hilton.com

Checked 5/14/2026, 10:53:03 PM · 38ms

Functional: p=quarantine. Reject when ready.

DMARC record

v=DMARC1;p=quarantine;fo=1;rua=mailto:[email protected];ruf=mailto:[email protected]

Policy (p): quarantine
Subdomain policy (sp): inherits p=quarantine
Enforcement % (pct): 100%
DKIM alignment (adkim): unset · defaults to r (relaxed)
SPF alignment (aspf): unset · defaults to r (relaxed)
Aggregate reports (rua): mailto:[email protected]
Failure reports (ruf): mailto:[email protected]

All tags (5)

vDMARC1DMARC version
pquarantinePolicy for the domain
fo1Failure reporting options
ruamailto:[email protected]Aggregate report URIs
rufmailto:[email protected]Forensic (failure) report URIs

SPF record

Found on the apex domain.

v=spf1 include:spf.protection.outlook.com include:_spf-a.hilton.com include:_spf-b.hilton.com include:_spf-c.hilton.com -all

Recommendations

Consider setting sp=reject explicitly for stronger subdomain enforcement. Currently sp is unset, so subdomains inherit p=quarantine.
DKIM alignment (adkim) is unset, so it defaults to r (relaxed). That is fine for most deployments. Set adkim=s explicitly only if your DKIM d= header matches the From: domain exactly.
SPF alignment (aspf) is unset, so it defaults to r (relaxed). That is fine for most deployments. Set aspf=s explicitly only if your Return-Path aligns with the From: domain exactly.

AI-assisted remediation

Want a tailored fix plan in plain English?

Wiredepth Pro sends this report to our AI engine and streams back a 30-day rollout plan tailored to hilton.com, with provider-specific tips when we can infer them from the data. 10 playbooks per month on Pro, 100 on MSP.

ProSee Pro plans→

Check another domain

Or share this URL with the team that owns the records.