usatriathlon.org

HTML metadata

Title: USA Triathlon | USA Triathlon
Description: Read the latest triathlon news, training and nutrition tips and access your USA Triathlon membership account
Language: en
Canonical: https://www.usatriathlon.org/home

Open Graph

url: https://www.usatriathlon.org
title: USA Triathlon
locale: en_US
description: USA Triathlon is the governing body for triathlon, duathlon, and other multisport events, supporting 300,000+ members.

Technology

CMS: Gatsby

Analytics

Google Tag Manager

Ads

Google AdSense
Google Ads (DoubleClick)

Cookie consent

OneTrust

Fonts

Adobe Fonts

Third-party hosts loaded (6)

res.cloudinary.com×6
cdn.cookielaw.org×3
pagead2.googlesyndication.com×2
securepubads.g.doubleclick.net×2
use.typekit.net×1
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

1996-03-26

Expires

2027-03-27 311 days left

Updated

2026-05-11

Name servers

ns55.domaincontrol.com
ns56.domaincontrol.com

DNS records live

NS

ns55.domaincontrol.com
ns56.domaincontrol.com

MX

0 usatriathlon-org.mail.protection.outlook.com

TXT

Show 13 TXT records

facebook-domain-verification=ikx2lilsywmokegy41xgls73on66b6
ppe-1a1084327970a97406b9
jk312bopcipa2ieqfuccr5845k
g6kp2slrjma94rl51ifri914k
780la1gj6g40b3dhk5hb567khi
v=verifydomain MS=5423875
google-site-verification=ElufvjoxyL2tOUg5LeDEKwHtOyQeVcSXC8StTRG0uV4
google-site-verification=nbIpUiSpDtSU7AO_LpHN1DvmOSFw5ZreXbZlF3CO63c
google-site-verification=kNE7iG1DjXo2wZOaKKvH9ebp5fKpzOK1SHt-yLdle_k
atlassian-domain-verification=EbPXWpNP2DuKpbGltGrwxHVmqnT6+ltIlbvWe+XprXTKNugfOMrUAhI8XVpn9yFW
prowly-verification=694c29bb5df249aeabe98a3c7d46e6d77b1991f6a3ef854ff9721eef61da518b
google-site-verification=427l3eXsME-zlsz5Qtvtl3GodEu8NEEA8EGENFambCY
google-site-verification=hHcQxtZg-ko8tx6IuxuReWaCxEvq3q6Zkyjm5D0WXO8

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com  include:mktomail.com include:relay.bswift.com include:_spf.psm.knowbe4.com include:_spf.salesforce.com -all

strict (-all)

DMARC

v=DMARC1; p=reject;

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCdTlFR482qCm9en+9YKx3j/0t11sPmDgZ4YP/77PdP/dXHOmJDYCR7b8+HgyGendqKl/ClATBK2s1TrqvuYl…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhexTldO/zpFcVz47sDtXGeVEBi23yLAOJNleJnigHi3/PGpC1RgNBJ8yspwzlccJlM5P1925W8h36…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv69kBKDlA1Wryg+2sOaD52lONu737jCAU7UHcZrG7ffUhyUMygEPmN0ahHWOqxo8xUOwWUgjnpqh5ilBY8…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDE3tdZhc9lrEPRbku0E6BFKk540gsEvFA8jjXW/pL2Q7Eprg5b+ExZvHfc+hhFRHYodIPhVDBO/u3Lj1DHULJ03j…

selectors probed

Certificate (current)

E7

from 2026-04-27 to 2026-07-26

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.usatriathlon.org/

present

strict-transport-security
content-security-policy

findings

CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src 'self' teamusastdstorage.blob.core.windows.net/collegiatepartnership2022widgets/; connect-src 'self' *.addthis.com *.adtrafficquality.google *.boltdns.net players.brightcove.net *.akamaihd.net *.brightcovecdn.com bat.bing.net bat.bing.com *.clarity.ms *.classy.org *.concierge.teamusadev.com concierge.teamusadev.com uat-concierge.teamusadev.com concierge.teamusa.com *.cookielaw.org *.doubleverify.com *.evergage.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googleusercontent.com *.hs-banner.com *.hsforms.com *.hscollectedforms.net *.hubspot.com *.mktoresp.com *.mktoutil.com *.onetrust.com *.teamusa.org ad.doubleclick.net analytics-ipv6.tiktokw.us analytics.tiktok.com api.airbrake.io attestation.android.com bcbolt446c5271-a.akamaihd.net bcovlive-a.akamaihd.net cdn.jsdelivr.net cdn.linkedin.oribi.io csi.gstatic.com csp.withgoogle.com dw5zrj66pk.execute-api.us-east-1.amazonaws.com d.agkn.com doublethedonation.com edge.api.brightcove.com failover-k8s-widgets.spor
strict-transport-security: max-age=31536000; includeSubDomains