public company · US

Comcast (Xfinity)

COMCAST CORP

Cable, broadband and Xfinity services.

Primary official domain
xfinity.com
Reviewed official domains
3 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
8
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
15
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF -all · 0/10 lookups · Mail: Not checked · checked 2026-10-19 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
comcastxfinity
Label aliases
Comcast · Xfinity
Official domains
comcast.com · xfinity.com · comcast.net (all)
Generated spellings
282 tracked · 153 observed somewhere · 129 not observed (all)

Official domains and email policies

Domains reviewed as belonging to Comcast (Xfinity). DMARC helps receivers check the From domain; lookalike domains remain possible. Published policies cannot confirm actual mail configuration or receiver behavior.

DomainRelationshipEvidenceDMARC policyPolicy sourceSPFReportingMailDKIMMTA-STSLast check
comcast.com
primaryReviewed —
Portfolio directory (wikidata_cik+financedb_ticker)rejectDirect~all · 5/10 lookupsAggregate reports requested (rua)Not checkedUnknown (no known selector)
Not checkedNot checked
2026-10-19 00:41 UTC
Records and check details

Published records

DMARC (_dmarc.comcast.com)
v=DMARC1;p=reject;fo=1;rua=mailto:…@emaildefense.proofpoint.com,mailto:…@dmarctest.comcast.net;ruf=mailto:…@emaildefense.proofpoint.com
SPF (comcast.com)
v=spf1 ip4:148.163.145.77 ip4:148.163.141.77 ip4:162.150.44.71 ip4:96.114.158.212 ip4:68.87.31.167 ip4:68.87.96.15 ip4:96.114.28.75 ip4:96.114.28.76 ip4:67.231.157.49 ip4:67.231.149.53 ip4:192.28.144.202 include:spfext.zapproved.com include:_spf.mdp.comcast.net include:_spf.comcast.com include:spf-00143705.pphosted.com ~all
MX (comcast.com)
Not checked
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing, and no key at the probed common selectors proves nothing.
MTA-STS (_mta-sts.comcast.com)
Not checked
TLS-RPT (_smtp._tls.comcast.com)
Not checked

Interpretation

  • p=reject: receivers are asked to reject failing mail.
  • Relaxed DKIM alignment (default).
  • Relaxed SPF alignment (default).
  • ~all (softfail): unlisted hosts are marked suspicious; this is not +all and does not by itself bypass DMARC.
  • 5 DNS-querying terms (include, a, mx, ptr, exists, redirect), counted recursively; the limit is 10.
  • Static check of the published record: syntax, every referenced include/redirect record, the DNS-lookup count and a/mx/exists targets (resolved to count void lookups). It does not evaluate SPF for any particular sending host.

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.comcast.com: ok, 1 DMARC record

Recent checks

  • 2026-10-19 00:41 UTC: DMARC reject; SPF ~all

Assessment posture-v2. DNS lookup failures leave the policy unknown.

xfinity.com
primaryReviewed 2026-10-18
DomainSpoof directory (seed)rejectDirect-all · 0/10 lookupsAggregate reports requested (rua)Not checkedUnknown (no known selector)
Not checkedNot checked
2026-10-19 00:41 UTC
Records and check details

Published records

DMARC (_dmarc.xfinity.com)
v=DMARC1;p=reject;rua=mailto:…@dmarctest.comcast.net
SPF (xfinity.com)
v=spf1 -all
MX (xfinity.com)
Not checked
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing, and no key at the probed common selectors proves nothing.
MTA-STS (_mta-sts.xfinity.com)
Not checked
TLS-RPT (_smtp._tls.xfinity.com)
Not checked

Interpretation

  • p=reject: receivers are asked to reject failing mail.
  • Relaxed DKIM alignment (default).
  • Relaxed SPF alignment (default).
  • -all: unlisted hosts fail SPF.
  • 0 DNS-querying terms (include, a, mx, ptr, exists, redirect), counted recursively; the limit is 10.
  • Static check of the published record: syntax, every referenced include/redirect record, the DNS-lookup count and a/mx/exists targets (resolved to count void lookups). It does not evaluate SPF for any particular sending host.

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.xfinity.com: ok, 1 DMARC record

Recent checks

  • 2026-10-19 00:41 UTC: DMARC reject; SPF -all

Assessment posture-v2. DNS lookup failures leave the policy unknown.

comcast.net
subsidiaryReviewed 2026-10-18
DomainSpoof directory (seed)rejectDirect~all · 7/10 lookupsAggregate reports requested (rua)Not checkedUnknown (no known selector)
Not checkedNot checked
2026-10-19 00:41 UTC
Records and check details

Published records

DMARC (_dmarc.comcast.net)
v=DMARC1;p=reject;sp=reject;rua=mailto:…@dmarctest.comcast.net
SPF (comcast.net)
v=spf1 ip4:96.103.146.48/28 ip4:96.102.19.32/28 ip4:96.102.200.0/28 include:_spfv6.comcast.net include:_spf.mdp.comcast.net include:_ipspf.yahoo.com ~all
MX (comcast.net)
Not checked
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing, and no key at the probed common selectors proves nothing.
MTA-STS (_mta-sts.comcast.net)
Not checked
TLS-RPT (_smtp._tls.comcast.net)
Not checked

Interpretation

  • p=reject: receivers are asked to reject failing mail.
  • Relaxed DKIM alignment (default).
  • Relaxed SPF alignment (default).
  • ~all (softfail): unlisted hosts are marked suspicious; this is not +all and does not by itself bypass DMARC.
  • 7 DNS-querying terms (include, a, mx, ptr, exists, redirect), counted recursively; the limit is 10.
  • Static check of the published record: syntax, every referenced include/redirect record, the DNS-lookup count and a/mx/exists targets (resolved to count void lookups). It does not evaluate SPF for any particular sending host.

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.comcast.net: ok, 1 DMARC record

Recent checks

  • 2026-10-19 00:41 UTC: DMARC reject; SPF ~all

Assessment posture-v2. DNS lookup failures leave the policy unknown.

“Not checked”: no check yet (mail, DKIM and MTA-STS facts were added later, so older checks show “Not checked” for them). “Lookup failed”: DNS result unknown. DKIM is probed at a fixed list of common selectors only. Report mailbox names are redacted.

Reports on official domains appear under “Official assets with reports” on the Reported matches tab.