entrycentral.com

HTML metadata

Title: EntryCentral online entries - The Online Start Line
Description: EntryCentral is an online entries and club memberships system based in the UK, for any mass-participation event or club.
Language: en

Open Graph

url: https://www.entrycentral.com/
title: EntryCentral online entries events list

Technology

CDN: Amazon CloudFront
Server: nginx

Third-party hosts loaded (1)

js.stripe.com×1

Social

Registration

Registrar

Amazon Registrar, Inc.

Created

2003-06-12

Expires

2026-06-12 23 days left

Updated

2025-05-08

Name servers

ns-1095.awsdns-08.org
ns-1637.awsdns-12.co.uk
ns-474.awsdns-59.com
ns-623.awsdns-13.net

DNS records live

NS

ns-1095.awsdns-08.org
ns-1637.awsdns-12.co.uk
ns-474.awsdns-59.com
ns-623.awsdns-13.net

MX

Show 7 MX records

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
30 alt2.aspmx.l.google.com
40 alt3.aspmx.l.google.com
50 alt4.aspmx.l.google.com
60 entrycentral.com
70 www.entrycentral.com

Email authentication strong

SPF

v=spf1 a include:_spf.google.com ip4:167.89.42.119 ip4:213.171.212.235 ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine;

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCIf36Vi5SZmuYyH6A6/BTYHq2SYiCrf0kcTFkZ3l0E5RgKPPfuzx6p3RWmu8FhxczvxQJ5eYEQfcM1dBfZ56…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8au8Nbv0SaBYGIvTVD54KUnSN6Va/0E6mzEx8b+cph+bpnnVRWdI55KKOyrqDZ8W+8lX2DTgRyaVUK7+TG…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDO7xGEhUqBYulz8fI/poGgsp2tnaogSiEgmMnJFFe4ygp8orsg8xSc7VZe+ccXrL8go2dxzIAYh6XJ06POdZF7sQ…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2025-11-13 to 2026-12-12

Expires in 206 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.entrycentral.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles

Header values

referrer-policy: no-referrer, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(self), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), geolocation=(self), magnetometer=(), microphone=(), midi=(), payment=(*), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), xr-spatial-tracking=(), clipboard-read=(self), clipboard-write=(self), gamepad=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src 'self' apikeys.civiccomputing.com api.postcodes.io www.googleapis.com newassets.hcaptcha.com maps.googleapis.com api.stripe.com js.stripe.com; font-src 'self' use.fontawesome.com fonts.gstatic.com data:; frame-src 'self' newassets.hcaptcha.com hooks.stripe.com js.stripe.com www.youtube.com; img-src 'self' data: maps.googleapis.com maps.gstatic.com translate.google.com www.gstatic.com cdn.bookingprotect.com tile.openstreetmap.org maptiles.p.rapidapi.com media.giphy.com; media-src www.youtube-nocookie.com; script-src 'self' hcaptcha.com js.stripe.com maps.googleapis.com www.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; report-uri https://35745cad85bbe1feed32f58e01aeb5de.report-uri.com/r/d/csp/reportOnly
strict-transport-security: max-age=2592000; includeSubDomains; preload, max-age=31536000; includeSubdomains; preload