Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 151.101.2.137 |
| Server Software | Kestrel |
| CDN | CDN (HIT, HIT) |
| Compression | gzip |
|
🔒 🟡 Mixed Content (1 HTTP resources) | The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 151.101.2.137
Server Software Kestrel
CDN CDN (HIT, HIT)
Compression gzip
🔒 🟡 Mixed Content (1 HTTP resources) The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://usaswimming.org:443 | 301 | HTTP/2 301 |
| 2 | https://www.usaswimming.org/ | 200 | HTTP/2 200 |
#1 URL https://usaswimming.org:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.usaswimming.org/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 8.4 ms |
| TCP Connect | 9.6 ms |
| TLS Handshake | 6.5 ms |
| Time To First Byte (TTFB) | 19 ms |
| Content Download | 1 ms |
| Total Response Time | 20 ms |
DNS Lookup 8.4 ms
TCP Connect 9.6 ms
TLS Handshake 6.5 ms
Time To First Byte (TTFB) 19 ms
Content Download 1 ms
Total Response Time 20 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31557600 |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31557600
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Home |
| Open Graph Description | USA Swimming |
| Twitter Card | summary_large_image |
Title Home
Open Graph Description USA Swimming
Twitter Card summary_large_image
Detected Technologies
| Technology | Bootstrap jQuery Google Analytics Google Tag Manager Cloudflare Apache |
Technology Bootstrap jQuery Google Analytics Google Tag Manager Cloudflare Apache
HTTP Headers
| Content-type
| text/html; charset=utf-8 |
| Server
| Kestrel |
| Request-context
| appId=cid-v1:81df76cc-fa87-433a-b554-0dac1544a0b5 |
| Content-security-policy
| default-src 'self' 'unsafe-inline' 'self' *.googleapis.com *.gstatic.com *.cloudflare.com *.telerik.com *.bootstrapcdn.com *.fontawesome.com *.jquery.com *.doubleclick.net *.googletagservices.com *.googletagmanager.com *.cookiebot.com atlas.microsoft.com play.google.com apps.apple.com gives.usaswimming.org; media-src 'self'; style-src 'unsafe-inline' 'self' 'unsafe-inline' 'self' blob: *.googleapis.com *.gstatic.com *.cloudflare.com *.telerik.com *.bootstrapcdn.com *.fontawesome.com *.jsdelivr.net atlas.microsoft.com; img-src data: 'self' *.windows.net *.google.com *.cookiebot.com *.google-analytics.com *.facebook.com *.adroll.com *.bidswitch.net *.casalemedia.com *.rubiconproject.com *.openx.net *.rlcdn.com *.outbrain.com *.pubmatic.com *.yahoo.com *.taboola.com *.3lift.com *.adnxs.com *.doubleclick.net *.vimeocdn.com *.googlesyndication.com *.reson8.com *.googletagmanager.com *.usaswimming.org atlas.microsoft.com play.google.com apps.apple.com give.usaswimming.org *.clarity.ms *.bing.com *.adtrafficquality.google; script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: *.googleapis.com *.gstatic.com *.cloudflare.com *.telerik.com *.bootstrapcdn.com *.fontawesome.com *.jquery.com *.doubleclick.net *.googletagservices.com *.googletagmanager.com *.cookiebot.com *.google-analytics.com *.adroll.com *.facebook.net sc-static.net *.bytedance.com *.clarity.ms *.azurewebsites.net *.snapchat.com *.youtube.com *.jsdelivr.net *.azure.com *.googlesyndication.com *.googleadservices.com *.tagboard.com *.google.com atlas.microsoft.com samples.azuremaps.com *.usaswimming.org play.google.com apps.apple.com gives.usaswimming.org *.pinimg.com *.adtrafficquality.google *.pinterest.com; connect-src 'unsafe-inline' 'self' *.googleapis.com *.gstatic.com *.cloudflare.com *.telerik.com *.bootstrapcdn.com *.fontawesome.com *.jquery.com *.doubleclick.net *.googletagservices.com *.googletagmanager.com *.cookiebot.com *.google-analytics.com *.adroll.com *.facebook.net sc-static.net *.bytedance.com *.clarity.ms *.snapchat.com *.azurewebsites.net *.azure.com *.googlesyndication.com *.google.com atlas.microsoft.com *.swimsmember.org *.usaswimming.org play.google.com apps.apple.com give.usaswimming.org *.googleadservices.com *.adtrafficquality.google *.pinterest.com *.pinimg.com; font-src 'unsafe-inline' 'self' *.googleapis.com *.gstatic.com *.cloudflare.com *.telerik.com *.bootstrapcdn.com *.fontawesome.com atlas.microsoft.com; frame-src *.adroll.com *.cookiebot.com *.doubleclick.net *.snapchat.com *.youtube.com *.vimeo.com vimeo.com *.google.com *.googlesyndication.com *.tagboard.com *.powerbi.com atlas.microsoft.com *.azurewebsites.net *.usaswimming.org play.google.com apps.apple.com gives.usaswimming.org *.sisense.com *.googletagmanager.com *.googleadservices.com *.pinterest.com *.adtrafficquality.google |
