Skip to content
Gridlode
Rank #3,205Updated November 10, 2026

sephora.com

sephora.com is registered with MarkMonitor Inc. since September 24, 1996 (30.1 years). The registration expires on September 23, 2033. Its email security grade is C. Its SSL certificate is issued by DigiCert Inc and is valid for 14 more days.

Domain age
30.1 yrs
Technologies
—
Email security
C
SSL days left
14

Registration

RegistrarMarkMonitor Inc.
IANA ID292
RegisteredSeptember 24, 1996
ExpiresSeptember 23, 2033
UpdatedSeptember 23, 2026
Statusclient delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Name serversns1.p201.dns.oraclecloud.net, ns2.p201.dns.oraclecloud.net, ns3.p201.dns.oraclecloud.net, ns4.p201.dns.oraclecloud.net
DNSSECNot signed

DNS records

TypeValueTTL
A23.200.68.1598
MXmxb-0024c501.gslb.pphosted.com 10213
MXmxa-0024c501.gslb.pphosted.com 10213
NSns3.p201.dns.oraclecloud.net86400
NSns4.p201.dns.oraclecloud.net86400
NSns1.p201.dns.oraclecloud.net86400
NSns2.p201.dns.oraclecloud.net86400
TXT_5tbm3phed6tleblb4t0y64r8zfh04e260
TXTh1-domain-verification=cCUqmt7VaNkUbaSNYhduMLatytUgQWKm4m53bCDT88iVunSg60
TXTgoogle-site-verification=WNX1ysYVbECjYO8mGhlevACSFLeqRfUA6yYd4qszs7k60
TXTbitrise-verification=c9c4fc40190106f9-WykVWi6OT74360
TXTonetrust-domain-verification=62a359d40ad4415288a478471aa9fa3a60
TXTopenai-domain-verification=dv-PRJUv14xFokT9pfcVVLt746q60
TXTc9c731e4-8ab8-435e-8a42-80162938eaee60
TXTQCgdTs0lOACDexuWVTIA1cy0nbuzhnr1tjWr+IWs87zcnSLIUNiYRFQb5zCnAk31qvtK6o68qAZMuxFBolk7iA==60
TXTsuccessfactors-site-verification=ZGQ5NmJlYTYyNmY4ODRjOWUxN2NhZjZlNDkwNjZhMTNlMmM3NjdhMWQ4MDFmNjE4ZTRmOTgzMmQyZGE3YjJhYQ==60
TXTnjc99h5tdtjbgr4tx558qh9c9595b3ck60
TXTv=DMARC1; p=quarantine; pct=10060
TXTglobalsign-domain-verification=OQabhvx-zf_SprJqImOF_5WN9Qbwqj6vQAWtTNHOi360

SSL certificate

ValidValid
IssuerUS, GeoTrust TLS RSA CA G1, DigiCert Inc
ExpiresNovember 24, 2026
Days remaining14
ProtocolTLSv1.3
Names*.sephora.com, sephora.com

Email security

CScore 77/100 across SPF, DMARC, DKIM, MTA-STS and BIMI.
  • badSPF needs about 12 DNS lookups but the limit is 10. Receivers return a permanent error, so SPF fails. Flatten or remove includes.
  • warnNo MTA-STS: mail sent to you can be downgraded to an unencrypted connection.
  • warnNo TLS-RPT record, so you won't hear about failed encrypted deliveries.
  • goodSPF record found.
  • goodSPF ends with -all: servers you have not listed are rejected (hard fail).
  • goodDMARC policy is reject: mail that fails authentication is blocked.
  • goodDMARC aggregate reports are sent to mailto:[email protected].
  • goodDKIM keys found (selector: selector1, k2, s1, s2).
  • good2 MX record(s) found. Mail is handled by Proofpoint.
  • goodBIMI record found: supporting inboxes can show your brand logo.

About sephora.com

Who is the registrar of sephora.com?

sephora.com is registered with MarkMonitor Inc. (IANA ID 292).

When does sephora.com expire?

The current registration of sephora.com expires on September 23, 2033. It was first registered on September 24, 1996.

Does sephora.com protect its email with SPF and DMARC?

sephora.com scores 77/100 (grade C) for email security. SPF needs about 12 DNS lookups but the limit is 10. Receivers return a permanent error, so SPF fails. Flatten or remove includes. No MTA-STS: mail sent to you can be downgraded to an unencrypted connection.

What are the name servers of sephora.com?

sephora.com uses ns3.p201.dns.oraclecloud.net, ns4.p201.dns.oraclecloud.net, ns1.p201.dns.oraclecloud.net, ns2.p201.dns.oraclecloud.net.