thejockeyclub.co.uk

.uk crawl

First seen 2026-04-11 · Last seen 2026-05-20 · ok HTTP/1.1 200 1000 ms crawled 2026-05-19

SE · 217.114.94.2 · AS30811 Optimizely AB

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: The Jockey Club | For the thrill of it since 1750
Description: The largest group in British horseracing, 15 racecourses, live music, training grounds, Jockey Club Rooms, the national stud and more!
Language: en-gb
Canonical: https://www.thejockeyclub.co.uk/

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Google Tag Manager

Third-party hosts loaded (4)

cdn.optimizely.com×2
cdn.jsdelivr.net×1
static.amondo.com×1
www.googletagmanager.com×1

Registration

Registrar

123-Reg Limited t/a 123-reg

Created

1997-04-10

Expires

2033-04-10 2516 days left

Updated

2024-09-01

Name servers

ns49.domaincontrol.com.
ns50.domaincontrol.com.

DNS records live

NS

ns49.domaincontrol.com
ns50.domaincontrol.com

MX

0 thejockeyclub-co-uk.mail.protection.outlook.com

TXT

Show 10 TXT records

Y+87p87e63Rq+tpuRQws0pihcLUiOVZ9GWEAW+0mHnnzNcuf2u9P91trO6Tifpi9SLaMZ427dv7hcka+ca4q9g==
92.129.188.196
92.129.188.197
92.129.188.198
65.110.162.244
65.110.175.212
65.110.175.213
65.110.175.214
wMduYu2qdnO0xDtdEzNx7j7/QEroDpbS2Dla04QQqT29wud4RrN+UMsUQ6a7usIPKps8NhjPSGaJ1tEhJrdorw==
b9cpLr0x9wMJEGrj1hZ8Pok51wxxsj95pevvYEgG9gk=

Verified for

Citrix
Google
Microsoft 365

Email authentication partial

SPF

v=spf1 include:spfa.thejockeyclub.co.uk include:spfb.thejockeyclub.co.uk include:sendgrid.net include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.email

policy: none (monitoring only)

DKIM

Show 5 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNLK+c7cpyCbsLfoEiVVXU+j8+X+LouEwmv7HJb8T5+c5okiG7IbNuCKY/dLYdN/hLjmZdcD1LfBlDNHHW6Y…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus8dHdCwduhoJ+5cgW44NSPbclWIr6HlBCm4f5MAtzqoPy3iXWObSsk4EcojbWSR71cWCd6EBNRlox…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CkMbOWRaWN38thmFPSq3xNLkTwGJKuoywVNkLOF+PKvHlmaPJaLraUZh2sYiqBnjZ7pOsnXpasYUlSYaF…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCv+8U1x7lrd9BXAf9714vEEFJlYt5jCDvDo1axkqeaLJlx3xjIJAJr3UL5Pq9QuDJQ9OD6A47fUEBUWnpyQuAe4t…

selectors probed

Certificate (current)

RapidSSL TLS RSA CA G1

from 2025-09-29 to 2026-09-29

Expires in 131 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.thejockeyclub.co.uk/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src * data:; media-src * data: blob:; script-src https: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; frame-ancestors 'self' https://app.optimizely.com
strict-transport-security: max-age=31536000; includeSubDomains