| Content-encoding
| gzip |
| Via
| 1.1 varnish, 1.1 varnish |
| Cache-control
| no-store, max-age=0 |
| Accept-ranges
| bytes |
| Age
| 3116 |
| Date
| Wed, 22 Jul 2026 15:24:08 GMT |
| X-served-by
| cache-den-kden1300059-DEN, cache-par-lfpg1960076-PAR |
| X-cache
| HIT, HIT |
| X-cache-hits
| 2, 0 |
| X-timer
| S1784733848.239812,VS0,VE1 |
| Vary
| Accept-Encoding |
| Strict-transport-security
| max-age=31557600 |
| Content-length
| 26366 |
Meta Tags
| Fb:app_id | 187358911331103 |
| X-UA-Compatible | IE=edge,chrome=1 |
| Section | home |
| Viewport | width=device-width, initial-scale=1.0 |
Content-type text/html; charset=utf-8
Server Kestrel
Request-context appId=cid-v1:81df76cc-fa87-433a-b554-0dac1544a0b5
Content-security-policy default-src 'self' 'unsafe-inline' 'self' *.googleapis.com *.gstatic.com *.cloudflare.com *.telerik.com *.bootstrapcdn.com *.fontawesome.com *.jquery.com *.doubleclick.net *.googletagservices.com *.googletagmanager.com *.cookiebot.com atlas.microsoft.com play.google.com apps.apple.com gives.usaswimming.org; media-src 'self'; style-src 'unsafe-inline' 'self' 'unsafe-inline' 'self' blob: *.googleapis.com *.gstatic.com *.cloudflare.com *.telerik.com *.bootstrapcdn.com *.fontawesome.com *.jsdelivr.net atlas.microsoft.com; img-src data: 'self' *.windows.net *.google.com *.cookiebot.com *.google-analytics.com *.facebook.com *.adroll.com *.bidswitch.net *.casalemedia.com *.rubiconproject.com *.openx.net *.rlcdn.com *.outbrain.com *.pubmatic.com *.yahoo.com *.taboola.com *.3lift.com *.adnxs.com *.doubleclick.net *.vimeocdn.com *.googlesyndication.com *.reson8.com *.googletagmanager.com *.usaswimming.org atlas.microsoft.com play.google.com apps.apple.com give.usaswimming.org *.clarity.ms *.bing.com *.adtrafficquality.google; script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: *.googleapis.com *.gstatic.com *.cloudflare.com *.telerik.com *.bootstrapcdn.com *.fontawesome.com *.jquery.com *.doubleclick.net *.googletagservices.com *.googletagmanager.com *.cookiebot.com *.google-analytics.com *.adroll.com *.facebook.net sc-static.net *.bytedance.com *.clarity.ms *.azurewebsites.net *.snapchat.com *.youtube.com *.jsdelivr.net *.azure.com *.googlesyndication.com *.googleadservices.com *.tagboard.com *.google.com atlas.microsoft.com samples.azuremaps.com *.usaswimming.org play.google.com apps.apple.com gives.usaswimming.org *.pinimg.com *.adtrafficquality.google *.pinterest.com; connect-src 'unsafe-inline' 'self' *.googleapis.com *.gstatic.com *.cloudflare.com *.telerik.com *.bootstrapcdn.com *.fontawesome.com *.jquery.com *.doubleclick.net *.googletagservices.com *.googletagmanager.com *.cookiebot.com *.google-analytics.com *.adroll.com *.facebook.net sc-static.net *.bytedance.com *.clarity.ms *.snapchat.com *.azurewebsites.net *.azure.com *.googlesyndication.com *.google.com atlas.microsoft.com *.swimsmember.org *.usaswimming.org play.google.com apps.apple.com give.usaswimming.org *.googleadservices.com *.adtrafficquality.google *.pinterest.com *.pinimg.com; font-src 'unsafe-inline' 'self' *.googleapis.com *.gstatic.com *.cloudflare.com *.telerik.com *.bootstrapcdn.com *.fontawesome.com atlas.microsoft.com; frame-src *.adroll.com *.cookiebot.com *.doubleclick.net *.snapchat.com *.youtube.com *.vimeo.com vimeo.com *.google.com *.googlesyndication.com *.tagboard.com *.powerbi.com atlas.microsoft.com *.azurewebsites.net *.usaswimming.org play.google.com apps.apple.com gives.usaswimming.org *.sisense.com *.googletagmanager.com *.googleadservices.com *.pinterest.com *.adtrafficquality.google
Content-encoding gzip
Via 1.1 varnish, 1.1 varnish
Cache-control no-store, max-age=0
Accept-ranges bytes
Age 3116
Date Wed, 22 Jul 2026 15:24:08 GMT
X-served-by cache-den-kden1300059-DEN, cache-par-lfpg1960076-PAR
X-cache HIT, HIT
X-cache-hits 2, 0
X-timer S1784733848.239812,VS0,VE1
Vary Accept-Encoding
Strict-transport-security max-age=31557600
Content-length 26366
