SpoofCheck

Email Security Analysis of ulta.com

Complete verification of ulta.com's SPF, DKIM, DMARC, and MTA-STS records. Find out if this domain is protected against email spoofing.

Last updated: April 15, 2026

90A
This domain is protected against spoofing

SPF

OK
v=spf1 include:spf.protection.outlook.com include:spf-001e8203.pphosted.com include:spf.prod.cadienttalent.com ip4:104.20.91.144/28 ip4:69.84.87.208/28 ip4:38.105.5.96/28 ip4:104.129.65.0/29 ip4:198.207.147.223/26 ip4:205.223.83.136/29 ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:69.169.224.0/20 ip4:23.249.208.0/20 ip4:23.251.224.0/19 ip4:76.223.176.0/20 ip4:54.240.64.0/19 ip4:54.240.96.0/19 ip4:52.82.172.0/22 ip4:76.223.128.0/19 ip4:104.193.232.0/26 ip4:12.47.172.3 ip4:166.78.226.84 ip4:166.78.81.177 ip4:161.47.114.21 ip4:166.78.77.179 ip4:198.61.246.240 ip4:192.243.221.100 ip4:104.46.104.121 ip4:62.216.254.4 ip4:198.61.240.18 ip4:204.239.0.0/24 ip4:198.207.147.0/24 ip4:216.230.14.0/24 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.8.0/21 ip4:104.193.137.209 ~all

DKIM

OK
Selectors: selector1, selector2, k1, s1, s2

DMARC

OK
v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;

MX

OK
mxb-001e8203.gslb.pphosted.com, mxa-001e8203.gslb.pphosted.com

MTA-STS

Missing

No record found

Read the guide

Recommendations

  1. 1Add MTA-STS to enforce TLS encryption for incoming emails

    Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.

Run a live analysis

The results above are updated daily. For an instant check of ulta.com, run a live analysis.

Analyze ulta.com live

Guides to understand these results

SPF Guide

Understand how SPF defines which servers are authorized to send emails for a domain.

DKIM Guide

Discover how DKIM cryptographically signs your emails to guarantee their authenticity.

DMARC Guide

Learn how DMARC orchestrates SPF and DKIM to protect your domain.

MTA-STS Guide

Learn how MTA-STS enforces TLS encryption to protect your emails in transit.

SPF vs DKIM vs DMARC

Compare the three protocols and understand how they work together.