://ep1.adtrafficquality.google; script-src 'self' 'unsafe-inline' https://cdn.amplitude.com https://connect.facebook.net https://js.stripe.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://apis.google.com https://imasdk.googleapis.com https://s0.2mdn.net/instream/video/client.js https://pagead2.googlesyndication.com/omsdk/ https://pagead2.googlesyndication.com/pagead/managed/js/activeview/ https://maps.googleapis.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://ep2.adtrafficquality.google; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://api.amplitude.com https://www.facebook.com https://api.stripe.com https://d2alqht3442852.cloudfront.net https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://csi.gstatic.com/csi https://maps.googleapis.com https://api.pray.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://ep1.adtrafficquality.google; media-src 'self' blob: https:; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://www.google.com/recaptcha/ https://fir-pray.firebaseapp.com https://imasdk.googleapis.com https://*.safeframe.googlesyndication.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://cm.g.doubleclick.net https://ep2.adtrafficquality.google; form-action 'self' https://www.pray.com; frame-ancestors 'none'; base-uri 'none'; object-src 'none'

Strict-Transport-Security

max-age=63072000; includeSubDomains; preload

X-Frame-Options

Not sent

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://pray.com/HTTP 301

   → https://pray.com/

2. 2.https://pray.com/HTTP 301

   → https://www.pray.com/

3. 3.https://www.pray.com/HTTP 200

Meta tags

Title

Discover | Pray.com

Description

Christian podcasts, daily prayers, Bible stories, meditations and worship music from Pray.com.

Canonical

https://www.pray.com/discover

Robots

index, follow, max-video-preview:-1, max-image-preview:large, max-snippet:-1

Generator

Not set

Open Graph title

Discover | Pray.com

Open Graph description

Christian podcasts, daily prayers, Bible stories, meditations and worship music from Pray.com.

Open Graph image

https://www.pray.com/assets/og/pray-passion-v1.jpg

Open Graph type

website

Twitter card

summary_large_image

Twitter title

Discover | Pray.com

Twitter image

https://www.pray.com/assets/og/pray-passion-v1.jpg

robots.txt

Disallow rules (User-agent: *)

0

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  X-Powered-By: Next.js

Related domains