ulta.com

Observed 2026-07-13T00:12:04.399246340+00:00 (11h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onAkamai Technologies

Email byProofpoint

Secured byDigiCert

Also usesMiroGoogle Search ConsoleAtlassian

7 subdomains · push_legacy

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat ulta.com actually stands on - every host below is a signed observation

ulta.com

A / AAAA

23.222.200.126

Akamai Technologiesserves the site

a4-64.akam.neta5-65.akam.neta1-188.akam.neta10-65.akam.net+2 more

akam.netanswers its DNS

mxa-001e8203.gslb.pphosted.commxb-001e8203.gslb.pphosted.com

Proofpointreceives its email

TLS

www.ulta.com

DigiCert Incissued its certificate

DNS Records

A 1

23.222.200.126

MX 2

10mxa-001e8203.gslb.pphosted.com
10mxb-001e8203.gslb.pphosted.com

TXT 40

MS=ms60657334
abuseipdb-verification=WA3QzgVH
2r2sxp2zm9gr7y476tn0c7wdl7hb6h7z
f60ce002e5182e7b99a8a59b6d865a12
rh3mlgfyzlzr4m6k4y5xlxqc6jvtlg23
wmf8vq0hb5cxdy5kt0lctqblmcj93zs4
dropbox-domain-verification=a0934nk25pie
apple-domain-verification=FqCLrDbhrE6iHkeO
jamf-site-verification=sZnpLAjI7vNtvJ6S4EHnYQ
mk-org-sso-d850b46b-9e46-4a0b-be20-a582de41706f

NS 6

a4-64.akam.net
a5-65.akam.net
a1-188.akam.net
a10-65.akam.net
a11-66.akam.net
a26-67.akam.net

SOA 1

a1-188.akam.net hostmaster.ulta.com

TLS Certificates (2)

Common Name	Issuer	Expires
`www.ulta.com`	C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=GeoTrust TLS RSA CA G1	Fri, 16 Oct 2026 23:59:59 +0000
`GeoTrust TLS RSA CA G1`	C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2	Tue, 02 Nov 2027 12:23:37 +0000

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ulta.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/ulta.com">
  <img src="https://domaindrift.io/badge/ulta.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for ulta.com">
</a>

Ed25519 Receipt

Receipt ID: fb016651-417b-4bf2-9112-41897bc9f31b
Output Hash: f9acd86aa0cf19200e9bc0fa64ef06f91d178c856bebf9632c9ea3673160cc64
Signature: ed25519:4c8cae357b59a99452271c0bb71a0684f727f031192dd28995ee5f0adcbc50639db3c9f920f6092af080fb04f70cb2d2ecd5e35f8cbf7dec890baf9e25109e0a
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/ulta.com