churchilldowns.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 722 ms crawled 2026-05-19

US · 18.165.122.26 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Home page | Churchill Downs
Description: Churchill Downs Racetrack the home of the Kentucky Derby conducts Thoroughbred horse racing in Louisville, Kentucky throughout the year.
Language: en
Canonical: https://www.churchilldowns.com/

Open Graph

url: https://www.churchilldowns.com/
title: Home page | Churchill Downs
locale: en_US
site name: Churchill Downs
description: Churchill Downs Racetrack the home of the Kentucky Derby conducts Thoroughbred horse racing in Louisville, Kentucky throughout the year.

Technology

CDN: Amazon CloudFront
Server: Apache

Third-party hosts loaded (2)

www.kentuckyderby.com×32
www.google.com×3

Social

Contact

Phone

Address

700 Central Ave, 40208, Louisville, KY, US

Registration

Registrar

GoDaddy.com, LLC

Created

1995-11-15

Expires

2027-11-14 543 days left

Updated

2022-09-09

Name servers

ns-1255.awsdns-28.org
ns-1828.awsdns-36.co.uk
ns-404.awsdns-50.com
ns-636.awsdns-15.net

DNS records live

NS

ns-1255.awsdns-28.org
ns-1828.awsdns-36.co.uk
ns-404.awsdns-50.com
ns-636.awsdns-15.net

MX

10 mxa-00397a01.gslb.pphosted.com
10 mxb-00397a01.gslb.pphosted.com

TXT

google-site-verification=ef-PV4wuk25Jlh-Rzxln-uT6PtYZrNYFMiLMZS4bUR0
facebook-domain-verification=q4ysxxm2huyzras9hgn2zwurtkovqz

Email authentication strong

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com;ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

s1: v=DKIM1; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTdVclS9Fwq83W8wcNmudvL2LROFTwcje9y2m2ibU2b05GqrHromz5yJgnyVpFpvnasN5UNpDSei7vCf…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2025-06-19 to 2026-07-19

Expires in 60 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.churchilldowns.com/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy

findings

missing Content Security Policy
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload