academy.com

.com toplist crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 2525 ms crawled 2026-05-18

US · 174.46.23.26 · AS46928 Academy Sports + Outdoors

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title: Academy Sports + Outdoors | Quality Sporting Goods | Top Hunting, Fishing & Outdoor Gear
Description: Shop Academy Sports + Outdoors for sporting goods, hunting, fishing and camping equipment. Find recreation and leisure products, footwear, apparel, grills, bikes, g...
Language: en
Canonical: https://www.academy.com/

Open Graph

url: https://www.academy.com/
title: Academy Sports + Outdoors | Quality Sporting Goods | Top Hunting, Fishing & Outdoor Gear
description: Shop Academy Sports + Outdoors for sporting goods, hunting, fishing and camping equipment. Find recreation and leisure products, footwear, apparel, grills, bikes, g...

Technology

Server: nginx

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (8)

images.contentstack.io×48
assets.contentstack.io×15
cdn.clarip.com×4
cdn.jsdelivr.net×3
fonts.googleapis.com×3
fonts.gstatic.com×2
use.typekit.net×2
p.typekit.net×1

Social

Registration

Registrar

MarkMonitor Inc.

Created

1995-12-26

Expires

2028-04-28 710 days left

Updated

2026-03-26

Name servers

ns1.markmonitor.com
ns2.markmonitor.com
ns3.markmonitor.com
ns4.markmonitor.com
ns5.markmonitor.com
ns6.markmonitor.com
ns7.markmonitor.com

DNS records live

NS

ns1.markmonitor.com
ns2.markmonitor.com
ns3.markmonitor.com
ns4.markmonitor.com
ns5.markmonitor.com
ns6.markmonitor.com
ns7.markmonitor.com

MX

10 academy-com.mail.protection.outlook.com

TXT

Show 10 TXT records

adobe-idp-site-verification=ecb1322c-d38f-48c1-ba57-258e4afc9d0a
google-site-verification=SBERc8Umrg0q00gTRqiIa6ou44EIsHZdy1bfH69YK0s
Dynatrace-site-verification=3f384ba0-535e-4953-9847-5d3d8783d179__9c443su814sqtu6agleuptv8ul
cisco-ci-domain-verification=7272d545a26a154a947920ff7b3ea497b5cb0d0b2258305f085e1c69caa9df7d
atlassian-domain-verification=N8OM0faOy91tQT8WpKa3vTYyNQaAfUEDWNDRTFjXUT9q9x7IOc1hT145/jkjHSw2
MS=ms35921208
apple-domain-verification=jqD0cR2UzMkso8LY
MS=90FB8DEAAD04697190BB241807EB733B39735185
facebook-domain-verification=prhf48kt8bl51k7q6z588rjzrml948
vmware-cloud-verification-e4a3e396-315e-41f1-ac88-727dfe37a3bc

Email authentication partial

SPF

v=spf1 mx include:spf.protection.outlook.com include:us._netblocks.mimecast.com include:rnmk.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbeAMZEHu8Dgf3kDk212ulJv9AbiXVtA6/sJ/KpWxq2ozQ91FscmLWVWQTCYbTaQIey6MUjhZTHmEJ2HS8ls…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthRt1rsKTFqWBS3GOZ2NWfwFQtKkQZCjjB0apQL5cPiq4t5H6TE1WIHZ9dUNaLtTyFMf3LGNW86jxTcxPD…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Wg3o9+ZyvB3Z+l2wgmgXwzrRSXxGWQmYd9Py80VK7URBi1N7iW+P76bPJZlBnvRet0jtq2WTKhcPiODNK…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2026-02-02 to 2027-02-03

Expires in 260 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.academy.com/

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: script-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com http://*.bazaarvoice.com https://*.bazaarvoice.com https://code.jquery.com http://*.academy.com https://*.academy.com https://*.iesnare.com https://*.amazonaws.com http://*.google-analytics.com https://*.google-analytics.com https://*.googleapis.com https://*.scene7.com http://*.scene7.com https://*.firstdata.com https://*.google.com https://*.paypalobjects.com https://unpkg.com http://www.youtube.com https://www.youtube.com https://*.go-mpulse.net http://*.go-mpulse.net https://*.ytimg.com https://*.googleadservices.com https://cdn.b0e8.com https://*.micpn.com https://*.pbbl.co https://*.pinimg.com https://*.myvisualiq.net https://*.facebook.net https://*.doubleclick.net http://*.googleapis.com https://*.googleapis.com https://tagmanager.google.com https://*.cdn-net.com http://*.cdn-net.com https://*.akamaihd.net https://*.paymentjs.firstdata.com https://*.paypal.com https://*.rfihub.net https