public company · US

Marriott International

MARRIOTT INTERNATIONAL INC /MD/

Primary official domain
marriott.com
Reviewed official domains
1 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
5
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
6
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF -all · 5/10 lookups · checked 2026-10-19 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
marriott
Label aliases
marriott
Official domains
marriott.com (all)
Generated spellings
102 tracked · 0 observed somewhere · 102 not observed (all)

Official domains and email policies

Domains reviewed as belonging to Marriott International. DMARC helps receivers check the From domain; lookalike domains remain possible. Published policies cannot confirm actual mail configuration or receiver behavior.

DomainRelationshipEvidenceDMARC policyPolicy sourceSPFReportingLast check
marriott.com
primaryReviewed —
Portfolio directory (wikidata_cik)rejectDirect-all · 5/10 lookupsAggregate reports requested (rua)2026-10-19 00:41 UTC
Records and check details

Published records

DMARC (_dmarc.marriott.com)
v=DMARC1; p=reject; pct=100; sp=reject; rua=mailto:…@ag.dmarcian.com; ruf=mailto:…@fr.dmarcian.com;
SPF (marriott.com)
v=spf1 include:spf.marriott.com include:spf.givex.com include:mail.zendesk.com a:c.spf.service-now.com include:spf.protection.outlook.com ip4:65.221.12.128 ip4:65.221.12.148 ip4:70.42.227.151 ip4:70.42.227.152 ip4:68.233.76.14 ip4:68.233.76.20 ip4:68.233.76.41 ip4:216.34.69.5 ip4:34.194.251.20 ip4:41.138.70.80/29 ip4:52.86.138.215 ip4:23.251.231.176/28 ip4:23.251.231.192/28 -all
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing.

Interpretation

  • p=reject: receivers are asked to reject failing mail.
  • Relaxed DKIM alignment (default).
  • Relaxed SPF alignment (default).
  • pct=100 is a legacy tag removed by RFC 9989; its effect is receiver-dependent.
  • -all: unlisted hosts fail SPF.
  • 5 DNS-querying terms (include, a, mx, ptr, exists, redirect), counted recursively; the limit is 10.
  • Static check of the published record: syntax, every referenced include/redirect record, the DNS-lookup count and a/mx/exists targets (resolved to count void lookups). It does not evaluate SPF for any particular sending host.

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.marriott.com: ok, 1 DMARC record

Recent checks

  • 2026-10-19 00:41 UTC: DMARC reject; SPF -all

Assessment posture-v2. DNS lookup failures leave the policy unknown.

“Not checked”: no check yet. “Lookup failed”: DNS result unknown. Report mailbox names are redacted.

Reports on official domains appear under “Official assets with reports” on the Reported matches tab.