Cybersecurity Rating
by ImmuniWeb® CyberScore™

Hostname	URL	Grade	Tested on
ulta.com	https://www.ulta.com/	B	November 6th, 2026 23:53
www.ulta.com	https://www.ulta.com/	B	November 6th, 2026 23:53
images.ulta.com	https://media.ulta.com/	A	November 6th, 2026 23:50
media.ulta.com	https://media.ulta.com/	A	November 6th, 2026 23:50
web.ulta.com	https://web.ulta.com/	A	November 6th, 2026 23:50

Show 46 More

Website Privacy Rating | Overview

The total number of subdomains is capped at 50.

Hostname	URL	Grade	Tested on
ulta.com	https://www.ulta.com/	C+	November 7th, 2026 00:55
www.ulta.com	https://www.ulta.com/	C+	November 7th, 2026 00:55
images.ulta.com	https://media.ulta.com/	A+	November 7th, 2026 00:55
media.ulta.com	https://media.ulta.com/	A+	November 7th, 2026 00:56
web.ulta.com	https://web.ulta.com/	B	November 7th, 2026 00:56

Show 46 More

The total number of subdomains is capped at 50.

Hostname	URL	Protocol	Grade	Tested on
ulta.com	https://ulta.com 23.53.168.139:443	HTTPS	A	November 6th, 2026 23:48
www.ulta.com	https://www.ulta.com 23.60.176.139:443	HTTPS	A	November 6th, 2026 23:51
images.ulta.com	https://images.ulta.com 23.60.176.139:443	HTTPS	A	November 6th, 2026 23:50
media.ulta.com	https://media.ulta.com 104.18.32.221:443	HTTPS	A	November 6th, 2026 23:50
web.ulta.com	https://web.ulta.com 63.140.39.214:443	HTTPS	C	November 6th, 2026 23:50

Show 46 More

Hostname	Grade	Tested on
ulta.com	B	November 6th, 2026 23:59

Email Server Security Report
A total of 2 email servers were analyzed. Open relay was not detected, SMTP enumeration was not detected, a secure authentication was enforced across all tested servers, and PTR records were properly configured. The average response latency was approximately 0.065s.
Email SSL/TLS Encryption Report
SSL/TLS security testing was completed for 1 email server. Server grade is F.
Email Server DNS Security Report
SPF is set properly, DKIM is set properly, and DMARC is set properly. MTA-STS is not configured for this domain. A and MX DNS records are fully validated.
Email Server Black and Spam Lists Report
No email servers were found on blacklists.

No vibe-coded or AI-created code patterns detected across 50 websites.
No leaks of AI tokens or other AI-related and sensitive data detected on the Dark Web.
No leaks of AI tokens or other AI-related and sensitive data detected across 51 websites.

Hostname	Tested on
ulta.com	November 6th, 2026 23:46

Dark Web Exposure Report
A total of 336 dark web incidents detected, containing 7558 mentions of the domain. 299 out of 336 incidents originate from Compromised Databases. Out of all detected Compromised Credentials, 95 are considered to be of High risk. Mentions in Leaked Databases represent the most common source of compromised information, accounting for 7306 of the 7558 detected domain mentions on the Dark Web.
Unprotected Cloud Storage Report
No cloud storage buckets found.
Phishing Websites Report
2 potential phishing URLs detected. Example hostnames: ulta.com.my and ulta.io.
Cybersquatting Domains Report
71 potential cybersquatting domains detected. Example domains: ulta-co.com, ultaevents.com and ultapayroll.com; additional cybersquatting domains are available in the detailed report.
Typosquatting Domains Report
No potential typosquatting domains found.
Fake Accounts in Social Media Report
229 squatted social network accounts detected across 7 social networks. Most affected social networks include YouTube with 80 accounts including @ulta2004 and @ulta2007, Reddit with 75 accounts including @ulta2023 and @ultaac and GitHub with 40 accounts including @ultaac and @ultaar; the full list is available in the detailed report.

Share this report:

Take Your Security Ratings to the Next Level